
$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/21A731506C9B11ED93A7513AC4F9AE02.roa
File: 21A731506C9B11ED93A7513AC4F9AE02.roa (raw, json)
Hash identifier: +MbypgVzLHUTjgMkgZKJV+5xplqp/2u1VVeYBMIe3Jw=
Subject key identifier: 7D:1E:12:3A:56:DA:97:D2:34:8F:A9:AE:EE:8E:A5:2A:56:40:D3:E6
Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial: 0C6E
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/21A731506C9B11ED93A7513AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:40:45 +0000
ROA not before: Sat 20 Dec 2025 19:16:00 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 31898
IP address blocks: 203.149.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3182 (0xc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Validity
Not Before: Dec 20 19:16:00 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47a1d-40e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:f6:19:76:5c:28:ea:6c:a0:20:6f:0c:8d:
08:a0:0c:34:6c:eb:71:7a:03:d6:72:27:a7:95:15:
d9:c8:4f:cf:44:6f:67:0c:e8:73:1d:87:3a:ef:43:
59:6c:4f:fd:8d:ef:71:41:3a:56:f9:da:3a:a1:96:
d6:8b:44:89:37:6d:3f:03:af:1c:c5:ed:ee:1a:c5:
1b:35:3c:90:7e:61:46:df:de:02:7c:67:89:7c:67:
34:6b:b8:35:31:fd:14:1e:c3:8f:03:b2:e9:4f:7b:
16:c8:b0:5b:eb:2f:0c:e6:29:09:58:9d:8e:83:4e:
3a:cc:94:aa:e0:6d:73:1c:16:eb:b3:1a:e8:f6:d9:
6f:94:0c:57:b9:95:0d:f3:ba:8d:aa:3b:cf:b6:02:
99:a6:d9:86:aa:27:cd:ff:d6:04:41:5c:73:cf:01:
56:70:a9:c4:a1:0a:97:8f:59:f2:fc:86:0c:70:2c:
76:fc:53:be:3c:c6:da:60:59:79:16:bd:91:72:a6:
51:b6:74:a1:24:bd:0a:63:2e:5d:0c:b5:e6:a9:6a:
8e:2e:85:e1:5c:a8:09:73:c8:42:13:f2:9a:c6:42:
7e:58:65:5d:97:f4:c7:3e:b1:6b:2d:60:1f:c0:8c:
89:03:a6:b8:fe:b7:de:bf:a5:51:08:78:00:6a:99:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:12:3A:56:DA:97:D2:34:8F:A9:AE:EE:8E:A5:2A:56:40:D3:E6
X509v3 Authority Key Identifier:
keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/21A731506C9B11ED93A7513AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.149.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:05:9a:14:c7:c6:b1:18:74:bc:b9:94:cc:23:f3:b1:f8:a6:
fe:bc:c0:f8:d1:af:e9:13:ca:c5:ba:00:71:a3:96:0a:3a:04:
8e:c9:2a:bc:6f:0c:a9:4d:14:ef:84:2d:ae:ca:e4:24:8b:20:
54:e3:06:04:a0:dc:54:25:58:48:9d:51:32:79:61:fd:9b:71:
16:c3:3f:78:3b:4d:6c:c8:d2:50:68:4a:d6:f2:77:9a:c6:96:
0c:32:17:f0:1c:08:fb:d5:33:cc:87:02:05:c1:c9:9e:94:cc:
ac:a2:75:14:3b:22:5b:82:24:b0:3e:d6:86:31:c0:e1:70:49:
f4:ba:40:37:00:e3:61:c5:10:fe:7d:fb:f8:67:59:8c:a0:c8:
fa:d4:7a:31:71:d9:6a:4c:ab:48:6f:dc:30:ae:09:af:bd:3f:
ed:a5:b4:79:51:74:5d:6d:72:9f:1c:77:e4:f3:9b:39:87:25:
e8:49:ea:c5:07:bc:01:76:6d:17:22:03:71:b5:55:1c:ad:15:
9a:a2:50:e8:74:4f:f9:c4:7e:73:41:a2:80:52:1b:03:ae:7a:
31:86:fa:8c:33:bd:d5:af:46:96:ac:de:29:a5:75:e9:1b:aa:
f8:8f:fa:14:bf:59:67:97:a3:95:72:f5:25:57:2c:63:23:af:
88:37:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:24:57 2026 by rpki-client