
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa
File: 121E99A8F21911EE95F21158C4F9AE02.roa (raw, json)
Hash identifier: opYVyfVrf8nOteK7/xjEMUl4M6X/BkvRe3zd604oEu4=
Subject key identifier: 3E:4A:A9:7D:7E:93:40:E6:C0:37:18:32:3F:19:A4:91:19:C8:51:29
Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial: 016F
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:56:36 +0000
ROA not before: Wed 03 Sep 2025 05:54:50 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 64015
IP address blocks: 103.192.240.0/22 maxlen: 22
103.192.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Validity
Not Before: Sep 3 05:54:50 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a58904-2f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:18:ef:54:fb:d7:5b:59:46:15:a3:bb:83:
4a:7b:58:0a:b2:60:e5:ce:81:34:01:13:2a:8f:0d:
d0:96:a1:f3:c4:30:6b:9d:fa:b9:df:5b:ec:4d:a6:
b2:b4:63:4b:79:f7:19:28:0c:9e:98:1c:7e:c4:2b:
34:54:52:7b:99:76:55:7c:5b:d2:b0:c7:08:b8:f3:
2e:1d:f3:aa:d9:79:49:cd:0c:fd:59:e1:5e:1e:9f:
db:a5:ec:c7:2d:2b:bf:8d:68:68:34:79:34:2a:38:
2c:3b:87:d0:11:b2:22:34:a3:6b:36:25:da:ad:78:
3c:23:b1:18:18:21:b2:7f:e8:b9:4a:d6:b8:8e:63:
b6:8b:4d:7a:45:5e:a7:d7:bd:ea:b2:7c:74:3d:96:
b0:73:b1:9b:cd:07:37:7a:51:e3:d5:09:92:a0:65:
0c:ba:f4:1a:5a:70:c4:97:1e:5e:75:5f:a3:f3:79:
d5:fa:7c:07:e3:51:54:c9:38:d8:17:fb:a7:8f:6a:
c2:19:0b:1b:bd:3b:5f:81:34:d6:88:03:72:14:cf:
c4:28:39:6a:22:a5:71:80:f0:eb:06:62:94:dd:35:
32:2c:7d:02:59:23:4a:2b:9d:2e:1c:67:c6:c0:9e:
05:0b:99:50:a6:d4:e7:45:5c:e7:7a:e8:f3:00:45:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:A9:7D:7E:93:40:E6:C0:37:18:32:3F:19:A4:91:19:C8:51:29
X509v3 Authority Key Identifier:
keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.192.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:75:b4:92:8f:2f:2a:bf:43:89:91:28:d2:fc:e7:66:21:42:
70:c4:85:b5:c4:c5:7e:3f:ce:a6:46:98:e7:0d:97:34:fb:ea:
a4:06:6a:57:13:61:04:4e:45:bc:c2:53:88:dd:50:d2:7a:ce:
d4:8a:f2:a3:41:8f:28:7f:6b:c8:f8:9a:9b:1d:82:2f:3b:9b:
71:84:e0:92:b6:b5:53:39:ae:19:ac:8c:ce:ae:a9:c0:8d:6a:
06:2c:9c:b9:45:90:25:16:a5:01:22:7f:7e:bb:93:22:97:f7:
d7:a6:8f:77:ba:51:6a:b4:9b:8c:e4:64:5e:f2:d9:15:16:0c:
a7:b1:98:d7:72:b1:e6:ae:8a:b4:ec:4e:dc:4e:30:59:0b:cf:
24:3c:b2:0a:b2:1e:4e:36:92:28:51:38:63:e6:eb:aa:35:f3:
6f:33:ba:49:ce:81:07:00:16:bc:b5:e5:53:c8:af:02:79:a7:
00:d6:0d:a0:f8:9d:b2:23:dd:5c:3a:ad:b1:4e:99:6d:f2:fa:
69:a0:07:22:34:2e:e5:86:d0:95:0a:9e:83:fd:a4:b7:5c:61:
2c:05:5f:f1:23:7c:7a:6f:a9:10:1a:bd:6b:bf:b9:7e:75:ca:
7d:19:93:20:32:b7:87:9b:db:65:14:e7:1d:11:83:fa:f6:98:
78:fb:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:31 2026 by rpki-client