
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A8B9DDF2072311F1857499832B3D8C67.roa
File: A8B9DDF2072311F1857499832B3D8C67.roa (raw, json)
Hash identifier: oTI+1/LNcwiDfWOdPM9D5PfTWaj/rDg4JQMqhGV/kw0=
Subject key identifier: E3:9A:4E:75:04:35:B0:C8:62:64:0B:CB:BD:5F:4F:32:9F:E8:8A:FF
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 09DF
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A8B9DDF2072311F1857499832B3D8C67.roa
Signing time: Wed 11 Feb 2026 08:28:36 +0000
ROA not before: Wed 11 Feb 2026 08:28:36 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136788
IP address blocks: 103.96.24.0/23 maxlen: 23
103.96.26.0/24 maxlen: 24
123.253.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2527 (0x9df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Feb 11 08:28:36 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=698c3db4-db8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:9b:33:a5:1d:a5:12:2e:5c:ce:84:ec:ed:
c2:7b:09:ac:6c:80:dc:57:7c:e8:e6:bf:35:a3:79:
cc:bf:f4:07:22:02:fe:3c:93:a3:4d:5c:68:1f:da:
dd:6e:60:6e:36:d3:fd:b8:be:5c:fc:18:b6:de:ea:
1e:50:94:44:2d:25:0e:f7:5b:3d:1d:03:09:40:84:
76:31:9f:7d:50:89:0c:78:a6:d7:ba:02:26:52:5f:
c9:be:a6:bc:3b:84:ed:77:6a:c6:d2:0a:a3:98:8b:
c0:1a:1a:64:24:25:1b:92:b4:7a:95:dc:c4:aa:d3:
0b:e1:8e:c6:d5:7c:e3:54:3d:93:70:23:e4:56:c2:
52:32:4a:ac:27:14:b2:d6:b8:8b:2f:b4:5a:b9:0c:
3d:a6:5a:ca:e0:16:1e:37:f0:26:0c:eb:80:4a:2b:
95:9d:e1:2c:2f:f6:5f:48:9f:f5:85:05:1e:05:70:
73:61:96:06:d8:cb:b8:69:a7:2a:64:91:6d:9a:e2:
83:b6:64:fa:72:e5:0e:6e:27:e0:25:98:78:db:9c:
30:c8:5e:40:5a:81:db:f3:ca:62:f2:8f:51:9e:cb:
af:44:b5:8f:05:17:ba:a0:f4:79:2c:de:b1:de:0c:
9d:d1:d9:52:15:92:47:11:94:0c:43:44:ae:1e:e8:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:4E:75:04:35:B0:C8:62:64:0B:CB:BD:5F:4F:32:9F:E8:8A:FF
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A8B9DDF2072311F1857499832B3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.24.0-103.96.26.255
123.253.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:56:77:13:5d:d3:12:fc:d1:fd:51:23:61:9b:7c:0e:94:d3:
49:ee:15:01:03:69:d2:a3:b6:da:6a:64:3b:21:a6:82:9b:60:
1f:bf:5b:61:d4:af:5e:38:14:f9:2a:9b:2d:ca:1a:e0:64:82:
3e:ba:10:f7:b9:bc:ca:44:d8:a7:0d:39:35:8d:b9:10:17:e3:
ad:41:7c:9b:ae:bf:58:76:e0:ab:62:54:57:ae:2a:42:d1:ab:
0c:39:a1:71:63:21:1e:2b:66:02:ea:f6:70:19:29:c8:6f:b4:
17:e5:0f:b9:7e:06:11:a7:9d:13:4f:97:17:13:c9:dc:cd:56:
da:21:e6:ad:23:24:2f:73:7c:92:02:6b:02:bc:f9:5c:f4:37:
11:71:f1:06:3b:24:4c:0c:b2:b5:cd:6b:86:6f:0a:24:d0:dd:
79:e8:85:70:7d:3c:46:ce:54:06:b3:d6:d9:85:9f:44:0f:10:
bc:16:e5:8b:0d:09:23:eb:eb:cb:81:3f:21:3f:ff:8a:a5:f6:
d7:5b:f3:34:46:11:77:2b:0c:8b:77:32:55:34:09:0f:b0:52:
c9:e7:19:5e:ec:8d:1d:c9:6c:27:2b:6a:a8:a1:74:14:0c:9f:
a3:76:7e:34:d8:d6:e8:33:3b:06:d1:56:a0:11:85:2d:ba:ee:
f2:b4:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:24:42 2026 by rpki-client