
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/5C954994FC7811F0BEBDC0A2546F56BC.roa
File: 5C954994FC7811F0BEBDC0A2546F56BC.roa (raw, json)
Hash identifier: QGTSlWG64XBWkttm9XK8t1ViYAfVTDcX+HMwDgfOELA=
Subject key identifier: FF:90:94:D3:D6:4A:A1:28:B0:CB:F5:26:CD:7F:65:BD:B6:CF:32:D1
Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial: 043E
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/5C954994FC7811F0BEBDC0A2546F56BC.roa
Signing time: Wed 28 Jan 2026 19:02:09 +0000
ROA not before: Wed 28 Jan 2026 19:02:09 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138432
IP address blocks: 103.181.132.0/24 maxlen: 24
103.181.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086 (0x43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Validity
Not Before: Jan 28 19:02:09 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=697a5d31-5386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:fa:1c:f9:1b:57:10:2d:75:c0:d1:9c:8a:
ce:a8:80:dd:dc:de:29:0b:54:e7:f6:b0:db:cd:f0:
03:b2:12:cb:7e:f8:6f:eb:3a:1a:cb:df:a6:1d:84:
af:82:cb:f0:a5:fb:6e:6e:3d:1d:29:37:c3:93:12:
7f:82:de:94:da:79:92:ed:fb:12:f8:be:1d:ec:12:
95:22:20:0a:67:87:62:dd:07:a7:7b:e8:3e:34:ff:
df:de:37:c1:8b:32:9f:67:21:19:5f:ab:db:56:d5:
38:e7:7b:16:1d:6d:cb:19:98:65:b0:e1:15:cc:f8:
a7:1b:dd:40:dc:45:d4:e2:31:66:df:66:fb:4e:30:
b5:58:fb:4d:a8:5b:eb:b4:e1:5d:93:63:35:21:dc:
21:9e:90:3a:90:cb:0b:b0:d0:51:57:c5:4f:e6:4d:
58:56:61:52:fd:39:38:28:e1:03:d7:ef:04:2e:b6:
b9:4c:a5:b7:ae:f1:b3:91:7a:40:ca:e1:6e:93:e0:
1d:3c:c1:73:1d:0c:58:10:5e:aa:6e:b5:5e:b6:d5:
84:c7:12:11:4e:69:ba:61:6b:3b:fa:11:e3:b2:c4:
96:4c:2e:d2:df:c9:be:c9:54:8f:ac:be:03:70:e5:
c1:df:69:aa:2d:14:38:02:77:a3:28:b0:0a:b8:34:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:94:D3:D6:4A:A1:28:B0:CB:F5:26:CD:7F:65:BD:B6:CF:32:D1
X509v3 Authority Key Identifier:
keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/5C954994FC7811F0BEBDC0A2546F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.132.0/23
Signature Algorithm: sha256WithRSAEncryption
04:01:76:38:29:a7:df:96:6a:2f:9e:3c:64:32:43:e0:60:19:
22:49:83:dd:7f:37:b1:84:1b:b2:1e:26:10:84:05:0d:06:d7:
da:26:65:38:f2:01:6c:f4:c8:c9:7c:ac:50:02:b8:18:23:63:
c1:6a:bf:f4:e1:52:92:11:1c:46:ba:e2:57:8c:4c:ab:00:65:
04:91:88:0f:74:3e:6b:2e:b7:3b:dd:92:8a:67:a1:e6:bb:b3:
71:c2:cd:ed:0f:17:c3:8a:30:3b:c5:cb:e3:a6:26:4f:f3:df:
d0:68:38:5a:a4:f3:38:e7:fb:e0:a3:6d:51:b2:19:f0:c8:03:
b9:b9:3e:29:e6:fc:c2:fe:3f:e9:27:cc:aa:95:92:ee:dd:c7:
f4:e4:d6:2b:4b:d5:c0:0c:1a:06:68:39:c1:2e:e6:9c:41:cf:
9d:56:6f:96:fe:7d:22:30:e2:06:11:e8:09:72:51:ee:7a:4a:
dc:84:ad:41:f4:22:9a:8e:6b:d3:f1:bd:49:5d:30:45:b4:7e:
a0:eb:15:37:46:1f:a2:30:c2:3f:7a:f8:ee:fd:32:37:02:18:
ab:0d:6c:f9:18:71:37:2e:0d:2b:20:c6:2f:7a:c2:43:66:4e:
79:ee:35:f8:02:93:77:83:50:1c:85:a8:a1:27:6c:b7:ee:d5:
01:89:b0:5e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDOTkxMTAvBgNVBAUTKDFBNDAxMDBCNUU1REMzNEQxQUNCNTg2RDI3MzM5MEE2
RDUxNzdERkYwHhcNMjYwMTI4MTkwMjA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhNWQzMS01Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/X6HPkbVxAtdcDRnIrOqIDd3N4pC1Tn9rDbzfADshLLfvhv6zoay9+mHYSv
gsvwpftubj0dKTfDkxJ/gt6U2nmS7fsS+L4d7BKVIiAKZ4di3Qene+g+NP/f3jfB
izKfZyEZX6vbVtU453sWHW3LGZhlsOEVzPinG91A3EXU4jFm32b7TjC1WPtNqFvr
tOFdk2M1IdwhnpA6kMsLsNBRV8VP5k1YVmFS/Tk4KOED1+8ELra5TKW3rvGzkXpA
yuFuk+AdPMFzHQxYEF6qbrVettWExxIRTmm6YWs7+hHjssSWTC7S38m+yVSPrL4D
cOXB32mqLRQ4AnejKLAKuDR5NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP+QlNPW
SqEosMv1Js1/Zb22zzLRMB8GA1UdIwQYMBaAFBpAEAteXcNNGstYbSczkKbVF33/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM5OS8yNTE1MkU1Qzk0
QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcwMGF5MWh0SnpPUXB0VVhm
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0drQVFDMTVkdzAwYXkxaHRKek9RcHRVWGZmOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRDOTkvMjUxNTJFNUM5NEE0MTFFQ0JCQTdBNTUyQzRGOUFFMDIvNUM5NTQ5OTRG
Qzc4MTFGMEJFQkRDMEEyNTQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFntYQwDQYJKoZIhvcNAQELBQADggEBAAQBdjgpp9+Wai+e
PGQyQ+BgGSJJg91/N7GEG7IeJhCEBQ0G19omZTjyAWz0yMl8rFACuBgjY8Fqv/Th
UpIRHEa64leMTKsAZQSRiA90Pmsutzvdkopnoea7s3HCze0PF8OKMDvFy+OmJk/z
39BoOFqk8zjn++CjbVGyGfDIA7m5Pinm/ML+P+knzKqVku7dx/Tk1itL1cAMGgZo
OcEu5pxBz51Wb5b+fSIw4gYR6AlyUe56StyErUH0IpqOa9PxvUldMEW0fqDrFTdG
H6Iwwj96+O79MjcCGKsNbPkYcTcuDSsgxi96wkNmTnnuNfgCk3eDUByFqKEnbLfu
1QGJsF4=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:26:11 2026 by rpki-client