
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/8C21D58ACCFB11F08C34EC45C4F9AE02.roa
File: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (raw, json)
Hash identifier: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=
Subject key identifier: 21:97:52:DA:80:37:18:04:92:C1:A1:A1:6C:0A:45:D2:86:CC:3B:95
Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial: 40
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/8C21D58ACCFB11F08C34EC45C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:07:30 +0000
ROA not before: Sat 29 Nov 2025 08:15:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55803
IP address blocks: 103.80.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Validity
Not Before: Nov 29 08:15:21 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a3d7a2-b099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:da:c0:3f:24:4c:a9:97:c8:90:65:37:dd:
dc:7f:85:fb:64:2b:4d:56:cf:72:37:09:a4:7f:49:
6f:f5:17:92:22:d7:df:eb:89:73:ce:a2:08:01:c0:
bb:84:18:50:bb:ed:d7:6b:fb:14:54:c1:d1:e9:c0:
32:c9:b5:5d:11:55:e9:d7:fa:c6:dc:5d:22:b4:32:
e9:3a:dc:c8:11:ea:3d:b0:a3:e0:bf:71:84:09:b9:
16:db:6a:8e:03:fc:e2:8f:2b:1a:27:33:06:b1:b1:
9e:e6:5b:06:81:70:90:60:80:28:d6:77:ee:43:dd:
43:96:54:78:87:79:a7:87:75:1c:09:12:b8:10:a1:
1e:11:2b:a6:92:63:d3:cd:65:5b:a6:b4:79:87:44:
60:b7:20:29:df:24:09:65:a4:3c:c3:9e:97:4e:8a:
2a:63:ba:e8:df:41:b5:a5:de:fa:42:01:e3:ca:b9:
da:25:d5:e5:30:40:e9:02:7a:1f:44:f0:d4:a6:81:
14:89:69:a8:dd:8c:8e:98:ca:e6:1c:8c:82:ff:ef:
77:27:7f:c3:01:66:af:63:85:07:09:1b:fc:47:03:
b5:47:32:10:ee:dc:03:58:46:e5:9d:d3:59:52:97:
c2:67:ab:fd:e5:c5:ee:68:57:e4:85:a0:bb:62:3d:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:52:DA:80:37:18:04:92:C1:A1:A1:6C:0A:45:D2:86:CC:3B:95
X509v3 Authority Key Identifier:
keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/8C21D58ACCFB11F08C34EC45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.103.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ee:e4:3a:ae:8c:14:09:f2:76:55:35:10:eb:0e:95:81:66:
6a:3d:6b:bd:0b:cb:66:d9:fe:bb:4a:f0:09:dd:94:a6:ce:9c:
d4:4f:2d:03:66:97:33:e9:0c:0d:ac:f2:8f:3d:c5:6b:85:0a:
15:2c:11:48:57:93:76:b0:69:8e:34:d1:f1:e4:1a:05:57:48:
2f:5c:94:5e:07:57:d2:25:0f:b9:50:27:ff:3a:08:49:3e:21:
8f:f3:90:19:b7:01:55:a2:20:79:f5:1b:40:bd:d7:1b:43:26:
7e:f6:37:3c:96:7c:8d:26:98:dd:5f:58:47:52:20:c3:b2:e2:
59:a3:73:e8:2b:87:32:bf:05:e6:12:3b:00:21:e5:3b:73:6b:
78:e0:62:3e:b6:c1:dc:fe:9d:5a:de:7a:23:e8:62:8d:6e:2f:
3e:43:79:d9:b6:91:2e:98:fb:f3:c5:ac:a2:44:e2:75:d7:16:
f2:64:e9:2b:d1:81:0e:18:9d:b9:10:e7:41:5f:93:b6:d1:e3:
6e:bf:71:0a:dd:51:c6:d5:0a:3f:4f:e7:b0:85:ab:12:6f:c1:
4e:f1:dd:8a:68:60:9c:56:b8:c6:0a:a7:24:6d:1d:07:c9:33:
4f:36:ea:91:b1:e2:b6:6a:8e:10:44:79:d1:bb:80:ae:32:7f:
b8:f0:69:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:00:12 2026 by rpki-client