
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8B21283C485911F18CF4941C9F833773.roa
File: 8B21283C485911F18CF4941C9F833773.roa (raw, json)
Hash identifier: xENNt9lGzPSpHJD7+WZOlBtXyMY0IyCWH/Azfm2Iy5A=
Subject key identifier: 7B:5E:D7:D9:02:2B:59:EC:72:5F:05:6B:DE:82:C6:5B:2D:F4:88:E0
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6C74
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8B21283C485911F18CF4941C9F833773.roa
Signing time: Tue 05 May 2026 08:08:05 +0000
ROA not before: Tue 05 May 2026 08:08:05 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154003
IP address blocks: 2402:43a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27764 (0x6c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: May 5 08:08:05 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69f9a565-f0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:1a:1e:0f:a2:79:66:ce:62:be:92:b7:5d:
86:6e:40:03:3e:61:df:1c:e8:56:71:dd:98:db:d3:
4c:35:6c:a0:02:b8:c1:72:00:1e:63:c6:9b:7e:01:
65:84:b9:66:95:17:d0:b4:89:1e:21:e4:3b:d1:fb:
24:29:20:a8:66:2b:94:cf:94:b1:e8:c9:ce:02:5a:
5a:0c:4b:5f:2c:db:f0:f5:87:dc:b0:c6:0e:b8:f9:
cb:59:90:f2:e6:67:4d:2d:12:53:1c:7e:15:92:70:
0d:24:cd:6b:51:57:d0:f9:3b:16:9e:a1:f3:91:10:
27:c7:f2:0e:82:87:55:cd:e3:cf:bf:83:0e:3d:1b:
fb:f8:ee:e2:9b:71:84:f3:69:41:84:a6:6d:a8:de:
d9:1c:55:2d:9b:aa:9c:5f:aa:97:8e:8f:91:7f:f7:
e1:f7:77:5f:d9:24:31:b5:b6:23:a7:a6:83:58:de:
ea:49:f6:0f:52:2e:ba:3a:b7:26:48:3c:bd:0c:a1:
03:df:c0:06:4f:a0:40:38:a8:ca:7e:1c:6b:ce:04:
23:6f:fa:c3:ae:39:44:c0:b2:66:4c:bd:c0:8f:e0:
e1:21:04:2a:cb:bf:fe:74:1c:09:bb:dc:17:c9:ef:
e4:98:b9:3f:3f:c1:aa:6f:4f:e9:ef:c2:67:9e:f7:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5E:D7:D9:02:2B:59:EC:72:5F:05:6B:DE:82:C6:5B:2D:F4:88:E0
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8B21283C485911F18CF4941C9F833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:43a0::/32
Signature Algorithm: sha256WithRSAEncryption
86:ed:3d:9f:08:22:0f:92:6a:3c:8d:2f:e3:e2:4d:eb:7e:fe:
e8:90:60:34:0c:57:98:4f:26:ad:0d:27:b0:f6:4b:d2:6c:b2:
0c:dd:63:bf:7c:a6:72:ad:2d:ed:74:99:aa:33:0c:ba:3b:93:
2d:22:55:2d:ca:00:fd:41:0a:85:55:47:d0:ce:18:78:6e:5a:
3d:75:6a:dc:aa:b0:e6:52:eb:2b:9b:80:c8:65:bc:97:80:d0:
5d:ad:b4:b4:c0:79:22:e1:9e:98:9c:c6:b9:40:ed:b1:bf:54:
60:5d:7e:28:47:00:4c:dc:8f:f6:19:40:12:12:90:ab:b3:c7:
48:7b:c9:6f:ed:ca:81:a5:75:ef:7e:ef:0e:b5:d8:1c:b6:fc:
5b:a7:ae:01:f7:ad:98:18:22:14:7e:06:98:9f:5e:ff:97:99:
13:aa:f4:cb:d5:71:a6:74:56:68:95:d2:87:71:08:2e:43:30:
d0:67:46:7a:7c:a6:07:e5:e3:e4:36:bb:6c:bb:ee:d5:06:c7:
ee:d0:61:74:af:a9:17:ac:92:43:ac:bf:18:45:d0:57:d4:ac:
74:bd:7a:ea:a4:62:63:38:46:99:fa:1f:e0:c3:65:e1:79:cd:
c0:c6:a7:99:24:13:41:49:33:ef:d4:30:d3:d2:91:3e:3b:10:
0e:6d:d3:7f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICbHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwNTA1MDgwODA1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY5YTU2NS1mMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApWoaHg+ieWbOYr6St12GbkADPmHfHOhWcd2Y29NMNWygArjBcgAeY8abfgFl
hLlmlRfQtIkeIeQ70fskKSCoZiuUz5Sx6MnOAlpaDEtfLNvw9YfcsMYOuPnLWZDy
5mdNLRJTHH4VknANJM1rUVfQ+TsWnqHzkRAnx/IOgodVzePPv4MOPRv7+O7im3GE
82lBhKZtqN7ZHFUtm6qcX6qXjo+Rf/fh93df2SQxtbYjp6aDWN7qSfYPUi66Orcm
SDy9DKED38AGT6BAOKjKfhxrzgQjb/rDrjlEwLJmTL3Aj+DhIQQqy7/+dBwJu9wX
ye/kmLk/P8Gqb0/p78JnnvenBQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFHte19kC
K1nscl8Fa96Cxlst9IjgMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOEIyMTI4M0M0
ODU5MTFGMThDRjQ5NDFDOUY4MzM3NzMucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAJDoDANBgkqhkiG9w0BAQsFAAOCAQEAhu09nwgiD5JqPI0v4+JN
637+6JBgNAxXmE8mrQ0nsPZL0myyDN1jv3ymcq0t7XSZqjMMujuTLSJVLcoA/UEK
hVVH0M4YeG5aPXVq3Kqw5lLrK5uAyGW8l4DQXa20tMB5IuGemJzGuUDtsb9UYF1+
KEcATNyP9hlAEhKQq7PHSHvJb+3KgaV1737vDrXYHLb8W6euAfetmBgiFH4GmJ9e
/5eZE6r0y9VxpnRWaJXSh3EILkMw0GdGenymB+Xj5Da7bLvu1QbH7tBhdK+pF6yS
Q6y/GEXQV9SsdL166qRiYzhGmfof4MNl4XnNwManmSQTQUkz79Qw09KRPjsQDm3T
fw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:25:07 2026 by rpki-client