
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/821CAFEE923811EC955B7A3AC4F9AE02.roa
File: 821CAFEE923811EC955B7A3AC4F9AE02.roa (raw, json)
Hash identifier: 7Q962uKeCDScxGLfboca26CEHkA+KIKMzjIbZ7WOurs=
Subject key identifier: F7:9D:B9:2A:54:5A:4E:2B:8E:71:9B:44:8C:64:31:FB:A1:2A:79:CD
Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial: 044B
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/821CAFEE923811EC955B7A3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:23:07 +0000
ROA not before: Wed 25 Feb 2026 00:20:58 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138506
IP address blocks: 103.127.90.0/24 maxlen: 24
103.152.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33
Validity
Not Before: Feb 25 00:20:58 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44bcb-5c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:38:a0:6d:5b:26:15:58:6d:ca:ae:b0:d2:
9e:9c:6e:94:db:06:e4:41:2b:ec:14:8d:fd:c1:39:
33:f1:0c:81:73:a1:ff:d2:b1:73:e7:dc:c2:a1:4b:
fe:d2:42:da:41:69:aa:42:10:54:02:90:31:fd:d4:
25:3e:ed:ed:ec:81:75:d7:e3:c5:5a:fd:8a:86:e0:
23:37:68:91:95:11:18:c2:ca:15:80:0f:02:db:51:
9a:f9:88:9e:5f:3a:f7:73:9f:f4:10:aa:75:ab:59:
1a:df:50:b9:71:ca:5b:90:83:0c:c6:18:2e:e3:41:
2c:c6:e3:05:7b:27:71:9b:86:40:af:42:57:84:be:
13:a2:ce:0b:f2:29:15:f9:5a:a2:b8:71:de:82:6c:
92:6e:2b:7b:58:06:8b:88:02:49:6f:81:84:6b:44:
97:7b:cd:df:9a:48:0c:3c:ff:12:73:da:c6:4d:81:
db:8b:cf:9f:0c:06:55:e2:de:84:c1:bc:bd:b3:da:
d0:a8:e9:c7:38:d1:dd:e2:d0:cc:b9:8f:a4:a6:4e:
47:d6:74:28:0e:8f:a4:51:4d:51:9e:66:2c:1e:ac:
b4:0b:9f:f8:49:a2:17:e4:43:2f:1f:36:ea:6c:f3:
ac:b9:5e:e5:be:1f:c7:bb:e5:4f:e9:23:58:31:5d:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:B9:2A:54:5A:4E:2B:8E:71:9B:44:8C:64:31:FB:A1:2A:79:CD
X509v3 Authority Key Identifier:
keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/821CAFEE923811EC955B7A3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.90.0/24
103.152.8.0/24
Signature Algorithm: sha256WithRSAEncryption
78:58:a4:ee:51:ef:12:ba:4b:4d:e4:f6:fe:03:31:ef:3f:83:
ec:69:10:ed:c0:fe:39:e1:21:f3:1d:c2:47:96:59:f7:3a:36:
4e:ba:59:a2:e5:9f:08:5c:3a:19:d1:a5:0d:2e:12:ce:85:ac:
fd:e3:f0:31:e7:9d:04:5b:a0:a3:81:0c:cc:59:3f:9c:94:6b:
d9:35:ad:0c:d4:d1:72:96:7d:68:0c:37:21:1a:b6:25:5a:e1:
f9:68:41:d5:c4:5e:0b:9f:08:ce:b3:55:65:1d:47:e5:f9:4f:
af:51:f6:44:f9:9f:61:b5:64:73:6a:f0:1c:6d:0b:fb:9a:e4:
e2:6a:7f:32:ae:9c:ac:92:f2:2c:f1:d6:5e:58:a3:ad:ae:55:
97:2b:21:52:f4:23:b4:f1:5d:f7:95:bb:77:b6:db:06:50:0d:
62:f7:c0:04:7f:52:98:3e:94:a5:4d:cb:d4:02:82:0c:f0:80:
9b:61:cf:6f:b8:b4:1e:7c:8c:0c:08:e2:48:ba:88:00:c5:46:
54:37:54:84:76:b2:9e:f9:10:e4:64:be:aa:71:df:d2:50:55:
80:a4:38:96:7a:70:3f:05:ce:9c:a0:c8:81:76:69:38:9f:32:
45:af:2c:09:a9:3e:fe:44:15:05:56:41:48:40:11:c3:0a:0b:
55:51:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:18 2026 by rpki-client