
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
File: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (raw, json)
Hash identifier: zSG0LGFJE7WuZbbBJfnMq6hMoXOF+N0WFOj4d7BqNDI=
Subject key identifier: B5:AC:67:9A:A9:49:3F:92:2C:0C:C6:89:17:FB:E6:FC:8F:2D:33:A4
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 1868
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:43:42 +0000
ROA not before: Wed 20 Aug 2025 16:54:57 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132018
IP address blocks: 103.21.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6248 (0x1868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Aug 20 16:54:57 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4428d-1394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:b9:92:49:a2:76:3c:bb:4c:a2:f3:7c:66:
32:15:4d:4c:3c:60:29:d2:e1:a5:67:bd:46:8f:60:
e7:be:14:14:6e:07:f3:64:27:fe:ce:5d:82:cc:5c:
3f:99:7b:ac:4c:68:8e:6c:1e:c0:7c:db:4f:d3:67:
95:db:08:22:73:0c:27:59:a4:e9:30:af:ad:23:1a:
3f:41:34:27:16:63:58:d0:40:8a:30:07:09:60:48:
8c:6a:c6:a8:59:b6:10:b0:37:18:cf:7f:2f:2d:2d:
35:3e:c4:ea:98:01:bb:3f:19:8e:a8:90:d3:6a:9f:
59:51:09:95:c6:c8:4f:c2:97:3d:20:73:1c:b0:c6:
27:83:ba:ad:bb:8c:9c:fb:76:a8:53:63:79:1a:52:
55:28:d6:56:e3:eb:b1:0f:ab:77:63:d2:f0:90:eb:
16:95:3c:aa:9f:ea:c4:8a:71:b8:3a:1c:bb:62:0f:
6e:fc:2f:ee:d1:2b:eb:9f:78:78:f3:17:95:dd:95:
32:ec:1d:3e:f7:7e:b6:1f:5a:be:e3:ed:f6:85:e8:
7c:68:04:48:62:c2:2f:05:6b:70:4f:eb:1c:7c:ed:
ef:59:c8:b1:bd:46:7d:b7:50:88:1a:91:4b:a2:ae:
5e:e7:e3:f0:ab:29:c6:19:38:10:dd:60:1e:cb:52:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AC:67:9A:A9:49:3F:92:2C:0C:C6:89:17:FB:E6:FC:8F:2D:33:A4
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.21.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9e:6b:a4:4f:96:dd:10:a2:c3:65:dd:46:fc:e9:e8:7c:05:
c4:99:9c:15:98:6a:9b:5e:ab:2e:fa:71:e1:40:6b:cc:e3:c8:
13:a8:a1:99:db:29:33:73:65:91:17:21:c2:db:51:c3:fa:bc:
66:98:e2:1e:5c:30:89:1b:80:ab:8c:03:d5:05:d0:ca:db:26:
50:fb:fa:80:99:bb:80:e1:a6:94:94:d6:e1:3e:ef:be:43:53:
4b:8f:dc:d0:b0:ce:5e:af:1f:1d:5b:a0:b5:9d:46:d8:a1:a1:
e5:31:98:23:ba:b0:c4:fb:f8:5f:ca:93:f4:c7:d6:79:b1:7c:
80:12:8d:22:58:7a:ab:7c:01:74:ea:b9:64:ed:0e:98:f4:af:
70:f3:92:5f:32:4c:70:24:bd:16:99:2a:84:3a:6e:e9:c3:e8:
4c:4f:0a:42:b2:22:8e:01:de:ca:02:95:69:4f:9c:ec:d6:15:
6f:83:0e:55:af:33:8b:3f:17:97:31:82:08:cf:6a:5b:08:5b:
59:21:85:18:19:16:91:10:d8:28:1c:84:4f:21:d9:9b:85:be:
db:c2:e6:02:95:94:83:be:41:1e:48:77:57:40:08:a8:fb:e7:
2b:da:ab:7d:50:99:89:08:d9:d4:c8:0c:b8:fa:0b:ac:2f:5f:
37:da:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:28 2026 by rpki-client