
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/D4DE5FF8A01F11EC87D72549C4F9AE02.roa
File: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (raw, json)
Hash identifier: jgKLr97NCxGbMQw2KqMMJn8wwwW+6kdvne/Gf4XoT3A=
Subject key identifier: 0C:75:42:BE:D9:2E:C0:B6:14:6A:53:F0:C3:1F:6A:57:A3:4F:27:A3
Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial: 06E1
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/D4DE5FF8A01F11EC87D72549C4F9AE02.roa
Signing time: Tue 06 Jan 2026 22:17:55 +0000
ROA not before: Tue 06 Jan 2026 22:17:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24303
IP address blocks: 202.44.116.0/22 maxlen: 22
2001:df5:3780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Validity
Not Before: Jan 6 22:17:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=695d8a12-69ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:5a:7a:33:79:72:48:3d:59:11:ac:20:60:
6a:f0:ec:82:8f:22:32:1e:f4:09:b4:1c:0f:a2:c4:
6f:ff:e6:0a:96:52:c3:04:c6:f8:82:bc:a5:10:7b:
61:13:0d:37:21:96:d0:e2:b9:d0:6b:38:a7:53:0f:
c3:6e:ef:fa:98:7e:02:b1:90:c4:bd:cb:e6:f1:23:
1e:02:87:0b:f9:7e:35:26:37:cb:0f:b3:73:96:c6:
02:de:aa:ad:ee:68:29:d3:be:3a:74:5b:54:8d:70:
a9:b7:9a:e2:6a:86:38:52:97:33:f6:29:f3:d6:ca:
a6:ed:06:fe:3b:9d:18:ba:8c:0f:5a:7c:d6:bf:9e:
39:50:17:08:68:98:95:20:93:c5:b3:b9:9a:b0:d2:
17:d0:09:8c:d9:ef:91:cf:12:91:ef:d9:6f:a6:61:
fd:e2:30:cf:ad:32:c4:22:36:40:85:1d:7f:61:46:
5e:cd:7f:21:f1:5c:de:14:58:72:a9:4f:24:0f:41:
2b:56:4d:39:1b:8d:ee:8e:31:e3:16:e4:0a:59:8f:
c8:87:8b:a1:c7:0f:61:e0:60:c4:a0:0c:84:6e:41:
b7:78:6a:68:08:eb:01:67:b7:6f:a4:a3:f1:71:cc:
0b:aa:fd:b4:85:a6:36:9b:5e:ca:01:06:3f:30:e6:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:75:42:BE:D9:2E:C0:B6:14:6A:53:F0:C3:1F:6A:57:A3:4F:27:A3
X509v3 Authority Key Identifier:
keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/D4DE5FF8A01F11EC87D72549C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.44.116.0/22
IPv6:
2001:df5:3780::/48
Signature Algorithm: sha256WithRSAEncryption
a3:7a:0f:61:2e:16:b9:71:a3:41:73:c0:de:64:57:11:da:c7:
90:48:ba:93:1e:e7:c9:bf:b4:72:99:d7:d0:2e:18:88:2f:30:
da:4f:d8:c2:30:19:22:64:3a:a5:28:3a:cb:1b:89:23:5a:6e:
a6:89:b8:ce:65:24:b7:23:64:e0:4b:e2:93:c3:b6:df:9d:9a:
fd:fc:b6:fa:35:81:87:b3:d2:ef:3e:a4:8d:8e:d3:a0:cf:40:
29:dc:a9:61:ce:bd:b0:d8:04:0e:23:cf:8b:d6:7f:a1:20:63:
1a:5e:f8:e5:46:f2:69:f0:78:be:76:13:f0:e6:fe:b9:82:13:
fe:47:77:fa:2a:53:b8:a3:41:90:1d:cf:40:a7:f1:54:69:ca:
62:be:5d:d8:b4:2d:38:d1:ab:a5:ec:e9:5f:18:a2:ef:d9:73:
cd:c0:13:c4:b5:b1:10:c3:de:9b:d1:16:c5:20:d0:cc:63:0a:
8e:cf:57:82:15:38:82:06:1f:da:b8:57:c3:88:4d:ec:65:c5:
eb:45:7e:14:08:79:42:a6:4a:24:9d:09:1b:35:63:50:18:0a:
1e:53:69:97:43:45:5e:aa:85:7f:ed:d9:97:66:ff:89:e0:34:
55:86:c2:49:60:6e:cc:1e:8c:86:f2:7d:ba:0c:48:6e:cd:14:
1d:b3:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:53:11 2026 by rpki-client