
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
File: B4D99056FF2511F0989D8DC686EE528E.roa (raw, json)
Hash identifier: ew8sdGl4rom8HxN/a8WKGku9q7OXmx77v3SQQVmGwHk=
Subject key identifier: 15:9C:E8:85:42:40:FF:7F:16:DA:06:D9:56:E2:D3:CB:4E:21:BB:0E
Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Certificate serial: 017C
Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
Signing time: Tue 03 Feb 2026 04:23:02 +0000
ROA not before: Tue 03 Feb 2026 04:23:02 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 9821
IP address blocks: 103.80.140.0/22 maxlen: 22
202.90.128.0/19 maxlen: 19
202.90.135.0/24 maxlen: 24
202.90.155.0/24 maxlen: 24
203.211.56.0/22 maxlen: 22
2001:d18::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Validity
Not Before: Feb 3 04:23:02 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69817826-7ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:91:d5:b8:16:8b:da:a7:5b:4b:cd:fa:fa:
8f:71:dc:c6:84:50:0c:66:63:ae:02:28:a9:47:54:
5c:3c:db:d7:84:df:7a:13:0b:6e:a7:91:21:32:17:
04:81:80:07:51:62:a9:b6:ba:b3:e6:11:9e:d3:88:
0b:34:dc:bd:2b:20:e2:5c:d1:fe:5a:dc:5c:30:5a:
b6:06:f7:1e:5e:22:0c:98:d9:0e:37:dd:e1:ef:ae:
f6:c2:c9:99:05:28:e9:c2:8f:b8:dc:ab:1b:e0:54:
4e:08:f4:f6:c9:dd:1a:e8:90:bc:30:11:62:00:d3:
09:31:28:10:b3:94:54:a5:bf:9d:57:d1:7b:48:57:
89:cc:7b:5f:db:fc:cc:85:6d:99:bb:46:c1:eb:5d:
fc:97:ee:77:08:be:5e:fa:cf:18:9f:e5:ef:ac:bf:
28:f9:81:5a:2e:9c:a6:cc:5f:ab:84:e7:19:c4:0b:
c2:fc:68:03:e7:85:6e:22:02:0b:f9:62:a8:2a:4f:
f1:8d:9f:5f:6a:57:89:6e:3e:78:e7:c7:dd:6c:2b:
4d:fd:94:54:e2:ee:d1:09:8c:2c:b1:5e:49:16:88:
92:dc:df:73:9c:a6:b4:c8:3e:be:44:af:0f:b6:88:
ff:36:46:a8:5d:0e:04:a9:6c:67:8d:e6:53:dc:b3:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:E8:85:42:40:FF:7F:16:DA:06:D9:56:E2:D3:CB:4E:21:BB:0E
X509v3 Authority Key Identifier:
keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.140.0/22
202.90.128.0/19
203.211.56.0/22
IPv6:
2001:d18::/32
Signature Algorithm: sha256WithRSAEncryption
92:c2:4f:8a:47:5e:29:e5:4b:d0:50:31:35:6b:cf:70:dd:2e:
a9:4d:30:f4:a7:70:da:c7:f6:08:e8:b1:a3:47:a2:5b:67:5b:
7a:87:85:00:c9:ef:e8:87:60:84:35:4e:be:fa:6a:d1:4c:43:
9e:56:cf:70:81:77:bd:44:41:83:b9:26:da:8e:82:c9:7b:ba:
9c:d1:7d:47:1c:a7:73:fc:55:0c:29:a9:b1:4a:68:51:14:10:
bc:89:86:16:3f:72:86:f1:bc:5f:9e:cf:df:9d:ab:04:45:5a:
61:91:52:f9:97:79:9b:d1:fd:06:a6:8e:c7:be:0d:d9:63:26:
b8:3e:b2:4c:3d:ae:90:ab:12:bb:e1:69:b5:80:6b:58:fc:44:
9d:07:7c:04:dd:c9:2f:8c:84:4a:05:0e:8e:fa:a1:b8:4d:0b:
c9:fe:21:dc:c5:df:a8:9b:db:a1:ce:ce:49:86:44:fb:87:72:
e6:db:bf:ff:9b:d7:4e:7d:16:79:a3:77:58:90:0c:49:7f:54:
62:8a:99:85:18:4f:ef:3f:78:8b:f8:ad:0d:e8:8e:44:ce:50:
30:1f:67:e6:48:5a:9c:13:a3:06:76:28:7c:67:95:97:6b:37:
29:e0:bd:60:6e:9a:cd:f2:a6:ac:6e:a5:34:85:6a:11:54:8d:
f3:19:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:24:42 2026 by rpki-client