
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F6921460F58D11F0BCCF7FE5756F56BC.roa
File: F6921460F58D11F0BCCF7FE5756F56BC.roa (raw, json)
Hash identifier: i5A7HWZGNtrSFGme8+cE96qqxQwsNoTCyoGxwxhU1Wk=
Subject key identifier: 84:2D:B4:3F:E2:B1:E0:08:04:4C:62:AE:06:F2:FD:02:D6:1D:D7:67
Certificate issuer: /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial: B3
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F6921460F58D11F0BCCF7FE5756F56BC.roa
Signing time: Sat 19 Sep 2026 07:45:53 +0000
ROA not before: Sat 19 Sep 2026 07:45:53 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 58750
IP address blocks: 103.21.48.0/22 maxlen: 22
103.21.48.0/24 maxlen: 24
103.21.49.0/24 maxlen: 24
103.21.50.0/24 maxlen: 24
103.21.51.0/24 maxlen: 24
2403:ecc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Validity
Not Before: Sep 19 07:45:53 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aae3db1-ec46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d2:d4:87:10:2a:68:c4:76:4d:d4:39:94:16:
06:b8:46:53:7c:af:ab:1d:ad:fa:4d:ff:14:8a:4a:
23:65:49:40:6d:33:6e:37:ec:66:57:0b:5f:e1:53:
10:19:b0:ce:ab:73:57:84:5a:69:8b:e4:c2:a5:81:
99:53:eb:77:d5:33:2b:3d:16:5b:8b:80:5f:b4:69:
95:f4:c7:e1:55:27:6b:eb:b4:a9:a3:99:dc:1e:a8:
a4:6e:8d:5e:50:d7:38:08:ea:0e:6f:f8:06:22:b3:
92:70:37:a6:05:59:41:c9:6f:66:d8:df:1f:f5:14:
ab:35:0b:8b:0e:89:a7:e8:ae:57:03:77:51:2b:3f:
56:ca:ff:7a:4a:1d:67:c5:83:ce:94:93:69:e8:dc:
e1:d1:cc:a0:4c:54:33:2e:8a:6c:f5:96:0b:c9:b6:
7a:bd:b8:71:f8:76:80:ce:e8:54:b7:b4:84:28:14:
57:bd:ab:42:3c:c6:b7:ef:e1:80:9c:e6:46:14:6f:
da:ec:f2:24:b0:71:9c:3e:c4:21:7b:56:e2:47:2c:
88:15:42:13:68:a8:d8:3f:d1:6e:0d:cb:4b:c0:56:
de:c3:95:db:0c:f7:f9:ea:c6:7e:8b:61:56:8e:bf:
82:f6:25:a0:ff:64:b0:44:90:e7:66:e2:92:15:13:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:B4:3F:E2:B1:E0:08:04:4C:62:AE:06:F2:FD:02:D6:1D:D7:67
X509v3 Authority Key Identifier:
keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F6921460F58D11F0BCCF7FE5756F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.21.48.0/22
IPv6:
2403:ecc0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:b1:4e:6d:3e:b4:44:7d:17:af:17:93:9c:f2:88:43:b8:7c:
ab:14:96:15:7c:58:50:80:fb:de:6f:78:c0:a4:51:62:1c:89:
6b:80:67:cb:44:83:21:ee:c6:4b:bd:72:b9:42:78:4b:eb:da:
25:23:5c:7e:a4:a9:7b:f9:13:3f:51:58:c6:b5:90:ec:8d:c9:
26:1c:c5:a1:8b:07:bd:6a:4f:9c:88:ed:37:ac:24:81:68:59:
4b:24:7a:55:fd:ce:73:6d:a5:fa:d6:da:08:28:f9:3b:88:6e:
8c:f0:17:be:66:19:10:fc:ef:13:1f:2a:95:c5:a8:35:82:fc:
6e:ee:d0:e7:07:bf:9f:b0:ae:d1:27:7d:26:7f:b8:97:e6:b7:
9f:6d:90:f1:18:a8:31:65:c5:e3:83:b7:fa:a8:36:03:9d:3f:
c2:94:45:6f:58:e6:27:f4:a6:1f:72:41:57:2b:4d:a4:89:ba:
a0:dd:e1:bb:19:41:4f:ab:b4:fe:1c:56:ab:31:ff:75:a4:6e:
e2:20:b2:c4:eb:3c:f1:02:cf:ae:70:58:13:55:fb:ab:0c:76:
ae:64:d6:2a:65:a9:8e:77:c9:06:08:76:56:08:29:6c:da:b3:
b3:f5:df:c8:a1:ed:54:4b:0d:90:e2:41:b9:d0:e7:0d:37:c6:
2c:91:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:46:56 2026 by rpki-client