
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/2820099CFD6D11F0B9F4BFDE526F56BC.roa
File: 2820099CFD6D11F0B9F4BFDE526F56BC.roa (raw, json)
Hash identifier: /oabAnQcbDpNuaxBpiFNdYvt8LoYD47RDc/aA+UWn/U=
Subject key identifier: C2:73:E3:0D:D4:7A:F2:40:26:58:89:16:A6:3A:E3:85:3B:41:DA:5A
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 08BA
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/2820099CFD6D11F0B9F4BFDE526F56BC.roa
Signing time: Thu 29 Jan 2026 23:49:31 +0000
ROA not before: Thu 29 Jan 2026 23:49:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 210504
IP address blocks: 43.225.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Jan 29 23:49:31 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=697bf20b-c0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:b5:bd:68:07:ea:8f:09:4f:a2:81:55:ba:
24:01:e9:26:0b:38:cf:07:b2:d4:77:c4:61:79:84:
a6:33:a2:de:a1:cf:97:4e:01:d4:e4:a5:5e:99:a0:
4e:5d:d4:73:59:2a:ed:d5:c9:07:32:48:b8:f5:c1:
fa:08:50:a4:87:b5:bd:ca:01:7a:ce:10:50:6b:dd:
ed:93:1d:9f:56:a0:21:bd:bc:df:be:5f:3d:77:d2:
e3:b1:8a:43:90:fb:79:0a:fb:e4:45:34:0a:a7:5a:
05:97:d7:7f:a8:96:46:30:89:88:14:c4:3f:05:5b:
a3:64:67:ce:a6:bb:5f:dd:43:48:fd:13:16:4b:45:
05:d2:cf:ea:0c:34:b8:df:cd:bd:93:cc:af:aa:61:
1f:b3:5b:1b:44:d9:33:65:c5:bf:72:fe:99:4e:25:
f9:1b:92:d5:d7:ea:46:a3:2d:7b:72:3b:e9:d2:07:
e3:38:6e:93:58:eb:91:82:ef:ce:e4:eb:c8:ff:a8:
c0:53:41:74:3d:3b:3e:11:ff:2f:fa:d2:8c:0a:63:
2a:61:77:dd:48:66:50:db:19:c0:9d:fa:69:73:20:
55:8a:ba:6b:5f:a1:16:96:60:69:95:90:08:95:ea:
0e:5d:25:f0:90:f6:19:27:68:e1:e4:8c:74:ef:4f:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:E3:0D:D4:7A:F2:40:26:58:89:16:A6:3A:E3:85:3B:41:DA:5A
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/2820099CFD6D11F0B9F4BFDE526F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.36.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e3:84:2f:f8:1d:77:62:6f:7a:79:04:c3:e2:f8:d0:06:87:
90:61:84:0a:f6:50:0b:a6:92:2d:42:63:84:be:96:85:4c:fc:
62:6a:d3:0c:1f:85:68:14:94:e4:40:1d:74:af:6e:a2:46:53:
77:74:04:46:d1:f1:1a:7c:f4:03:cc:56:39:f8:27:88:21:bd:
a0:05:24:d7:35:c7:99:da:8a:d7:a0:38:e4:86:ce:bf:94:95:
14:69:34:d7:d0:fd:4b:f6:58:85:4d:12:1f:8e:0d:2e:20:b3:
ea:9c:4a:a8:83:15:54:07:86:29:bf:9b:cb:8a:6c:10:94:4b:
80:b4:62:19:9a:7d:c3:65:ec:fa:44:0e:27:28:3c:63:fb:0a:
d8:08:06:d6:8a:47:4b:41:63:79:3f:f7:7c:f1:74:6a:eb:4b:
12:1c:4a:3d:92:60:19:0e:cf:86:e8:2e:96:78:60:95:63:40:
9d:a0:94:f5:49:85:5b:07:6f:2c:d2:02:e8:9d:de:e2:ea:25:
ef:10:fb:cc:47:55:93:b5:1c:7b:52:ec:97:6e:74:0d:fe:7b:
2a:e5:2b:12:75:24:05:fe:74:96:32:5d:eb:af:d1:7f:c1:36:
55:33:a4:6a:4d:d7:c3:48:f2:a8:6d:cc:df:78:25:22:04:04:
eb:57:aa:4b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1
MzIzM0U1OTUwHhcNMjYwMTI5MjM0OTMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdiZjIwYi1jMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkPe1vWgH6o8JT6KBVbokAekmCzjPB7LUd8RheYSmM6Leoc+XTgHU5KVemaBO
XdRzWSrt1ckHMki49cH6CFCkh7W9ygF6zhBQa93tkx2fVqAhvbzfvl89d9LjsYpD
kPt5CvvkRTQKp1oFl9d/qJZGMImIFMQ/BVujZGfOprtf3UNI/RMWS0UF0s/qDDS4
3829k8yvqmEfs1sbRNkzZcW/cv6ZTiX5G5LV1+pGoy17cjvp0gfjOG6TWOuRgu/O
5OvI/6jAU0F0PTs+Ef8v+tKMCmMqYXfdSGZQ2xnAnfppcyBVirprX6EWlmBplZAI
leoOXSXwkPYZJ2jh5Ix0708NIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMJz4w3U
evJAJliJFqY644U7QdpaMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2
QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvMjgyMDA5OUNG
RDZEMTFGMEI5RjRCRkRFNTI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr4SQwDQYJKoZIhvcNAQELBQADggEBACnjhC/4HXdib3p5
BMPi+NAGh5BhhAr2UAumki1CY4S+loVM/GJq0wwfhWgUlORAHXSvbqJGU3d0BEbR
8Rp89APMVjn4J4ghvaAFJNc1x5naitegOOSGzr+UlRRpNNfQ/Uv2WIVNEh+ODS4g
s+qcSqiDFVQHhim/m8uKbBCUS4C0YhmafcNl7PpEDicoPGP7CtgIBtaKR0tBY3k/
93zxdGrrSxIcSj2SYBkOz4boLpZ4YJVjQJ2glPVJhVsHbyzSAuid3uLqJe8Q+8xH
VZO1HHtS7JdudA3+eyrlKxJ1JAX+dJYyXeuv0X/BNlUzpGpN18NI8qhtzN94JSIE
BOtXqks=
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:51 2026 by rpki-client