
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa
File: B3A2D41A071211F0B9531F0DC4F9AE02.roa (raw, json)
Hash identifier: I43la8Jg6nTXmIQnP62meA4bUFJBXemPB0O6WT7Y9jk=
Subject key identifier: D2:30:EC:9E:E2:31:05:C8:9E:43:7E:4F:23:24:23:10:EB:DA:A9:DF
Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial: 085A
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa
Signing time: Wed 11 Feb 2026 09:29:57 +0000
ROA not before: Wed 11 Feb 2026 09:29:57 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141189
IP address blocks: 103.156.26.0/23 maxlen: 23
103.156.26.0/24 maxlen: 24
103.156.27.0/24 maxlen: 24
2001:df4:e480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Validity
Not Before: Feb 11 09:29:57 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=698c4c15-9061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:af:fc:a4:ab:2e:46:5e:ba:72:b1:31:c2:
f4:54:7b:f9:a7:59:9b:fc:1d:aa:1b:ab:0c:74:7b:
1c:f1:45:ca:26:57:19:f1:58:4f:2d:da:fc:38:c1:
71:9b:29:cb:a0:4f:cc:d4:27:62:bb:db:1b:4f:b8:
b4:7d:98:8e:e7:3c:19:e4:d5:05:9e:55:04:ec:79:
0e:cc:e2:50:0b:bc:89:b0:bb:2d:03:68:81:32:6b:
38:83:2a:a0:51:17:4c:73:d4:73:9a:aa:e6:01:9a:
8f:e5:5d:9d:bd:d0:54:90:95:68:34:cc:a6:ac:e4:
dd:a0:68:f2:ac:12:24:6f:20:05:b6:83:cc:43:cd:
8c:c4:56:35:c2:72:27:7d:f6:59:32:df:1f:17:75:
cb:2a:04:29:5f:44:e5:50:ed:51:82:06:4a:25:d7:
8c:24:52:64:16:bf:41:4d:a3:29:55:f3:a0:54:8d:
dc:c7:b8:0c:45:0e:16:10:c0:92:71:87:ca:cd:07:
db:0d:42:fe:96:20:6b:2a:8c:e2:a6:ba:b0:dd:5c:
59:d4:8c:2d:ec:9f:0d:5a:70:23:92:3a:31:16:05:
a1:1f:6f:47:e5:ce:44:64:3b:d6:e5:c8:c5:67:4b:
84:57:7b:69:bd:95:57:83:a4:de:f0:f4:ce:6e:7b:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:30:EC:9E:E2:31:05:C8:9E:43:7E:4F:23:24:23:10:EB:DA:A9:DF
X509v3 Authority Key Identifier:
keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.26.0/23
IPv6:
2001:df4:e480::/48
Signature Algorithm: sha256WithRSAEncryption
3e:32:70:9a:da:eb:a5:17:59:7d:13:08:92:6e:35:08:c7:27:
1e:d9:c5:2d:52:62:e7:06:49:37:75:93:bf:b7:b1:b8:32:aa:
12:18:5c:04:1c:50:7f:df:e3:b4:6d:dc:ed:35:bd:b6:f8:39:
d8:59:bf:28:ca:93:17:9f:a3:e5:fe:96:5d:b7:0d:d0:64:14:
ae:14:b1:53:6e:aa:a9:9d:3e:30:9e:e1:3c:e1:04:0f:eb:1d:
94:2f:a7:a0:d3:71:02:68:7a:10:64:e7:f0:9c:4b:5f:05:9d:
81:ac:ef:b6:e9:d6:6b:c9:bb:d8:5d:8b:59:17:30:2a:22:20:
1c:99:1b:34:82:2e:e8:ef:c8:fd:8b:3e:38:85:ea:ac:49:e1:
d9:ab:2b:43:c4:14:f1:92:e2:d1:41:c3:5b:a3:5c:6b:75:34:
92:6a:2d:27:9b:19:72:15:77:78:1b:fc:92:bc:49:21:2c:63:
4a:09:ba:6c:08:c6:21:59:07:73:de:7d:da:fc:f0:8d:45:11:
0f:a1:7d:d2:79:66:47:7c:da:b9:ae:fc:de:bc:ce:63:e3:aa:
73:90:26:1e:1e:3d:b4:8a:7a:7c:d2:a7:56:b1:2b:b5:e2:43:
06:7e:29:2b:6c:45:3b:70:a1:72:d8:81:c1:e4:fc:70:bf:69:
5e:28:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:19:41 2026 by rpki-client