
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/21A9C2D4221211EF9624DB0CC4F9AE02.roa
File: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (raw, json)
Hash identifier: lszQ8yUB/N2uYLH7nBTD6MNw6FLEt393aCgDSU4ngis=
Subject key identifier: 76:29:A1:27:A2:D4:45:37:2A:26:E1:D8:08:F3:02:1E:D9:F2:09:0D
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0D69
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/21A9C2D4221211EF9624DB0CC4F9AE02.roa
Signing time: Wed 06 May 2026 18:22:29 +0000
ROA not before: Wed 06 May 2026 18:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133895
IP address blocks: 103.6.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3433 (0xd69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: May 6 18:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fb86e5-881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:a3:c7:50:31:a6:e3:9a:ba:f1:f1:54:9a:
68:78:a2:22:a2:68:45:74:42:c7:9c:54:55:0c:c8:
61:4f:dc:f6:02:60:99:f5:21:f8:17:6d:07:e0:d0:
4c:9d:8a:42:8b:ab:52:63:fb:6c:3a:e3:a7:34:55:
58:7f:95:a4:f8:1a:87:8c:c5:c2:5b:a3:77:e1:bf:
79:ba:81:45:90:39:bd:80:0c:73:05:32:dc:e5:d5:
8e:40:97:21:d3:86:3e:eb:7b:d5:83:d9:7a:22:f4:
56:64:ec:fb:23:9e:c6:32:e7:77:5b:7a:1b:61:6e:
a3:87:5d:00:0e:c4:70:c0:95:63:32:4a:d4:c1:35:
07:70:f7:38:e9:ca:ef:0d:a3:c6:f7:e8:01:01:28:
20:e4:9a:c6:8a:58:c8:93:dc:78:67:a1:d0:bd:70:
b2:7f:8a:ff:a7:d2:21:1b:6f:1c:ff:a1:55:55:7c:
f9:dc:74:3f:c6:6d:b2:3c:40:aa:be:b7:4d:69:30:
de:52:83:4e:ca:46:88:ac:d3:32:f7:44:bb:58:d6:
8c:59:52:1e:05:42:24:f2:03:cf:e3:d8:60:0c:7d:
5e:70:bb:e8:1e:26:ab:e4:e8:2c:bc:eb:b9:2c:23:
c9:4b:ed:7e:97:0b:7c:50:f4:f6:95:20:23:f6:af:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:A1:27:A2:D4:45:37:2A:26:E1:D8:08:F3:02:1E:D9:F2:09:0D
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/21A9C2D4221211EF9624DB0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.209.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c5:a5:9a:75:cb:14:e0:b3:18:6e:52:81:88:99:a9:40:dd:
3c:5c:d2:92:78:1b:8c:72:03:88:fd:eb:1c:0e:b8:10:d9:d6:
87:c0:31:f9:e7:8b:54:55:4c:e2:fb:0a:d3:91:80:05:2f:20:
6c:4c:40:39:79:d0:fb:24:6c:12:d0:70:b5:e2:62:18:e7:fc:
d8:99:06:50:1e:2a:22:83:35:24:26:b8:84:8d:c1:4c:24:69:
37:1b:3e:bd:d4:54:f4:a4:82:a8:22:6c:51:f5:ce:50:3e:d6:
e9:fd:86:01:c3:98:bc:95:0a:3b:e3:5a:f3:f6:e4:b1:b0:b5:
68:4d:f3:8c:bd:46:f1:eb:c0:f2:61:25:d0:58:fb:eb:2d:5b:
26:ef:c7:71:c2:22:2f:08:8e:1f:5a:dd:43:26:bf:02:39:8e:
a4:8a:8a:a4:6d:ee:8a:60:dc:63:3a:2e:c5:66:cf:62:82:59:
87:be:f9:a0:40:e1:c6:f0:c0:37:6f:f0:91:4e:6d:0c:19:ec:
b3:c8:19:99:e0:cd:3a:ec:c6:81:7b:e8:b3:10:03:e1:9c:ae:
83:b4:69:c1:90:e4:0d:46:76:e3:7a:3c:de:eb:da:d9:6c:6f:
08:ef:5f:de:5c:9b:ee:5a:4a:d8:cd:2f:43:8d:d9:e0:e0:32:
03:26:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:41 2026 by rpki-client