
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/21A4183096D111F1A11E4B235711F970.roa
File: 21A4183096D111F1A11E4B235711F970.roa (raw, json)
Hash identifier: k2+qx+drmH//e+9qGHsf2iYVzrlk7nrWgE6t8MQWTRQ=
Subject key identifier: 86:2D:7B:86:A6:95:E1:92:4F:60:07:FC:F0:02:D9:C9:9E:38:5A:C0
Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Certificate serial: 16D4
Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/21A4183096D111F1A11E4B235711F970.roa
Signing time: Thu 13 Aug 2026 04:40:38 +0000
ROA not before: Thu 13 Aug 2026 04:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136461
IP address blocks: 103.90.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl
rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5844 (0x16d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Validity
Not Before: Aug 13 04:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7d4ac6-98a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:88:db:af:d5:cb:6d:10:c4:c3:0a:e6:8a:
d8:39:d2:17:b7:2a:21:bc:f7:f0:80:45:83:a2:b9:
20:bd:a7:6f:ae:f4:4c:e3:07:24:b4:e4:5c:ca:1e:
ca:6a:b2:14:be:65:bf:c4:07:cc:49:e3:05:1c:df:
67:d8:e3:83:7c:aa:75:e1:5c:7f:b3:73:d8:71:49:
44:eb:a5:fd:8c:83:d1:ca:29:81:31:40:31:6c:e0:
0e:c2:97:30:c4:94:20:4c:76:cc:8b:8d:19:a9:d2:
a5:30:4e:6d:d4:34:7c:2e:08:67:fe:7a:fb:06:7b:
77:31:3b:5d:64:ce:0e:37:04:94:99:19:5b:5c:0d:
fe:99:3f:7c:b7:f7:0d:e4:d7:d8:e3:e9:f9:59:66:
77:38:4f:0d:1a:e6:80:2f:08:db:39:df:1f:18:d3:
66:86:79:a0:4c:97:26:a4:52:d8:2d:8b:38:84:32:
fc:6c:c0:a3:e9:66:05:db:a2:17:81:1c:43:f4:bd:
80:96:a9:55:91:69:0d:35:30:7f:92:e4:f7:b5:15:
de:2d:e9:91:ed:3a:33:b9:80:5e:45:5e:86:12:79:
4f:b1:ff:a9:8c:b6:e3:15:68:5c:fb:fe:cd:c9:61:
1f:70:80:82:4c:72:53:b4:47:6a:28:fe:c4:fd:25:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2D:7B:86:A6:95:E1:92:4F:60:07:FC:F0:02:D9:C9:9E:38:5A:C0
X509v3 Authority Key Identifier:
keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/21A4183096D111F1A11E4B235711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.90.147.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e6:ed:b1:bc:15:5e:6b:f9:54:c0:41:8d:e1:84:1d:72:37:
6e:66:87:bb:62:31:58:7a:d2:40:3a:2a:65:f5:e9:28:0b:4f:
58:55:17:bd:7a:91:84:e1:5e:c9:04:d3:aa:7b:cf:5e:1b:e7:
3a:e3:4e:3d:ca:66:3d:00:79:f3:f9:0a:d5:ee:a9:4c:3e:b7:
08:fb:9f:23:a9:59:24:8c:7b:d3:95:be:80:45:e6:d1:db:2a:
cf:da:73:7e:3b:38:75:bd:ba:7e:3b:82:61:2f:07:69:28:9c:
73:d8:6d:60:00:1c:99:68:bd:21:a0:7f:6d:0a:ce:e1:71:4e:
62:33:58:77:a7:93:b5:03:bd:99:05:c1:27:51:38:a7:52:4e:
1a:db:6e:99:1f:df:d3:d1:4d:4c:2a:7c:45:23:2d:16:68:6e:
1f:39:12:95:d8:9f:de:d0:c1:82:10:f7:df:82:0a:2e:5f:59:
4a:04:92:a7:c8:b8:10:01:39:70:12:96:0f:f6:50:4f:72:bd:
f0:a4:c9:62:9e:69:4b:d4:73:ca:ce:81:2f:ec:d2:fc:16:1a:
ee:f2:63:b5:82:3b:38:d9:38:a6:82:cd:1b:a8:f3:05:19:8d:
bd:75:9a:63:fc:f4:5b:e0:5e:c5:d4:9d:63:40:c6:d0:85:9b:
30:b6:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 14:16:07 2026 by rpki-client