
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/AE21A9C6818911EA81577016C4F9AE02.roa
File: AE21A9C6818911EA81577016C4F9AE02.roa (raw, json)
Hash identifier: /hHfMzw3wFKPf6r1EjShKflD2YZUUETl3Ub8hWJ+iIM=
Subject key identifier: C2:FC:AF:7D:77:8D:78:6C:79:21:5D:42:31:2C:85:58:31:93:A4:28
Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial: 1979
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/AE21A9C6818911EA81577016C4F9AE02.roa
Signing time: Sat 08 Aug 2026 16:23:25 +0000
ROA not before: Sat 08 Aug 2026 16:23:25 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45352
IP address blocks: 162.253.16.0/22 maxlen: 22
162.253.16.0/24 maxlen: 24
162.253.17.0/24 maxlen: 24
162.253.18.0/24 maxlen: 24
162.253.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6521 (0x1979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Validity
Not Before: Aug 8 16:23:25 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7757fd-b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:99:59:93:7c:7e:b3:8d:7e:8b:89:85:3d:
9e:7a:1c:6e:47:7f:77:f5:44:9b:57:88:0b:8e:5e:
33:e9:53:8f:6d:3c:3d:9c:f1:18:10:f3:43:27:5f:
fe:b2:d2:7b:f4:a6:d6:fd:9e:3a:60:46:3b:f1:d7:
0c:01:7a:92:91:3e:8e:b7:c0:0d:d1:db:23:6a:4d:
cf:21:59:48:49:28:c2:3e:a7:54:89:c7:1c:ac:40:
58:c6:31:ec:ae:cc:bd:5b:4a:6e:d6:dc:fa:d3:8d:
5b:a2:2d:ee:bd:f8:09:38:c5:30:b1:8c:ad:af:7d:
32:bd:86:4b:6e:8f:03:30:47:c6:59:57:07:a0:c7:
77:96:e4:40:01:89:8e:03:52:55:a8:9e:e8:f3:b8:
4c:2e:db:a7:ea:99:f3:d5:12:ce:ce:bb:a9:32:44:
16:d9:78:a0:07:b7:cc:95:a0:68:ff:e7:bb:e5:e6:
21:0f:bf:e2:8b:59:15:92:ba:42:e6:53:ec:a7:9b:
d2:e4:3b:c8:a0:9a:94:13:cc:db:a5:8b:ec:f0:cf:
97:58:31:b1:ec:dd:7b:74:d6:50:04:1f:43:1a:48:
71:48:a8:d3:a9:bf:14:de:77:de:e3:9b:dd:c3:91:
39:80:69:e6:dd:fe:b9:55:6a:bd:d3:cf:26:43:51:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:AF:7D:77:8D:78:6C:79:21:5D:42:31:2C:85:58:31:93:A4:28
X509v3 Authority Key Identifier:
keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/AE21A9C6818911EA81577016C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
162.253.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:6e:b2:08:2d:ab:b0:a6:0e:cb:2f:47:ae:5b:1a:a0:44:a0:
c6:02:5e:d2:cf:97:62:7e:91:88:b3:e7:b3:4c:8b:81:bd:16:
6a:4c:08:9a:ab:c1:d7:67:76:8b:cb:31:d2:87:1f:65:32:ab:
81:53:a4:fd:f4:53:b9:ba:a0:e1:62:d9:f5:e7:c7:4a:17:27:
1d:e9:20:f6:65:89:5f:6e:41:30:72:14:db:32:8b:46:be:2d:
9b:e8:b3:76:4b:29:f8:cd:56:c6:fe:be:b5:ca:56:d2:41:b2:
49:99:96:3e:65:e4:e7:28:1b:34:49:91:ec:f2:49:dc:48:2e:
0b:47:09:07:00:31:e7:89:3a:17:7b:b0:42:c7:91:70:00:30:
57:26:ba:60:3e:6b:4a:5b:af:a2:e6:9d:48:f6:02:89:c9:3d:
46:95:33:4b:43:dc:dd:f9:ed:bc:31:50:4e:00:af:3f:d7:7f:
ea:53:74:bd:dc:90:af:ea:59:d2:3a:8e:a0:a6:9c:82:4a:0e:
9a:3f:92:54:cf:9d:32:b9:94:cb:36:44:7a:d7:50:b5:db:68:
e1:96:6d:87:19:ae:ef:62:20:45:1e:6b:14:91:16:bb:fb:a0:
93:d8:18:6d:c2:e4:a7:3a:77:de:29:1b:40:71:b0:a0:be:e3:
9e:bc:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:38 2026 by rpki-client