
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/2106E428992111EC99E0095AC4F9AE02.roa
File: 2106E428992111EC99E0095AC4F9AE02.roa (raw, json)
Hash identifier: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=
Subject key identifier: 37:9A:63:36:A2:A3:46:7A:36:A3:DB:BB:3D:C7:EB:90:AC:79:00:7D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 044B
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/2106E428992111EC99E0095AC4F9AE02.roa
Signing time: Sat 07 Mar 2026 00:34:03 +0000
ROA not before: Sat 07 Mar 2026 00:34:03 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 140227
IP address blocks: 103.127.240.0/22 maxlen: 24
103.148.218.0/24 maxlen: 24
103.148.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 09:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: Mar 7 00:34:03 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ab727a-7c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:73:90:4c:c9:20:f6:6d:e8:ca:db:16:ef:
ac:af:b9:af:a9:7f:2c:be:ff:45:19:f0:b2:c9:ff:
3d:e8:88:87:21:cf:60:d5:c1:49:ba:79:f5:3b:12:
5f:40:98:3e:79:55:69:8a:c1:26:1d:2c:f8:c0:48:
2f:86:0e:6e:f7:f8:9d:ac:ff:7a:d1:5d:5a:d8:f1:
e1:35:a1:21:e2:52:6d:dc:96:f0:b1:18:7f:d9:6b:
23:0b:52:57:8b:4b:f6:44:43:69:0f:27:cd:78:b0:
a1:62:3f:f9:1e:49:49:a8:e9:17:93:a7:73:ad:6b:
8b:ce:90:f4:2d:06:6d:f6:c4:57:76:ea:d4:78:b1:
e5:87:6b:60:d3:41:4f:7e:de:c0:87:fe:26:b9:b4:
6d:90:7d:a2:54:0c:ea:2c:bc:5f:9c:15:39:d2:f6:
6d:94:60:21:29:95:88:67:2b:ea:22:66:21:be:6e:
5e:6f:6d:e0:15:9d:94:66:c0:71:c6:45:d5:a5:ac:
80:20:a8:76:8c:fc:b4:b4:ed:4d:ae:5d:34:39:71:
76:15:0a:7d:65:bb:2c:c9:c5:52:db:23:53:4d:fa:
a7:13:e0:32:7a:19:33:58:93:ff:26:f9:4b:f5:43:
8b:70:fc:d5:4c:c6:0b:d4:be:0c:e3:56:e0:0f:70:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:63:36:A2:A3:46:7A:36:A3:DB:BB:3D:C7:EB:90:AC:79:00:7D
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/2106E428992111EC99E0095AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.240.0/22
103.148.218.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:c9:3a:4d:40:91:bd:f0:c0:84:72:7e:57:f6:e2:b6:c1:c7:
25:51:f6:f8:ce:05:f8:0f:b3:87:c1:c7:aa:cb:ae:1c:b4:3e:
0b:52:a1:45:dc:60:51:04:f7:04:a3:8d:4e:ff:13:a5:16:5d:
34:d0:e7:93:ef:02:c8:5d:aa:2c:77:48:fd:65:51:f6:ab:65:
7f:db:08:55:0a:1c:ef:a0:4f:1a:a4:d0:0d:a8:9c:d0:6d:c2:
80:c2:89:54:9c:90:d7:82:51:9c:05:90:ca:8b:00:9d:19:54:
d1:46:ac:30:53:bf:03:e2:96:99:d7:ce:49:b6:29:70:68:df:
e7:df:45:0b:3b:93:b7:03:32:29:34:a2:b3:fe:af:e2:a0:41:
46:bf:3f:d6:17:1a:ca:3c:fe:55:81:53:06:5a:1c:8b:56:42:
4e:5b:6b:3f:30:a0:13:19:97:6f:ae:84:d6:31:ad:3f:0d:e3:
1b:b5:8f:3e:d6:50:49:60:b2:44:74:fa:7f:1b:1d:5f:cf:1d:
4f:02:6e:16:26:59:ec:35:35:cf:a0:b1:90:ae:2b:d8:4b:66:
ee:dd:56:5f:a7:26:3a:e1:16:af:29:3f:aa:9a:bb:b8:28:20:
d1:d5:9a:26:f0:3c:d1:70:a0:6f:ae:f7:7b:f2:60:92:12:7e:
c0:75:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:31 2026 by rpki-client