
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa
File: F21C48F48AF811ED89B22845C4F9AE02.roa (raw, json)
Hash identifier: IcH4dg6kk7cde0x2+WG4H/eyPG3lQ7Xkvay29l35ygk=
Subject key identifier: 73:25:3A:2D:61:7C:C6:5E:11:96:B0:67:4F:91:CD:E5:DA:C4:B0:70
Certificate issuer: /CN=A911BFB0/serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
Certificate serial: 026D
Authority key identifier: 5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:06:00 +0000
ROA not before: Thu 24 Jul 2025 17:57:17 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132100
IP address blocks: 103.70.216.0/22 maxlen: 22
103.70.216.0/24 maxlen: 24
103.70.217.0/24 maxlen: 24
103.70.218.0/24 maxlen: 24
103.70.219.0/24 maxlen: 24
182.255.52.0/22 maxlen: 22
182.255.52.0/24 maxlen: 24
182.255.53.0/24 maxlen: 24
182.255.54.0/24 maxlen: 24
182.255.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl
rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BFB0, serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
Validity
Not Before: Jul 24 17:57:17 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a51ab8-14cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:d9:f5:09:50:78:c0:54:a5:13:c3:8c:78:
10:6f:ac:03:cc:35:92:e4:58:f9:ae:bb:61:3f:4e:
1c:7f:7f:16:56:87:18:c0:a8:79:72:bb:03:44:93:
43:69:d1:ec:89:e5:b3:a1:b0:c7:33:c9:51:51:a6:
c0:a1:58:9f:68:12:9d:0b:c5:22:4c:6d:32:00:55:
88:76:6d:ec:79:28:4e:98:56:06:f1:50:14:e4:a7:
84:f3:b1:39:0a:16:e4:10:7b:d9:0d:3f:ad:70:2d:
f9:d4:42:19:d8:8e:c4:79:cd:9c:24:c2:6c:38:d2:
96:ee:94:d2:93:25:cf:0c:e8:b1:57:c8:f2:d7:45:
e6:ea:c1:5f:55:c8:6b:78:0d:0b:64:aa:5c:7a:ef:
b1:01:5d:7d:1b:07:6d:85:b7:5b:c1:d0:09:5e:5d:
3f:64:dc:6a:e5:b2:1e:b2:96:36:0e:66:fe:e7:e1:
4c:05:6f:b6:cc:98:75:43:ce:cf:26:b1:26:6b:0b:
8a:eb:38:ad:dd:50:22:9f:b5:f4:70:10:b2:63:d8:
c1:2f:14:45:fb:90:6e:5a:c3:1f:ba:fb:44:79:5d:
3c:76:fa:c3:81:fa:fd:60:ff:2b:c5:4e:7e:18:43:
77:4b:e1:9c:83:c7:ad:d4:56:1f:7a:b6:ef:be:de:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:25:3A:2D:61:7C:C6:5E:11:96:B0:67:4F:91:CD:E5:DA:C4:B0:70
X509v3 Authority Key Identifier:
keyid:5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.216.0/22
182.255.52.0/22
Signature Algorithm: sha256WithRSAEncryption
94:52:3e:ed:e5:f6:5e:3e:bc:39:85:d9:2d:28:05:af:60:b6:
1c:9b:77:2e:0f:bd:35:d4:79:e6:24:8a:36:f6:14:a6:5d:76:
b6:e0:96:1b:b5:45:59:2a:99:fe:60:83:70:cf:3f:06:76:26:
02:9b:92:23:47:d7:18:5a:f7:19:17:d8:29:d5:77:e9:eb:94:
c6:62:a8:fc:1f:3f:87:1f:6d:a9:6e:d1:28:c3:66:4d:8e:0a:
db:e7:ba:23:15:88:73:e7:de:cd:40:7f:b9:3e:f8:a9:86:b7:
14:ce:84:5f:34:81:ef:0f:69:66:34:56:d5:3f:b2:2f:69:cc:
c7:49:98:88:67:d1:c2:2f:3e:b5:b2:c1:69:93:8c:5a:c5:18:
06:5c:d6:05:29:79:48:fb:6f:b2:1a:66:7c:ef:74:41:45:cf:
3c:81:ae:33:26:11:fb:90:b4:e1:ae:61:56:78:e9:14:b5:54:
50:93:61:77:91:a8:3d:b3:08:70:32:7f:1e:2f:b1:53:4f:fb:
e2:54:23:46:cf:54:3b:7c:33:7f:4f:e9:fd:77:67:17:90:ea:
24:66:a5:2b:93:4b:7f:7f:1f:f1:f9:d4:d7:1d:e0:e4:bb:27:
6b:12:ff:61:f1:f8:42:47:dd:31:64:4a:6d:3a:71:0c:8b:e2:
90:b3:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:09 2026 by rpki-client