
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/BB593434FF3611F08F27381B8BEE528E.roa
File: BB593434FF3611F08F27381B8BEE528E.roa (raw, json)
Hash identifier: HQT952CXQhI/dZz6h2jRdbg19A374S/bX/PFyWaek7Q=
Subject key identifier: 51:F0:BC:EF:3F:CE:DF:58:98:59:4B:D8:F1:DF:F2:17:C1:88:1B:F9
Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933
Certificate serial: 8D
Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/BB593434FF3611F08F27381B8BEE528E.roa
Signing time: Wed 11 Feb 2026 06:29:22 +0000
ROA not before: Wed 11 Feb 2026 06:29:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38289
IP address blocks: 123.100.128.0/21 maxlen: 21
123.100.128.0/24 maxlen: 24
123.100.132.0/24 maxlen: 24
123.100.133.0/24 maxlen: 24
123.100.142.0/24 maxlen: 24
123.100.153.0/24 maxlen: 24
123.100.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl
rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Feb 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933
Validity
Not Before: Feb 11 06:29:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=698c21c2-b9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:74:d4:6c:7e:14:27:e8:0c:41:1a:c6:58:
f9:9b:47:69:a0:ce:4f:e9:ba:95:d4:33:93:31:f1:
ca:df:ba:a1:f1:b6:e8:c8:40:5e:c3:03:d6:bb:12:
5e:8f:ca:ff:89:3a:e9:4f:4e:b4:ef:0a:1c:43:9f:
d4:bd:ce:73:f4:fe:a3:4d:7d:94:3f:54:4a:4c:86:
d2:e0:7b:45:c0:b9:65:cf:30:7a:e9:a5:a8:a3:8d:
9d:ff:1f:94:f0:7a:24:a5:e6:50:39:fe:7c:f2:55:
c7:06:43:c8:b9:37:a9:60:cd:c3:73:e4:30:4a:75:
06:3b:63:b3:16:88:f8:6e:d3:7a:4d:13:c5:f1:e5:
e0:c9:75:e8:5d:d0:03:69:86:2b:e7:62:b9:4e:4c:
34:68:38:65:1a:82:01:b1:c3:7f:38:68:71:ae:7c:
35:5c:a5:61:f7:b2:5f:43:db:92:7c:64:a7:e9:72:
64:03:c7:32:3d:03:e9:2a:5a:a9:e5:36:b8:96:93:
d5:98:dc:96:63:23:15:97:28:fc:80:01:e3:b6:67:
9a:87:df:f0:80:9b:eb:9f:c7:a1:6b:b7:ba:ca:bd:
67:1c:78:e3:a4:bf:bd:22:0b:a5:1c:9d:59:92:26:
cc:a0:fe:a1:7d:fb:07:84:fd:53:fa:57:3f:52:b1:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:BC:EF:3F:CE:DF:58:98:59:4B:D8:F1:DF:F2:17:C1:88:1B:F9
X509v3 Authority Key Identifier:
keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/BB593434FF3611F08F27381B8BEE528E.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.100.128.0/21
123.100.142.0/24
123.100.153.0-123.100.155.255
Signature Algorithm: sha256WithRSAEncryption
39:31:7d:ae:8a:b8:ab:67:0e:04:ec:62:94:97:f5:cb:0a:d7:
3d:75:d7:7c:cb:fd:4c:f6:d8:64:6a:02:48:de:20:14:78:3e:
a1:79:8b:df:92:16:af:e4:4a:d5:c2:3d:67:a6:ad:1d:9c:4a:
44:37:43:08:37:4b:37:2c:95:49:b9:0a:8a:ca:2e:f9:1c:46:
5a:18:2c:f7:c2:14:99:ea:e6:c2:43:5d:e2:9f:4e:27:8f:60:
cb:2c:f8:02:4a:7f:3e:94:4b:40:47:1d:1d:61:78:74:22:36:
56:56:bd:7e:5e:c7:f2:42:70:4a:fb:c1:bd:4c:d2:ac:0d:b5:
a1:b6:16:89:48:2c:6c:17:14:b3:38:ac:b9:1d:46:f5:74:13:
b2:9a:49:d2:e2:e1:cb:3b:0d:25:25:09:c5:34:01:c0:4b:7e:
7e:35:bb:3f:4a:ea:c7:fd:4a:b1:4f:76:01:c5:0f:6c:89:ec:
71:c6:71:35:af:49:d6:ed:9e:5a:35:ef:1b:74:93:c5:72:d6:
14:36:a4:d2:83:ed:dc:37:28:61:35:b9:b4:c3:d4:ad:c8:7d:
b9:c0:2d:87:79:dc:d0:fe:6e:a5:38:3d:8a:aa:14:2c:89:89:
ac:80:6e:49:b9:ce:1e:31:71:19:4c:0f:51:db:6a:d4:c3:4a:
47:91:82:21
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx
NzZFQUU5MzMwHhcNMjYwMjExMDYyOTIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThjMjFjMi1iOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1YZ01Gx+FCfoDEEaxlj5m0dpoM5P6bqV1DOTMfHK37qh8bboyEBewwPWuxJe
j8r/iTrpT0607wocQ5/Uvc5z9P6jTX2UP1RKTIbS4HtFwLllzzB66aWoo42d/x+U
8HokpeZQOf588lXHBkPIuTepYM3Dc+QwSnUGO2OzFoj4btN6TRPF8eXgyXXoXdAD
aYYr52K5Tkw0aDhlGoIBscN/OGhxrnw1XKVh97JfQ9uSfGSn6XJkA8cyPQPpKlqp
5Ta4lpPVmNyWYyMVlyj8gAHjtmeah9/wgJvrn8eha7e6yr1nHHjjpL+9IgulHJ1Z
kibMoP6hffsHhP1T+lc/UrE3ywIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFFHwvO8/
zt9YmFlL2PHf8hfBiBv5MB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx
NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZFOUYvMjMwMjcxMjQ1MTcwMTFGMEI5REJDQjg3QzRGOUFFMDIvQkI1OTM0MzRG
RjM2MTFGMDhGMjczODFCOEJFRTUyOEUucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBAN7ZIADBAB7ZI4wDAMEAHtkmQMEAntkmDANBgkqhkiG9w0B
AQsFAAOCAQEAOTF9roq4q2cOBOxilJf1ywrXPXXXfMv9TPbYZGoCSN4gFHg+oXmL
35IWr+RK1cI9Z6atHZxKRDdDCDdLNyyVSbkKisou+RxGWhgs98IUmermwkNd4p9O
J49gyyz4Akp/PpRLQEcdHWF4dCI2Vla9fl7H8kJwSvvBvUzSrA21obYWiUgsbBcU
szisuR1G9XQTsppJ0uLhyzsNJSUJxTQBwEt+fjW7P0rqx/1KsU92AcUPbInsccZx
Na9J1u2eWjXvG3STxXLWFDak0oPt3DcoYTW5tMPUrch9ucAth3nc0P5upTg9iqoU
LImJrIBuSbnOHjFxGUwPUdtq1MNKR5GCIQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:06 2026 by rpki-client