
$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
File: 21D692500C1E11EFBA32F937C4F9AE02.roa (raw, json)
Hash identifier: 90OvFdOZMeTg/GmohoPUyUWJ6agCScsf/VAla6eJEX4=
Subject key identifier: CD:B7:E3:1A:7C:9E:7D:CB:87:03:11:25:D2:49:22:B0:83:F7:39:FD
Certificate issuer: /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial: 01A1
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:39:17 +0000
ROA not before: Fri 21 Nov 2025 03:20:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 17990
IP address blocks: 2001:df0:a300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Validity
Not Before: Nov 21 03:20:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a59305-820a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:4f:87:9a:08:c3:7e:ff:6c:92:c6:a9:f7:
88:f4:6e:e5:0b:1b:a0:17:0c:fc:e2:f6:54:6d:1c:
3e:98:84:74:e6:e5:e2:4f:31:8f:b7:f9:7c:23:c4:
3d:40:56:f1:a2:a1:29:d8:43:62:ec:ed:82:8f:a5:
55:9e:28:d9:1b:c0:40:36:25:d6:f6:c4:ae:37:66:
30:b9:ea:7a:17:6c:47:11:7e:c1:7b:2d:0b:c7:a5:
9b:0f:9e:e1:c0:17:ab:16:fe:76:4e:9e:86:12:e1:
bb:3a:86:69:a4:07:45:26:85:16:27:1a:19:f1:12:
f7:f1:a3:d9:e0:ce:59:55:e7:53:21:f0:bb:0f:da:
ea:7e:a6:d5:b4:fe:25:45:5e:9f:43:79:5e:a5:12:
fe:81:ac:e8:b3:3c:bc:bf:15:aa:26:66:12:4c:fe:
7f:aa:54:6c:74:35:ee:eb:62:9e:0d:16:e1:f5:eb:
76:17:01:ca:86:93:c4:cf:47:8a:8c:7f:f7:16:f1:
af:68:c4:40:0e:24:41:eb:65:4e:f0:b4:54:ae:f4:
90:de:73:f2:cc:b9:bc:4f:6a:8a:3d:c1:0c:62:a1:
a2:73:5c:ef:b2:ed:d8:22:7a:16:c4:5f:26:10:a5:
53:08:8a:05:21:9b:fa:5e:a2:ce:8c:64:f1:59:9f:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B7:E3:1A:7C:9E:7D:CB:87:03:11:25:D2:49:22:B0:83:F7:39:FD
X509v3 Authority Key Identifier:
keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:a300::/48
Signature Algorithm: sha256WithRSAEncryption
52:24:5e:ac:67:79:d4:b4:9e:79:ae:d5:95:8b:39:2d:85:96:
bd:00:c4:5f:2a:bc:ea:c3:be:5b:89:e1:0e:48:a7:62:7b:9f:
bc:4c:a7:42:0f:57:e8:e1:f5:c9:83:ae:30:12:a9:c4:87:e8:
d9:8f:19:f4:23:41:3e:cf:6c:a4:b1:68:00:3b:83:64:c2:d8:
e5:fe:1e:05:36:77:18:60:14:b0:66:16:d2:9b:70:2b:46:fd:
f0:d0:5e:2e:0c:14:14:b3:98:30:33:0b:7a:e5:99:c6:51:05:
f8:cb:70:4d:c6:ed:48:72:38:e6:29:47:6e:1a:3c:d1:03:9d:
9f:16:33:09:63:0e:f9:be:42:e6:ae:da:f1:db:19:f1:36:04:
65:68:5a:4f:04:33:7b:86:79:88:1e:c6:36:85:3a:5b:38:36:
61:d8:df:46:fe:86:c1:6a:d3:5d:d5:2e:c8:16:f2:c2:f6:94:
59:d4:4b:77:d3:dd:81:46:4b:ba:0b:d4:2d:33:65:9b:61:ae:
5b:0b:0a:f1:d0:65:71:74:f8:7e:dd:00:90:db:ef:d0:43:70:
54:fb:8e:b6:35:1a:04:e8:43:3d:78:6f:8d:2d:3e:41:01:6f:
52:03:03:9d:b4:b4:2e:05:4a:ca:f4:cb:4f:ca:f6:1e:c9:0c:
b5:66:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:58 2026 by rpki-client