
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
File: 608BD4EA019C11F18EFB8EA7666F56BC.roa (raw, json)
Hash identifier: zR0UxD/7uVtUzaOHpSeFcY0uRr2MZvP1wbeC2a/OK8M=
Subject key identifier: F7:43:A8:36:09:4F:C7:5D:5E:B6:BF:86:06:5F:05:6B:2B:79:0E:CF
Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial: 5C
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
Signing time: Wed 04 Feb 2026 07:37:37 +0000
ROA not before: Wed 04 Feb 2026 07:37:37 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142244
IP address blocks: 203.174.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Validity
Not Before: Feb 4 07:37:37 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6982f741-0551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:df:b7:64:dd:35:ca:d2:88:3c:35:17:9b:
ee:d0:6b:66:15:01:38:74:71:a2:e7:52:3f:59:31:
b7:71:46:67:6f:26:41:09:5f:ae:85:e5:08:2e:55:
58:93:16:b1:51:ed:b3:cf:a5:11:d8:34:31:03:a1:
e9:58:39:f2:53:25:4c:06:d1:29:37:2f:2f:be:a0:
c2:0a:82:c6:f3:2d:fa:b5:36:a5:67:bd:63:d4:70:
56:6a:f0:c4:79:62:f5:e2:06:5e:4e:0a:31:1a:66:
f1:49:09:20:9f:44:2c:97:49:5d:a3:45:39:de:d0:
91:b0:f6:87:94:92:11:c5:0a:de:1a:f6:ba:89:0e:
e6:5f:c6:4e:96:2f:05:d5:5e:2a:b9:9d:26:71:84:
66:3d:77:5c:06:8a:90:23:3b:c0:77:d5:14:00:ec:
83:17:f8:e0:ad:65:50:c2:f0:75:7d:d9:26:db:89:
63:95:dd:57:d7:f4:1c:8d:43:b8:42:7d:86:ab:6e:
73:5e:5d:a6:53:35:ed:be:7c:27:39:a4:58:86:23:
99:48:4b:39:b3:a1:86:6e:59:0d:4e:e1:2c:07:af:
b6:6a:ce:3a:2c:b2:3c:06:37:a9:d9:0c:67:c4:a2:
dd:46:d7:3a:77:13:9b:6c:00:18:1d:4c:82:e4:48:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:A8:36:09:4F:C7:5D:5E:B6:BF:86:06:5F:05:6B:2B:79:0E:CF
X509v3 Authority Key Identifier:
keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.174.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ed:66:c6:d7:d5:bb:f7:2b:09:33:c7:b3:ab:2a:83:64:78:
10:db:f3:76:6b:54:c6:d7:8b:af:d5:50:4b:36:75:13:95:3a:
9d:17:95:65:9c:10:ed:8f:f3:e0:e9:b6:78:8c:70:94:09:0f:
7b:2a:d3:24:c2:44:5b:18:36:d9:2e:d8:a8:a9:da:2e:26:28:
6c:a7:ab:f9:56:ba:14:58:7b:d9:b1:4c:50:44:61:8a:36:70:
ce:37:53:7b:1e:87:53:0d:ba:e0:6e:92:02:64:62:f8:44:69:
dd:ac:b9:0d:b9:85:49:4b:5f:3c:00:76:34:e9:1b:ee:54:c1:
ab:43:68:7f:55:0c:da:7f:28:d0:08:b1:d6:95:28:fc:d6:22:
3f:80:56:6d:ff:5b:64:98:4a:97:e8:0c:97:d2:c4:c8:39:a1:
df:56:ef:15:65:d5:2c:19:0d:be:63:7a:5c:48:3f:4e:15:bf:
ec:3b:45:e4:2a:90:a4:cc:05:7e:ba:47:70:c8:71:1d:11:7d:
07:f3:01:78:92:2b:ec:3f:1c:40:25:d2:47:c2:d6:06:fb:3b:
19:d2:d4:eb:56:ab:8d:57:94:fa:39:f0:e4:a1:c2:ca:ed:5c:
be:86:3f:76:80:16:f6:11:22:e6:20:a5:e4:31:f3:ba:93:16:
44:7e:e5:10
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB
NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE
OTEyODUzMzAeFw0yNjAyMDQwNzM3MzdaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODJmNzQxLTA1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTF9+3ZN01ytKIPDUXm+7Qa2YVATh0caLnUj9ZMbdxRmdvJkEJX66F5QguVViT
FrFR7bPPpRHYNDEDoelYOfJTJUwG0Sk3Ly++oMIKgsbzLfq1NqVnvWPUcFZq8MR5
YvXiBl5OCjEaZvFJCSCfRCyXSV2jRTne0JGw9oeUkhHFCt4a9rqJDuZfxk6WLwXV
Xiq5nSZxhGY9d1wGipAjO8B31RQA7IMX+OCtZVDC8HV92SbbiWOV3VfX9ByNQ7hC
fYarbnNeXaZTNe2+fCc5pFiGI5lISzmzoYZuWQ1O4SwHr7ZqzjossjwGN6nZDGfE
ot1G1zp3E5tsABgdTILkSJYTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU90OoNglP
x11etr+GBl8Fayt5Ds8wHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0
MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NERCRi9DMTQ1NjA1MDg0NDAxMUYwQTU3MEJDNDlDNEY5QUUwMi82MDhCRDRFQTAx
OUMxMUYxOEVGQjhFQTc2NjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMuuFjANBgkqhkiG9w0BAQsFAAOCAQEAru1mxtfVu/crCTPH
s6sqg2R4ENvzdmtUxteLr9VQSzZ1E5U6nReVZZwQ7Y/z4Om2eIxwlAkPeyrTJMJE
Wxg22S7YqKnaLiYobKer+Va6FFh72bFMUERhijZwzjdTex6HUw264G6SAmRi+ERp
3ay5DbmFSUtfPAB2NOkb7lTBq0Nof1UM2n8o0Aix1pUo/NYiP4BWbf9bZJhKl+gM
l9LEyDmh31bvFWXVLBkNvmN6XEg/ThW/7DtF5CqQpMwFfrpHcMhxHRF9B/MBeJIr
7D8cQCXSR8LWBvs7GdLU61arjVeU+jnw5KHCyu1cvoY/doAW9hEi5iCl5DHzupMW
RH7lEA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:39 2026 by rpki-client