
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/21CF5E6C7AF111EF8BC4E684C4F9AE02.roa
File: 21CF5E6C7AF111EF8BC4E684C4F9AE02.roa (raw, json)
Hash identifier: Cprdu9cuCbSz/h/nJqx/JHIKHTpgIwLqMNyIr8CCMhw=
Subject key identifier: 0A:AB:9C:1E:A6:61:4E:E3:34:2E:91:78:F7:20:88:A1:9A:E5:A7:FD
Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial: 0868
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/21CF5E6C7AF111EF8BC4E684C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:02:53 +0000
ROA not before: Wed 16 Apr 2025 21:31:44 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132794
IP address blocks: 202.92.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2152 (0x868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Validity
Not Before: Apr 16 21:31:44 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47f4d-8bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:4e:58:d0:3a:cf:e6:dd:cd:f2:19:e2:e7:
ea:4f:83:73:88:b2:48:b2:2c:0d:9b:10:00:65:c2:
d0:a2:63:0f:2d:16:b8:6b:96:d2:32:24:82:6d:e8:
22:f0:64:f1:45:27:bd:c1:5a:c9:1b:12:ab:e6:f4:
7d:ef:f5:99:6d:7f:b7:96:0d:85:01:42:e5:67:39:
c7:90:54:8a:09:a0:2c:49:e5:6b:9b:2d:7c:7b:a2:
c9:bc:78:99:d3:d1:4a:05:1a:e6:1b:ad:03:2c:07:
91:56:c2:73:6e:3c:67:38:15:e6:54:89:71:63:5d:
2b:57:c3:0e:78:d4:bf:5a:c4:87:2c:46:21:f8:b8:
10:e2:38:cd:d5:aa:66:d1:f3:34:35:0d:3f:4a:20:
16:48:4d:58:73:80:cd:51:1e:04:97:17:00:89:e8:
97:c6:38:00:ae:f4:4a:9f:5b:32:8f:dc:32:a6:f5:
f0:6e:3c:c3:56:e2:80:cb:4b:83:d6:32:bf:ec:b7:
a8:27:38:38:8c:37:bc:d9:79:5e:a7:c0:d7:e1:cc:
67:62:01:a1:cf:19:76:52:73:5f:47:71:9f:fa:f6:
41:08:1a:24:0e:22:39:e0:2e:02:60:d9:ba:c0:c1:
9e:bd:a6:c3:84:bd:3a:cb:4d:93:fc:0a:93:e3:fc:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AB:9C:1E:A6:61:4E:E3:34:2E:91:78:F7:20:88:A1:9A:E5:A7:FD
X509v3 Authority Key Identifier:
keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/21CF5E6C7AF111EF8BC4E684C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.92.157.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a2:41:51:6e:d7:0b:2b:2d:ae:14:26:ee:41:fe:e1:33:27:
e0:aa:52:c4:57:f4:b5:5e:7d:9d:fe:8c:a1:49:19:ca:56:a0:
ba:f2:31:30:e9:31:c1:86:d4:07:40:d2:44:9b:6a:92:5e:1d:
aa:f6:94:41:d1:78:44:f3:82:84:22:46:4b:d0:50:07:90:7c:
96:5e:5c:f0:63:48:11:bc:99:eb:d2:8c:68:27:dc:38:bb:66:
f9:7c:8a:9e:21:be:b3:82:d6:bf:09:76:35:fb:7c:4e:90:c0:
90:ec:1e:00:e9:e9:46:78:39:22:0e:c4:a8:c0:ac:65:67:7b:
be:ab:be:2b:fb:da:fa:ba:26:07:69:a5:0b:47:8a:44:81:3b:
14:bd:1b:11:aa:7a:37:6b:9b:95:85:c3:48:61:a9:cb:85:ab:
57:1e:55:6d:54:11:5d:c8:0e:67:e9:7f:c4:23:a8:55:6a:45:
5f:8c:a8:28:b8:39:e2:b0:b5:84:b6:55:5e:81:90:6e:c2:8f:
e3:fa:4d:96:df:c3:c2:0f:64:41:11:11:3c:ad:50:25:5a:1b:
c2:5d:89:07:e4:6f:d8:8a:3d:fb:10:99:a9:21:78:66:f4:73:
52:24:f3:38:c8:48:18:1d:32:6f:4f:9a:8a:ed:aa:37:53:34:
f9:75:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:55 2026 by rpki-client