
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/69482E56075411EFB23BE380C4F9AE02.roa
File: 69482E56075411EFB23BE380C4F9AE02.roa (raw, json)
Hash identifier: 5VXSVqBRZ54kF1gw42EU8mIY4oxlH5yrDJ9ATM7i36o=
Subject key identifier: 3E:15:C3:80:CE:40:94:3D:77:9E:1B:C5:F2:71:0E:A6:EE:D3:CE:4C
Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Certificate serial: 0780
Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/69482E56075411EFB23BE380C4F9AE02.roa
Signing time: Wed 04 Feb 2026 21:18:36 +0000
ROA not before: Wed 04 Feb 2026 21:18:36 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134507
IP address blocks: 103.231.204.0/22 maxlen: 23
103.231.204.0/24 maxlen: 24
103.231.205.0/24 maxlen: 24
103.231.206.0/24 maxlen: 24
103.231.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl
rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920 (0x780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Validity
Not Before: Feb 4 21:18:36 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6983b7ac-1523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:d4:c5:c2:a0:4b:ac:97:97:22:65:21:42:
78:f9:fa:7a:15:8e:46:c1:66:37:cd:2d:51:d1:06:
bf:eb:27:58:34:1d:f4:02:ee:83:88:af:78:39:35:
cc:e7:78:cc:43:a4:0a:90:dc:3d:5d:e5:54:10:fc:
b5:5f:30:e7:b7:96:f7:18:d3:09:92:68:7c:dc:9d:
e4:6e:12:ec:76:4b:da:92:1c:ba:32:6e:41:3e:ec:
95:fd:50:5b:d5:61:59:0e:30:a2:a6:8c:d9:0b:84:
30:be:5c:6c:51:fa:d0:60:66:74:41:27:1b:05:af:
39:29:ee:e5:c2:26:a4:f6:f2:72:59:91:c0:e5:d1:
7d:4b:62:86:88:0b:6b:a1:fd:ea:66:cb:f1:20:9f:
7d:33:e9:70:2d:05:6d:10:4f:45:3c:28:ef:e5:d7:
44:65:4e:80:ee:32:71:fc:9b:14:80:04:4d:83:0f:
13:ab:e8:ee:04:00:40:89:a1:48:96:bb:d4:66:db:
14:98:41:3f:77:69:23:a4:0f:38:10:fb:b9:20:26:
c4:8c:17:1f:96:26:d4:4e:fa:30:a0:96:fa:ae:1b:
b0:d9:e8:f5:20:79:be:6d:0a:26:31:ae:08:4a:76:
95:6e:20:ff:b8:d0:61:7d:e5:db:50:ed:e9:4c:2d:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:C3:80:CE:40:94:3D:77:9E:1B:C5:F2:71:0E:A6:EE:D3:CE:4C
X509v3 Authority Key Identifier:
keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/69482E56075411EFB23BE380C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:ee:a9:85:d2:96:3a:bd:d4:a7:cd:db:e7:18:0f:7d:0e:16:
14:c2:e6:eb:2e:26:e7:e6:15:47:ba:34:6b:5c:e5:38:cb:83:
2b:51:51:9b:47:69:e6:80:d4:d3:64:ac:ed:ee:7a:92:12:72:
53:3e:cb:99:77:3c:71:4e:cd:93:df:f5:28:88:ba:61:71:eb:
6a:ac:92:7f:6f:fa:96:6a:9a:b2:89:7d:c2:4d:c3:9b:f1:cb:
83:36:99:e2:01:c8:2a:8d:6a:44:59:90:3e:30:6a:2e:96:79:
3e:98:0a:94:d6:32:11:f8:e7:f2:50:21:21:a0:55:b1:00:23:
a0:d4:12:a2:41:bc:07:67:c4:32:2b:5f:c4:51:72:77:e3:3d:
ab:50:6a:e4:09:7c:9e:e2:5a:04:18:89:3b:4a:50:60:20:f0:
24:4b:41:48:a5:da:cc:7f:7b:d9:44:7a:ac:bf:87:c7:aa:67:
c8:93:97:da:83:cc:52:ff:d1:6a:93:20:8c:3b:49:c1:95:4a:
a0:06:f3:43:42:b7:db:18:42:7d:18:ba:f0:af:b7:d4:60:d2:
78:6e:16:d2:6f:de:e7:25:59:18:19:e2:ba:04:18:2c:d1:d5:
60:fc:e1:5b:3b:1b:65:b5:eb:f3:a8:92:6c:48:b6:a0:96:80:
fb:74:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:16 2026 by rpki-client