
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa
File: E21DEF607B5E11ED98247D60C4F9AE02.roa (raw, json)
Hash identifier: R3KADOtwsyG/v2+mGTP92tv9io+mPYskKwwNor02wSk=
Subject key identifier: C5:F2:CD:D6:6E:E9:E7:F4:69:48:23:BB:00:82:8D:79:17:CD:F1:84
Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial: 025F
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:58:32 +0000
ROA not before: Sat 13 Sep 2025 02:38:49 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138915
IP address blocks: 103.206.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 01:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Validity
Not Before: Sep 13 02:38:49 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a41bd8-a0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:2d:37:dc:2f:12:d0:d4:a3:bd:68:00:03:
5b:00:39:2e:7f:fa:d3:8d:bb:01:76:44:ca:3e:a5:
05:d8:14:48:07:95:5e:0a:2a:07:21:fc:85:ae:cd:
e4:55:43:3b:88:c6:e9:cb:e9:1b:ff:7b:fe:14:c6:
38:0b:c0:10:62:9b:0b:3e:a6:e9:7a:b8:2a:61:1b:
f3:1b:42:a8:77:5d:9b:ae:d3:e0:27:0b:98:66:12:
0f:1d:e6:7a:03:08:66:ea:46:6e:89:38:0c:d9:5d:
0c:d5:64:ec:c2:94:b3:f3:31:0c:c4:8f:bc:0d:3d:
e7:9e:3f:be:8f:6d:b4:dc:9d:1c:0b:47:f4:3c:84:
ca:f7:7f:5b:76:56:23:7a:07:33:56:e6:3b:b9:d0:
57:e6:7d:2f:23:1b:af:11:96:5f:fe:15:07:b5:54:
d8:84:6f:05:14:c8:b4:a6:04:30:c3:b4:b1:f7:b9:
b9:dd:2d:61:b2:e8:7d:75:2d:40:62:a8:7a:0a:23:
a2:d7:92:bc:14:8b:4e:ac:26:93:8c:6a:e5:9d:09:
8d:60:2e:60:3b:45:2b:28:84:f9:61:f9:df:c2:e1:
bf:4f:3e:1c:fc:3d:4f:a9:06:3b:b9:7f:c9:21:d5:
26:e2:bb:d5:c4:ff:04:06:aa:08:b2:58:8f:4e:d7:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F2:CD:D6:6E:E9:E7:F4:69:48:23:BB:00:82:8D:79:17:CD:F1:84
X509v3 Authority Key Identifier:
keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/E21DEF607B5E11ED98247D60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.206.154.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a0:0b:0d:8f:f8:d3:80:39:39:4e:34:9f:9b:d8:46:21:eb:
87:09:fa:bb:b0:6a:cf:a4:cb:39:9d:10:59:c4:7e:4a:a6:c6:
1b:f0:a0:71:ea:fd:19:16:c6:e4:6b:62:49:55:0f:51:39:14:
95:04:0a:88:e6:1d:89:84:25:96:9c:7b:d9:f1:f9:5a:b2:81:
9d:c6:6c:59:a8:22:cb:62:b5:52:87:72:0f:42:88:fb:ea:da:
f8:5b:fb:07:ec:e4:d7:03:0e:f6:06:e6:2b:28:86:04:c8:29:
87:89:dc:dd:5e:91:17:ec:32:2c:1a:1e:3c:96:0e:83:ba:86:
88:76:63:a4:22:51:4a:00:5e:50:65:aa:eb:9a:21:2c:87:73:
50:37:ac:63:4c:c3:5e:15:38:96:d3:51:c3:e9:06:72:bf:db:
49:b6:0d:cf:6a:b4:fa:2d:24:72:d8:d1:04:2f:ac:2d:b1:2c:
35:8e:05:b3:2d:46:f8:ce:48:af:d2:f0:01:86:f3:1b:fd:f4:
56:4c:ad:3a:e1:64:8e:74:97:bd:fb:9f:28:cd:3e:b7:a8:0e:
f3:54:ef:b0:ec:d0:17:a7:c4:e4:3b:8d:d9:12:8f:02:ca:7a:
19:dd:53:57:f0:29:f1:1b:02:a7:a6:ef:b6:01:f0:71:58:5c:
9f:c0:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:19:12 2026 by rpki-client