
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa
File: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (raw, json)
Hash identifier: N7d2kdSjz/jwSyQEPzpDvWGJTq/1G0TljCkUhHZagrM=
Subject key identifier: 80:68:15:5B:95:CD:CC:8E:0D:60:D7:5C:59:BF:18:05:38:E9:FA:A3
Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial: 01C9
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa
Signing time: Thu 11 Jun 2026 06:41:43 +0000
ROA not before: Thu 11 Jun 2026 06:41:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 213549
IP address blocks: 103.14.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Validity
Not Before: Jun 11 06:41:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2a58a7-ad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:86:99:8f:a0:e2:42:07:f6:6c:fe:08:7c:
c0:1c:f1:97:cc:3c:96:57:8f:36:51:86:6a:ad:47:
f3:0c:e2:76:e9:9e:09:0d:9f:94:f8:e1:78:00:d2:
c7:b4:af:58:63:b8:32:cd:26:c9:47:e8:3e:d3:7f:
be:81:29:7a:3b:ea:b1:0c:82:c4:a4:99:e3:c2:53:
ba:ed:35:56:3e:89:4d:a7:08:75:fe:e0:07:5c:57:
0d:88:3a:85:cf:bf:20:b1:54:1e:45:9f:cb:19:bb:
8f:21:a8:0e:74:e9:e7:46:c9:16:f8:46:f6:b8:a4:
74:6b:a6:ac:50:ec:8b:63:c2:15:14:6a:3c:52:af:
93:8e:a1:d7:33:de:d8:13:17:71:4d:e1:02:0a:77:
02:62:20:61:5e:ea:ef:09:93:36:61:93:76:cc:b5:
b0:63:7a:5c:9d:2a:26:23:58:42:aa:5d:c5:34:0e:
95:8b:a0:39:e8:2c:49:42:ea:27:7a:10:ab:c8:d8:
79:33:c0:e5:b3:70:b5:79:03:e7:21:b3:eb:44:06:
f4:66:e8:39:b7:bf:a8:85:37:85:86:37:20:f5:b7:
ee:e3:67:a2:f3:48:cb:71:36:5c:14:fe:aa:cb:0d:
3f:49:60:5e:95:3a:b2:38:fd:b1:8a:4a:50:86:73:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:15:5B:95:CD:CC:8E:0D:60:D7:5C:59:BF:18:05:38:E9:FA:A3
X509v3 Authority Key Identifier:
keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fd:b3:72:68:48:03:7c:59:b5:1a:87:9d:80:3f:68:b8:1d:
c2:7b:60:00:7e:d9:35:1e:d8:e1:70:55:e9:ec:4e:03:8c:5f:
e3:cc:c5:db:43:fd:e6:9b:b5:32:88:7c:e7:19:db:0f:7e:34:
d5:8a:43:e4:fa:e0:07:90:85:f7:6f:24:80:ca:48:25:4f:29:
5f:94:7b:c5:db:0f:21:3e:79:cb:d3:52:23:b8:a3:cb:27:a2:
98:42:1b:1d:65:c1:03:5d:7a:e5:bb:7d:35:e5:6a:8c:12:72:
81:85:a5:97:9e:80:60:fb:04:b0:51:92:ac:f4:dc:f4:00:68:
a9:6a:f7:80:9c:e3:50:8b:e3:a0:17:b1:95:01:a6:39:9d:f2:
5f:0b:4c:c7:17:f9:13:3f:41:75:1e:9a:5e:1b:d2:17:c6:9a:
6a:38:37:79:a6:d0:7d:64:d6:6d:28:6a:11:fe:50:e4:e8:94:
09:2b:31:9e:f2:d9:a6:3d:6d:01:73:74:e5:a0:e1:59:7b:d1:
03:ed:e5:2b:87:75:d8:f1:c2:31:e7:57:46:d3:83:f9:6d:0c:
0e:12:1d:fc:37:a6:1f:d1:db:c2:40:24:94:a9:49:cb:cd:5a:
c3:c9:47:bd:e5:26:a6:77:cf:f8:31:e1:5e:1a:90:9c:13:4f:
39:7c:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:03 2026 by rpki-client