
$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/65874B72FF1D11F09D5C691B85EE528E.roa
File: 65874B72FF1D11F09D5C691B85EE528E.roa (raw, json)
Hash identifier: lDuNs1KsyJCjnEx/Eg5k46Zp7tCFLoq6+49lFtk0raU=
Subject key identifier: F9:D4:D1:BF:CF:4D:99:F3:B3:8B:B8:D6:52:45:09:18:08:36:04:90
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 013B
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/65874B72FF1D11F09D5C691B85EE528E.roa
Signing time: Tue 03 Feb 2026 03:23:09 +0000
ROA not before: Tue 03 Feb 2026 03:23:09 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152122
IP address blocks: 36.50.22.0/23 maxlen: 23
36.50.22.0/24 maxlen: 24
36.50.23.0/24 maxlen: 24
2001:df3:3140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: Feb 3 03:23:09 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69816a1d-58f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:ec:be:95:cc:90:8d:29:d1:87:ff:3a:c3:
fe:7d:86:8c:ab:8d:38:03:42:6d:fe:47:b1:c0:b9:
9a:61:c8:66:e2:e0:b5:56:a0:93:6d:ba:16:f4:81:
ac:94:f6:b0:b1:ac:08:c6:e7:02:c0:0b:a9:70:d6:
00:b6:2c:4e:74:8f:91:94:8f:b5:29:5b:53:7e:9b:
be:00:0e:46:cb:5d:5f:62:d1:ff:2a:4a:57:4d:8b:
a0:99:d3:17:73:cf:53:4c:69:e4:c0:be:8d:e5:34:
a6:86:24:04:4e:81:18:ca:fa:82:9d:fc:7c:62:d9:
11:2b:de:b2:d7:06:ba:d0:86:50:0c:2f:00:1c:4d:
53:c1:59:4d:ba:21:b4:78:d5:30:1f:03:9d:c4:0e:
46:c3:86:8f:33:12:09:7c:c0:e4:e5:45:2d:2d:a6:
d1:7c:d9:de:fb:07:cd:68:8b:51:00:e9:d9:ca:bb:
41:39:22:26:8e:22:78:93:2a:1b:11:89:66:e3:fc:
84:b2:3e:28:2f:b2:3c:a8:2a:51:9a:0c:d6:4f:08:
07:d3:e3:9c:79:e0:a8:ef:db:76:49:65:67:3f:c8:
5e:0e:6d:94:92:1e:5f:04:da:98:ef:be:c7:f2:f1:
7d:c5:e1:2c:83:47:f2:ad:35:87:c1:15:d0:41:92:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:D1:BF:CF:4D:99:F3:B3:8B:B8:D6:52:45:09:18:08:36:04:90
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/65874B72FF1D11F09D5C691B85EE528E.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.22.0/23
IPv6:
2001:df3:3140::/48
Signature Algorithm: sha256WithRSAEncryption
d9:96:84:65:48:da:36:0e:ca:5e:19:83:4c:9c:5c:cb:25:6a:
29:0e:62:20:1d:6a:54:5d:80:06:27:2d:a4:de:9d:13:bd:f0:
6b:9d:b8:fc:0d:5c:f9:5b:ee:3d:3a:fa:3c:45:d4:e2:09:0e:
08:36:d0:bb:c0:79:8a:a1:ba:4e:2e:c2:94:e2:51:54:4e:13:
1a:75:f7:73:80:24:bc:ce:fc:61:ec:b0:33:38:77:d6:dc:e3:
c4:ee:19:9e:f3:4f:70:34:81:30:52:d7:45:2d:bc:d4:b8:08:
55:ff:d0:c8:d4:f2:49:e2:ec:d2:79:3b:91:03:96:d6:62:f4:
f7:65:68:dd:19:ce:69:99:12:62:b2:5b:72:7c:67:aa:09:41:
57:68:48:36:ca:f6:b8:3e:08:19:79:e4:d3:22:2e:33:b0:f5:
52:59:5d:f1:e4:a6:a5:0d:01:16:61:17:16:3e:58:7c:8e:07:
8e:4e:49:ae:66:86:b0:1a:e6:f2:9e:a6:ed:d9:7d:cf:1b:6c:
cd:c8:5b:66:09:bb:8e:d4:46:3c:41:1c:cb:0e:c5:2c:db:f0:
f1:81:3c:95:67:ab:68:5d:a4:f8:32:74:6f:28:f3:9b:a3:0d:
84:70:d7:0e:b3:ec:01:45:a3:b5:34:83:a8:e7:ff:64:70:22:
e9:cc:0a:fb
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTk1NEYxMTAvBgNVBAUTKDg1RkZCRTU4REMxQ0Y3RjkxQzJEMzgxMzRFMjBCNkVG
MEIyQzNBNUYwHhcNMjYwMjAzMDMyMzA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxNmExZC01OGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ojsvpXMkI0p0Yf/OsP+fYaMq404A0Jt/kexwLmaYchm4uC1VqCTbboW9IGs
lPawsawIxucCwAupcNYAtixOdI+RlI+1KVtTfpu+AA5Gy11fYtH/KkpXTYugmdMX
c89TTGnkwL6N5TSmhiQEToEYyvqCnfx8YtkRK96y1wa60IZQDC8AHE1TwVlNuiG0
eNUwHwOdxA5Gw4aPMxIJfMDk5UUtLabRfNne+wfNaItRAOnZyrtBOSImjiJ4kyob
EYlm4/yEsj4oL7I8qCpRmgzWTwgH0+OceeCo79t2SWVnP8heDm2Ukh5fBNqY777H
8vF9xeEsg0fyrTWHwRXQQZJRzQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPnU0b/P
TZnzs4u41lJFCRgINgSQMB8GA1UdIwQYMBaAFIX/vljcHPf5HC04E04gtu8LLDpf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx
NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlfa2NMVGdUVGlDMjd3c3NP
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09sOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTk1NEYvNTkxQTMyMjA5MTRBMTFFRTk0MkNDODcxQzRGOUFFMDIvNjU4NzRCNzJG
RjFEMTFGMDlENUM2OTFCODVFRTUyOEUucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAEkMhYwDwQCAAIwCQMHACABDfMxQDANBgkqhkiG9w0BAQsF
AAOCAQEA2ZaEZUjaNg7KXhmDTJxcyyVqKQ5iIB1qVF2ABictpN6dE73wa524/A1c
+VvuPTr6PEXU4gkOCDbQu8B5iqG6Ti7ClOJRVE4TGnX3c4AkvM78YeywMzh31tzj
xO4ZnvNPcDSBMFLXRS281LgIVf/QyNTySeLs0nk7kQOW1mL092Vo3RnOaZkSYrJb
cnxnqglBV2hINsr2uD4IGXnk0yIuM7D1Ulld8eSmpQ0BFmEXFj5YfI4Hjk5JrmaG
sBrm8p6m7dl9zxtszchbZgm7jtRGPEEcyw7FLNvw8YE8lWeraF2k+DJ0byjzm6MN
hHDXDrPsAUWjtTSDqOf/ZHAi6cwK+w==
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:51 2026 by rpki-client