
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/609B8BC27D7B11EDB6B77173C4F9AE02.roa
File: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (raw, json)
Hash identifier: s4E+IBqVD1Ex0sLLZo7SnBfEqvpl4UEVJX6U6qerOGo=
Subject key identifier: 64:74:19:4B:7F:E5:9E:FE:CF:4C:1B:C3:B1:FF:A6:4D:76:C1:DA:2D
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 18F4
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/609B8BC27D7B11EDB6B77173C4F9AE02.roa
Signing time: Tue 10 Feb 2026 15:06:24 +0000
ROA not before: Tue 10 Feb 2026 15:06:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 60064
IP address blocks: 43.239.140.0/24 maxlen: 24
43.239.141.0/24 maxlen: 24
43.239.142.0/24 maxlen: 24
43.239.143.0/24 maxlen: 24
103.71.175.0/24 maxlen: 24
103.194.170.0/24 maxlen: 24
103.252.220.0/24 maxlen: 24
103.252.221.0/24 maxlen: 24
103.252.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6388 (0x18f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Feb 10 15:06:23 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=698b496f-70f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:99:7f:87:dc:d1:b9:6b:37:c9:80:0b:ce:
2f:ed:dc:02:d3:5d:57:04:d0:16:a0:f9:31:1a:78:
68:f0:f4:6f:49:f4:3f:25:15:2e:c8:12:9d:b1:1e:
24:9e:95:d8:05:4f:70:19:4a:05:14:53:d1:fe:5b:
37:85:0e:81:d1:4c:52:c7:a4:30:8a:cf:9b:ea:d9:
e8:e0:64:6b:59:55:c7:88:80:d5:31:9b:21:12:95:
5e:c1:7a:ad:9e:50:de:88:6e:77:af:b9:e9:a9:d3:
85:a2:4d:0d:c7:f8:44:38:25:87:14:99:8f:f9:24:
88:c1:3d:e1:38:e5:9f:75:72:f8:f9:a5:e6:b4:4c:
c3:9d:d9:dc:c5:fa:9d:74:64:98:ec:a1:13:9f:04:
80:fc:44:e8:f7:0d:da:e7:5b:ff:c1:e3:f1:77:16:
c5:cd:87:39:70:3b:73:4e:c5:92:4b:7d:31:80:74:
9f:26:94:a8:f9:11:ca:33:3e:e6:27:bb:03:b1:38:
cf:49:92:f3:bf:ad:3d:7a:a2:7d:8d:3f:d7:75:82:
44:f2:01:4f:68:8f:ae:2b:53:15:bd:7f:a6:86:f8:
1d:b7:7f:11:b3:43:51:2c:16:53:03:91:72:86:f5:
73:72:55:af:61:d4:73:0b:c7:69:43:41:5d:d9:f7:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:74:19:4B:7F:E5:9E:FE:CF:4C:1B:C3:B1:FF:A6:4D:76:C1:DA:2D
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/609B8BC27D7B11EDB6B77173C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.140.0/22
103.71.175.0/24
103.194.170.0/24
103.252.220.0-103.252.222.255
Signature Algorithm: sha256WithRSAEncryption
b6:07:20:21:2f:ea:56:10:81:6a:12:f8:b4:74:ee:f1:2e:ad:
20:e1:e7:18:63:c3:25:98:5d:69:d2:2e:b6:f2:2f:e3:6a:9c:
99:8c:7d:e2:75:bf:0b:6c:57:f1:cd:17:ed:5f:4c:97:da:49:
fd:e7:2a:28:48:f9:fd:93:d8:18:d2:a3:57:69:c9:c5:6d:5c:
32:c2:0f:90:7e:b2:76:e6:a0:fe:5b:d2:47:20:68:ba:5d:0f:
5a:93:8f:41:39:81:9c:41:59:08:ee:07:e6:aa:00:03:88:da:
48:b7:95:b2:42:73:93:fc:f6:e8:cc:b4:8d:60:f1:67:02:94:
58:31:98:62:7e:4e:dd:05:83:75:db:43:a3:b3:19:f4:cb:0d:
18:36:a1:22:30:05:e4:44:62:15:f5:7e:c0:4d:ca:94:54:64:
45:c5:91:7a:fb:7b:b8:63:2c:f9:68:51:02:9d:43:e3:ee:0d:
74:24:60:37:62:22:d0:b1:6d:2f:11:d6:a7:6f:51:85:d2:c4:
4b:ec:95:4e:67:61:59:98:68:6c:b3:7d:77:78:cc:9a:b7:c6:
6e:5c:02:bf:de:fc:4e:89:d2:96:48:6f:37:45:61:5a:0d:b9:
93:48:ab:6a:3c:03:14:84:64:5e:87:ec:68:d0:c6:e5:f2:ff:
a7:03:09:af
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICGPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx
OEZEQjVCNUUwHhcNMjYwMjEwMTUwNjIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThiNDk2Zi03MGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzTOZf4fc0blrN8mAC84v7dwC011XBNAWoPkxGnho8PRvSfQ/JRUuyBKdsR4k
npXYBU9wGUoFFFPR/ls3hQ6B0UxSx6Qwis+b6tno4GRrWVXHiIDVMZshEpVewXqt
nlDeiG53r7npqdOFok0Nx/hEOCWHFJmP+SSIwT3hOOWfdXL4+aXmtEzDndncxfqd
dGSY7KETnwSA/ETo9w3a51v/wePxdxbFzYc5cDtzTsWSS30xgHSfJpSo+RHKMz7m
J7sDsTjPSZLzv609eqJ9jT/XdYJE8gFPaI+uK1MVvX+mhvgdt38Rs0NRLBZTA5Fy
hvVzclWvYdRzC8dpQ0Fd2fcXewIDAQABo4ICrzCCAqswHQYDVR0OBBYEFGR0GUt/
5Z7+z0wbw7H/pk12wdotMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1
QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEI1QkQvMzNDQjExN0FCNUE5MTFFNzlDNzRDQjcyQzRGOUFFMDIvNjA5QjhCQzI3
RDdCMTFFREI2Qjc3MTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E
KjAoMCYEAgABMCADBAIr74wDBABnR68DBABnwqowDAMEAmf83AMEAGf83jANBgkq
hkiG9w0BAQsFAAOCAQEAtgcgIS/qVhCBahL4tHTu8S6tIOHnGGPDJZhdadIutvIv
42qcmYx94nW/C2xX8c0X7V9Ml9pJ/ecqKEj5/ZPYGNKjV2nJxW1cMsIPkH6yduag
/lvSRyBoul0PWpOPQTmBnEFZCO4H5qoAA4jaSLeVskJzk/z26My0jWDxZwKUWDGY
Yn5O3QWDddtDo7MZ9MsNGDahIjAF5ERiFfV+wE3KlFRkRcWRevt7uGMs+WhRAp1D
4+4NdCRgN2Ii0LFtLxHWp29RhdLES+yVTmdhWZhobLN9d3jMmrfGblwCv978TonS
lkhvN0VhWg25k0irajwDFIRkXofsaNDG5fL/pwMJrw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:57:51 2026 by rpki-client