
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/DEE5E3C49F0511EC9DA80B77C4F9AE02.roa
File: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (raw, json)
Hash identifier: hx9DzSlJO8jAukpcxtxWSoSgmAiB466A0RlIrmD5jYc=
Subject key identifier: F4:1D:B7:55:17:D4:C3:AA:D9:C4:2C:CB:9C:DE:27:9B:AA:DC:83:7C
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 04B8
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/DEE5E3C49F0511EC9DA80B77C4F9AE02.roa
Signing time: Sat 07 Feb 2026 00:20:05 +0000
ROA not before: Sat 07 Feb 2026 00:20:05 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136038
IP address blocks: 103.80.132.0/22 maxlen: 22
103.80.132.0/24 maxlen: 24
103.80.133.0/24 maxlen: 24
103.80.134.0/24 maxlen: 24
103.80.135.0/24 maxlen: 24
182.161.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1208 (0x4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Feb 7 00:20:05 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69868534-cbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:89:05:1a:58:ed:30:d9:0e:5a:f1:36:89:
2f:00:ca:4e:a0:85:53:d0:ed:42:25:55:f1:b0:44:
28:12:af:26:8c:a6:60:49:97:f0:54:57:df:a3:17:
78:a8:3c:e6:dd:1d:27:87:fb:dd:1f:d0:4e:03:c3:
80:58:c8:f9:7a:f4:ef:03:f7:87:81:42:50:8c:63:
29:45:a2:d4:c0:a3:eb:2a:de:bb:14:b0:8c:04:4d:
aa:76:d1:61:79:82:f3:8b:f5:0a:18:f0:92:0c:7a:
3d:ac:eb:69:0c:3f:16:ac:a7:a0:aa:72:95:72:1c:
ad:31:a5:6d:99:e4:a6:e2:00:ad:9d:7f:03:f7:2d:
75:bb:df:da:e0:52:23:05:be:b0:58:bb:10:d9:1f:
67:24:35:85:15:71:45:ff:f5:b7:15:3b:71:6b:60:
c3:f4:0a:12:af:28:d1:09:19:63:14:42:6c:24:13:
f3:ad:89:96:b7:e9:0b:af:8a:c2:12:97:de:12:79:
c3:36:32:a9:af:8b:fc:5e:00:43:e9:4a:28:0c:40:
b8:71:17:0e:0b:5b:bc:db:db:48:24:4f:d2:2d:61:
5d:6c:a4:49:32:82:56:13:0a:02:7c:48:5e:d8:11:
15:b7:2c:82:8f:c6:1a:ec:37:1d:b7:6a:22:5d:30:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:B7:55:17:D4:C3:AA:D9:C4:2C:CB:9C:DE:27:9B:AA:DC:83:7C
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/DEE5E3C49F0511EC9DA80B77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.132.0/22
182.161.66.0/24
Signature Algorithm: sha256WithRSAEncryption
22:16:1a:5d:6f:26:80:e6:d6:27:c6:3d:ff:9c:12:c8:bd:6c:
e9:3a:15:db:fe:71:c4:7f:ab:d6:e1:3e:1d:c2:91:24:9a:c5:
b9:23:75:98:db:18:2d:22:b9:d0:5f:c3:47:65:9b:42:63:8a:
31:0f:3c:59:c8:db:d2:ec:eb:cf:5c:1e:fb:58:52:ce:de:c8:
a5:0b:df:8c:0d:07:ae:22:86:94:4d:10:8c:bc:14:21:4d:58:
df:3a:4f:38:a7:e8:4a:e2:d9:7a:49:ad:5f:7b:d9:bd:2f:4e:
b2:60:2c:55:7b:a4:42:ed:e8:34:e9:f8:f2:94:48:c3:da:53:
4f:2e:e2:52:e0:e8:30:56:48:88:f6:2f:07:5b:80:14:56:f6:
90:78:de:08:38:ac:70:0b:99:7a:7e:5a:6f:77:a3:4f:55:73:
0d:cc:8b:0d:77:1d:08:bf:3e:3d:a0:e5:63:66:ff:22:99:23:
1f:25:52:ee:04:1f:a3:9a:c3:77:08:c4:7c:77:11:a4:43:a2:
9c:ef:d1:df:f1:80:3a:d9:d0:34:f3:a5:b5:7f:44:a9:f8:b0:
a0:e8:12:74:86:30:8e:b9:6b:fd:01:61:d5:ed:5d:cc:13:27:
87:0f:94:1b:21:e1:82:14:c9:ba:42:1e:e9:61:b9:e6:96:46:
e9:88:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:37 2026 by rpki-client