
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa
File: E21DEF607B5E11ED98247D60C4F9AE02.roa (raw, json)
Hash identifier: flivO9KZ3hNdVf6kTG0C2l09oeHTUSZTfnGjfG/rjIg=
Subject key identifier: 48:03:EC:EE:04:14:7C:2F:37:68:D6:B6:2D:1F:F8:E9:57:63:6D:31
Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial: 02BE
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa
Signing time: Sat 29 Aug 2026 01:51:54 +0000
ROA not before: Sat 29 Aug 2026 01:51:54 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138915
IP address blocks: 103.206.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Validity
Not Before: Aug 29 01:51:54 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a923b3a-6e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:a7:c3:0a:dc:f6:a8:54:70:27:07:0c:2a:
8e:8a:cf:b2:8e:5e:f4:89:2c:22:83:50:27:14:7e:
4b:2d:91:39:d7:7b:b3:1b:ea:e9:e5:ac:ac:b8:4a:
ea:4f:43:31:cb:f9:b9:b2:19:84:99:5d:c4:ac:09:
b4:69:c9:6f:23:ac:89:d8:25:cd:89:24:39:6f:62:
a1:a3:44:ee:e8:62:5f:f4:04:80:f7:5a:97:91:5c:
6c:75:25:a1:35:21:53:85:a8:db:c7:f9:a7:d5:64:
41:2d:31:3b:f7:92:22:93:0d:05:62:32:52:79:dd:
97:24:b4:7a:15:4a:e4:3a:8b:50:c0:a4:d1:c6:dd:
be:95:20:e3:76:10:7d:b2:6b:dd:60:5f:cf:29:f5:
1a:49:51:e3:46:ca:65:1f:d9:58:85:cb:3f:f0:1e:
b0:dc:7b:e8:d4:83:2a:da:74:3b:05:6a:68:b0:1f:
de:48:91:fd:cd:ea:f3:9a:8d:f7:ed:76:e3:24:42:
04:b4:3f:6e:0c:86:82:a2:55:a4:e5:7a:64:6a:49:
18:39:4c:3e:95:be:ee:d3:36:df:45:82:2e:fe:c8:
e7:ca:e5:dc:e2:0a:29:3c:9d:00:39:cb:af:77:14:
50:d6:2e:5c:c0:60:10:9c:9a:b2:78:ed:b7:91:f5:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:EC:EE:04:14:7C:2F:37:68:D6:B6:2D:1F:F8:E9:57:63:6D:31
X509v3 Authority Key Identifier:
keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.206.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f6:0d:7c:6f:05:ef:13:46:e0:1d:92:5a:66:d3:dd:13:80:
57:70:94:63:aa:e6:ca:73:a7:e2:3a:c4:c8:11:4b:26:ca:69:
72:b1:56:2b:a0:e6:53:54:df:97:85:6b:5b:75:c5:e8:59:81:
ee:f6:9c:1a:3e:e9:40:e0:93:4b:d6:ca:a3:e2:cb:2c:7b:89:
aa:6e:07:da:fb:5d:63:ad:2c:5a:f9:50:07:fb:4c:76:d3:18:
a6:00:01:26:2a:3a:83:8f:88:5f:89:03:ca:48:79:0e:93:66:
ea:04:b2:0c:1e:bc:6a:1f:1f:e0:24:40:08:de:7b:46:e5:07:
c6:3a:17:59:3d:2a:46:d3:f6:d0:9d:04:67:90:97:7a:97:73:
dd:13:a7:d9:bd:16:da:93:50:27:0c:99:91:65:88:40:97:87:
d8:e3:64:f2:c7:fc:af:25:b1:6b:eb:78:08:7c:09:d3:b4:18:
c2:90:e4:69:78:b3:08:33:60:df:c9:40:bd:b1:2c:7c:c0:7d:
af:91:3e:97:c2:0e:d3:27:9a:e7:7f:b1:a6:06:2c:ee:c1:a1:
9f:31:0f:ee:40:d6:c7:c8:52:b7:31:4f:28:48:8b:a2:92:75:
db:1d:cd:fe:5d:eb:0c:42:a3:8f:e0:22:5b:f2:89:b6:01:07:
49:47:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:12:36 2026 by rpki-client