
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa
File: E2AD90E813E811E9B287C144C4F9AE02.roa (raw, json)
Hash identifier: ZGLBdSKyApanjt3DB4LGqUMAAL9hh/eBxEwyqsKMNwI=
Subject key identifier: CA:56:B4:63:BA:69:41:10:69:62:54:DA:77:07:9D:47:03:54:1A:49
Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9
Certificate serial: 2E2E
Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa
Signing time: Thu 04 Jun 2026 16:17:50 +0000
ROA not before: Thu 04 Jun 2026 16:17:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55651
IP address blocks: 103.24.120.0/24 maxlen: 24
103.24.121.0/24 maxlen: 24
103.24.122.0/24 maxlen: 24
103.24.123.0/24 maxlen: 24
2406:bd00:de00::/48 maxlen: 48
2406:bd00:de50::/48 maxlen: 48
2406:bd00:decd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl
rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11822 (0x2e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9
Validity
Not Before: Jun 4 16:17:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21a52d-fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:0e:2a:14:75:13:61:95:f7:d1:cc:e6:cd:
5d:08:06:3d:e4:6a:ba:62:19:d9:2a:1c:6a:93:76:
6f:3e:ed:a1:75:80:ef:21:0d:c1:d5:b7:09:be:c6:
db:ef:25:ab:56:4d:70:29:6d:86:8f:61:17:77:05:
f9:e8:1b:d3:f1:43:5d:ae:97:df:01:ee:27:6b:9c:
02:b0:59:84:1e:64:be:54:f5:33:2f:ee:c5:bd:7b:
1b:f7:09:1a:5d:2c:cd:13:3e:e4:76:19:41:2f:21:
b8:e3:67:d0:1a:8e:8e:ed:77:c6:f3:de:81:e4:8d:
67:af:84:52:a9:0c:67:6e:e2:1f:fb:7d:2f:ca:bd:
ad:6f:39:cd:ca:18:f6:84:95:01:b0:7c:06:31:e6:
8f:3b:1a:15:cd:c7:0c:df:c1:0e:ac:e1:ad:5d:49:
ff:80:99:16:fa:cc:04:42:de:2f:73:89:5b:18:af:
bb:e5:5f:e1:fb:a3:1b:c4:e9:f5:be:3e:88:7a:0e:
cf:0c:f4:70:3b:ad:3c:18:8e:fe:5e:1a:90:25:f5:
52:61:e6:25:45:24:d6:e0:a1:0a:2c:ba:68:d8:2b:
a7:c5:65:68:d2:3d:d5:93:52:29:d9:8a:12:ec:a5:
55:0a:e3:dc:c1:48:d0:43:28:17:b6:50:6b:73:ad:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:B4:63:BA:69:41:10:69:62:54:DA:77:07:9D:47:03:54:1A:49
X509v3 Authority Key Identifier:
keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.120.0/22
IPv6:
2406:bd00:de00::/48
2406:bd00:de50::/48
2406:bd00:decd::/48
Signature Algorithm: sha256WithRSAEncryption
55:13:e4:7e:33:0d:4c:fe:a1:d1:64:c7:bc:6e:33:8f:14:3d:
f6:1c:b2:01:3a:23:ac:64:3a:d8:62:6a:68:91:e6:bf:b2:3b:
d5:5a:cb:cd:90:46:7d:8a:8e:7f:36:95:e0:1f:50:e6:3d:25:
ff:67:13:da:b8:38:37:75:b1:10:e3:c7:bf:77:c7:df:97:60:
14:9a:5c:5c:c9:d3:79:e4:81:49:8a:12:99:f4:b0:34:2f:d8:
f7:7c:6f:0d:4c:f7:69:f3:12:35:b7:0e:82:fe:c8:40:23:cf:
38:aa:8b:e3:a1:bd:70:05:ff:7c:51:bf:4c:65:e6:ec:72:79:
35:46:d6:b6:21:60:9a:ba:db:12:3c:20:68:4b:a1:22:39:20:
91:b2:b1:fb:0e:d0:6a:fe:4e:e6:21:38:87:f3:7e:5c:3e:30:
d2:58:f1:5f:a3:c8:72:f8:5a:ba:53:ae:0b:a0:18:34:e9:3a:
6e:3d:b6:07:29:00:74:0f:fd:46:da:9f:80:98:f2:6c:25:7d:
93:3d:a1:97:36:e0:7a:f6:e5:22:58:b4:d4:f4:33:98:1e:53:
22:e2:b2:b1:25:64:7b:14:83:e6:a7:9c:c2:8b:6d:2b:0c:0d:
aa:fa:5e:66:24:dc:a7:a5:11:fa:76:d0:dd:50:0c:93:d8:fc:
97:77:c4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:10:53 2026 by rpki-client