
$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa
File: 46C5452E0DD711EF85707821C4F9AE02.roa (raw, json)
Hash identifier: iO3pgtesIJxgbMYCx/LqyA4+g53jPjICkWF08nO0EDk=
Subject key identifier: 41:B8:E6:35:52:69:00:22:69:EB:EF:94:9B:39:3E:FA:57:B0:82:CE
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0C82
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa
Signing time: Thu 19 Feb 2026 06:28:11 +0000
ROA not before: Thu 19 Feb 2026 06:28:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 58504
IP address blocks: 103.28.84.0/22 maxlen: 22
103.28.84.0/24 maxlen: 24
103.28.85.0/24 maxlen: 24
103.28.86.0/24 maxlen: 24
103.28.87.0/24 maxlen: 24
150.107.204.0/22 maxlen: 22
150.107.204.0/24 maxlen: 24
150.107.205.0/24 maxlen: 24
150.107.206.0/24 maxlen: 24
150.107.207.0/24 maxlen: 24
2406:b700::/32 maxlen: 32
2406:b700::/48 maxlen: 48
2406:b700:2::/48 maxlen: 48
2406:b700:3::/48 maxlen: 48
2406:b700:4::/48 maxlen: 48
2406:b700:5::/48 maxlen: 48
2406:b700:6::/48 maxlen: 48
2406:b700:7::/48 maxlen: 48
2406:b700:8::/48 maxlen: 48
2406:b700:a::/48 maxlen: 48
2406:b700:b::/48 maxlen: 48
2406:b700:c::/48 maxlen: 48
2406:b700:d::/48 maxlen: 48
2406:b700:e::/48 maxlen: 48
2406:b700:f::/48 maxlen: 48
2406:b700:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Feb 19 06:28:11 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6996ad7b-5042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:fd:3d:93:6f:70:94:88:13:47:a5:89:05:
31:4b:17:d5:fb:2c:ad:47:b9:dc:76:4b:99:52:25:
09:6a:76:1d:15:23:fc:fd:82:1b:fd:f0:be:08:27:
12:e3:57:f9:5b:76:fb:01:b2:b6:cf:41:73:a1:8a:
2e:a0:ff:c6:58:23:43:43:0b:48:0e:86:0a:4e:6d:
d4:30:1c:30:91:d8:5d:66:67:ae:43:b8:46:a6:6e:
9d:b9:d3:58:14:0b:47:99:39:3d:6d:3a:3e:75:3b:
8e:43:1c:91:71:2d:8b:4c:b6:b0:90:ee:73:a7:da:
0a:85:4d:57:c3:11:9a:79:0a:40:3b:f2:e0:28:6f:
53:45:e0:a0:8d:63:b3:29:cd:38:4e:06:48:93:fe:
0a:8b:63:03:8f:c6:55:aa:bf:3a:64:86:b6:22:b3:
a6:3a:fb:01:3a:c9:e8:0b:81:2f:22:c1:7f:a6:62:
99:f3:31:47:cf:63:dc:81:91:16:0e:ed:8e:dc:a0:
32:7e:b9:4a:82:46:d8:d9:95:1d:b2:49:3b:3f:85:
b0:0b:4e:eb:bd:a5:38:27:38:ea:20:ab:f8:d2:00:
b3:bb:77:1e:0e:fd:91:95:41:77:0f:50:8c:de:1e:
60:7a:ec:f7:ce:c4:4d:d5:4d:0b:f4:0b:64:b2:d9:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:E6:35:52:69:00:22:69:EB:EF:94:9B:39:3E:FA:57:B0:82:CE
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.84.0/22
150.107.204.0/22
IPv6:
2406:b700::/32
Signature Algorithm: sha256WithRSAEncryption
39:a0:b1:15:b6:fd:2f:34:4d:f4:47:7e:b9:4e:46:2d:12:28:
c9:f9:c1:06:49:98:74:c5:20:53:ac:fb:6e:38:60:5a:94:8b:
6d:bc:73:de:b9:42:44:fb:0b:c8:3f:dc:eb:b5:cd:64:b0:0a:
f3:71:8c:c8:c1:6b:51:c7:0f:62:61:8f:aa:3f:ea:d5:32:04:
c0:c7:3f:e0:2a:93:51:f6:11:47:3f:50:14:90:61:f1:95:13:
e5:8b:6c:96:d3:40:34:3a:fe:2b:31:a6:84:74:73:a8:7f:d1:
bf:cc:00:86:e3:e2:a7:45:d3:9f:24:cd:e0:d7:29:71:5f:ec:
6f:55:a1:43:9c:f4:bf:01:07:eb:1d:0b:39:f0:34:50:76:c5:
3e:1c:63:4e:ea:45:bb:9b:2f:b2:63:5c:8f:a4:08:85:05:b9:
e4:03:54:e5:94:5f:c6:70:49:8f:42:5c:25:77:b7:96:f6:f0:
a0:b3:3b:00:fb:a3:bc:ab:4b:b4:05:c8:17:43:1e:b5:3f:5d:
81:c1:93:9e:e0:07:fc:65:9d:37:6f:68:ab:5a:a3:93:ff:d6:
a7:47:00:df:3a:46:57:8f:cb:de:bf:61:55:19:1a:08:f3:ed:
c1:13:cf:f3:42:7f:bb:c5:7a:be:1e:e8:84:d9:d0:69:60:96:
cf:b1:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:21:07 2026 by rpki-client