
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
File: D254B444679111EF8A2C9062C4F9AE02.roa (raw, json)
Hash identifier: uWEyeMJLYsMGmjoC0uqql21JmftSK+C8wOE1boQycuA=
Subject key identifier: FD:5B:A3:62:FA:B8:0A:D4:A5:43:DD:CE:4C:01:99:65:84:2F:37:28
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 04DE
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
Signing time: Sat 31 Jan 2026 00:19:43 +0000
ROA not before: Sat 31 Jan 2026 00:19:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134788
IP address blocks: 103.178.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Validity
Not Before: Jan 31 00:19:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697d4a9f-ecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:4f:5a:17:7d:84:52:72:5c:fb:57:fb:d7:
76:d8:b8:95:d1:5a:5f:8e:23:3c:b9:70:2a:e7:76:
ba:1c:1b:34:8d:c3:6a:92:f5:0e:bf:a7:94:9d:5c:
6d:a1:a9:a7:11:cd:ac:0f:3f:e5:80:27:bf:13:a4:
7c:6f:76:0c:00:3b:18:df:34:8f:0a:2e:0d:18:ac:
5e:af:46:58:6a:36:3e:73:9e:55:5c:2b:17:23:1b:
19:ad:21:cc:bc:3a:0e:a3:51:9d:be:c6:75:cc:92:
3b:95:0f:9a:e9:1c:54:22:19:f9:04:1f:1d:5c:0b:
ff:00:fc:95:98:88:46:d1:83:a3:68:a6:4e:15:3b:
c2:3f:17:92:a7:93:aa:77:57:dc:94:b6:1b:49:57:
69:1d:32:d9:0a:3a:44:07:08:c2:67:4f:84:af:34:
97:a6:a2:20:7b:e6:2f:fe:c0:a0:92:d5:02:01:f0:
b2:ca:8e:e5:a5:2e:7d:06:ca:84:f4:18:32:7a:15:
e2:6c:8c:07:ee:bc:72:94:07:33:e4:bd:43:cc:4a:
3d:48:0b:81:71:90:c6:8b:dd:8c:32:d0:9c:77:45:
a0:a6:31:57:db:94:3f:03:c6:ff:a2:41:df:5b:e7:
f8:18:ef:be:98:1e:25:f2:5c:fc:56:a1:60:a8:70:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:A3:62:FA:B8:0A:D4:A5:43:DD:CE:4C:01:99:65:84:2F:37:28
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.27.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1a:51:05:f1:2f:11:96:65:e8:0b:32:28:df:9a:41:e2:01:
77:8a:a3:b7:3a:8f:12:a6:31:00:12:f3:54:6b:e4:13:a7:66:
86:1e:35:85:22:1e:90:c5:94:52:2f:1b:0d:42:14:30:ac:77:
2b:20:a7:7b:07:43:32:48:2f:2a:44:fe:65:59:b1:9e:03:d9:
2c:17:ab:b2:d7:e0:d4:fe:19:ec:a9:8f:a5:9c:73:be:fc:19:
ee:be:55:ea:f4:d0:b0:4c:2b:45:d2:29:c6:d4:19:f2:8c:18:
11:17:86:bc:0d:99:0c:ba:12:b0:88:ba:8a:a9:17:be:3e:d7:
41:05:be:c6:a9:cf:5b:28:3d:96:9b:4b:47:a0:5e:10:83:0e:
f8:da:9c:1d:06:59:6e:6d:41:15:bd:2a:79:53:91:af:74:25:
8a:08:96:b8:10:24:e4:2e:89:6e:0d:ec:42:ea:3e:d6:3f:b2:
2d:a8:1d:04:aa:fb:ab:7a:ce:7e:ad:aa:f6:22:30:a9:db:00:
f5:64:dc:20:b2:06:00:df:9c:0d:66:01:3e:c0:59:33:8e:df:
0c:ba:a8:1d:6a:34:42:c5:3d:1a:4f:75:f9:a1:f6:9b:bb:04:
bd:1e:9f:81:55:a9:ac:da:1a:b4:bb:03:d1:34:40:65:83:77:
73:27:23:42
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx
QTRDREQwODIwHhcNMjYwMTMxMDAxOTQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdkNGE5Zi1lY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmFdPWhd9hFJyXPtX+9d22LiV0VpfjiM8uXAq53a6HBs0jcNqkvUOv6eUnVxt
oamnEc2sDz/lgCe/E6R8b3YMADsY3zSPCi4NGKxer0ZYajY+c55VXCsXIxsZrSHM
vDoOo1GdvsZ1zJI7lQ+a6RxUIhn5BB8dXAv/APyVmIhG0YOjaKZOFTvCPxeSp5Oq
d1fclLYbSVdpHTLZCjpEBwjCZ0+ErzSXpqIge+Yv/sCgktUCAfCyyo7lpS59BsqE
9BgyehXibIwH7rxylAcz5L1DzEo9SAuBcZDGi92MMtCcd0WgpjFX25Q/A8b/okHf
W+f4GO++mB4l8lz8VqFgqHD6HQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP1bo2L6
uArUpUPdzkwBmWWELzcoMB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE
RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkY0MjgvMzVFQjEzNDg1REQ4MTFFQ0I5QjRENjMwQzRGOUFFMDIvRDI1NEI0NDQ2
NzkxMTFFRjhBMkM5MDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnshswDQYJKoZIhvcNAQELBQADggEBAHgaUQXxLxGWZegL
MijfmkHiAXeKo7c6jxKmMQAS81Rr5BOnZoYeNYUiHpDFlFIvGw1CFDCsdysgp3sH
QzJILypE/mVZsZ4D2SwXq7LX4NT+Geypj6Wcc778Ge6+Ver00LBMK0XSKcbUGfKM
GBEXhrwNmQy6ErCIuoqpF74+10EFvsapz1soPZabS0egXhCDDvjanB0GWW5tQRW9
KnlTka90JYoIlrgQJOQuiW4N7ELqPtY/si2oHQSq+6t6zn6tqvYiMKnbAPVk3CCy
BgDfnA1mAT7AWTOO3wy6qB1qNELFPRpPdfmh9pu7BL0en4FVqazaGrS7A9E0QGWD
d3MnI0I=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:46:30 2026 by rpki-client