
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/359388D8006511F1AA0FA34B566F56BC.roa
File: 359388D8006511F1AA0FA34B566F56BC.roa (raw, json)
Hash identifier: LoAeL0RLlGhPEbe9r+NWVl3jOF528hlgHMGyjJwEH8A=
Subject key identifier: F0:62:8F:BF:74:8A:ED:F7:7B:46:7C:83:57:5F:9A:BF:4B:52:CC:D3
Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial: 09B7
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/359388D8006511F1AA0FA34B566F56BC.roa
Signing time: Mon 02 Feb 2026 18:30:12 +0000
ROA not before: Mon 02 Feb 2026 18:30:12 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 139351
IP address blocks: 103.141.158.0/24 maxlen: 24
103.141.159.0/24 maxlen: 24
2400:17a0::/48 maxlen: 48
2400:17a0:1::/48 maxlen: 48
2400:17a0:2::/48 maxlen: 48
2400:17a0:3::/48 maxlen: 48
2400:17a0:4::/48 maxlen: 48
2400:17a0:5::/48 maxlen: 48
2400:17a0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Validity
Not Before: Feb 2 18:30:12 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6980ed34-0460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:15:c9:4f:fc:71:59:02:2d:65:5e:78:1b:
44:24:98:0b:26:6b:9f:12:eb:59:9b:97:74:97:b1:
1b:44:ef:7f:bc:74:83:67:91:3c:be:39:5a:4c:aa:
e8:e4:28:6d:98:b7:91:96:5b:43:c5:09:dc:d3:58:
57:28:80:3f:2a:1e:6d:94:e9:75:aa:a5:65:b5:89:
db:b4:84:45:f5:06:eb:c9:e5:a5:05:15:52:61:3d:
01:52:0a:ca:69:6f:49:32:e6:71:8a:ed:a2:24:d3:
0e:85:a9:4b:64:7b:74:a7:9f:29:60:3e:4f:90:1b:
fb:e3:cb:a7:ed:62:ab:0b:76:50:c4:e7:25:6c:a4:
a5:3e:83:59:6e:32:c9:35:c7:ec:5f:42:eb:e0:7c:
af:9d:32:57:5e:02:44:be:cd:62:dc:ed:e5:5c:ad:
df:5f:3c:ab:5d:f8:24:16:2f:32:7c:40:2c:78:33:
e5:79:b5:42:c3:a8:20:d9:23:63:56:53:f0:cd:66:
32:99:d9:bb:3a:eb:6e:4f:61:1a:51:4d:e7:d9:39:
a8:af:9f:f4:dd:ee:df:78:4c:e6:f1:c5:95:a0:59:
87:36:7f:e4:ba:39:da:74:ff:36:fc:b5:f9:84:f6:
f7:ef:28:a3:88:8e:63:b7:b9:61:1b:ea:9a:53:8d:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:8F:BF:74:8A:ED:F7:7B:46:7C:83:57:5F:9A:BF:4B:52:CC:D3
X509v3 Authority Key Identifier:
keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/359388D8006511F1AA0FA34B566F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.158.0/23
IPv6:
2400:17a0::-2400:17a0:5:ffff:ffff:ffff:ffff:ffff
2400:17a0:9::/48
Signature Algorithm: sha256WithRSAEncryption
7a:bd:18:58:f0:70:35:dd:22:ef:9a:31:08:7f:2a:ad:7c:9a:
86:38:8a:7c:ab:17:ba:79:5a:98:3f:f8:3d:30:71:0b:30:99:
7f:07:51:68:dc:c1:d3:2f:27:78:8b:f8:d5:26:6a:54:ee:d5:
2d:06:f6:d3:f7:3c:66:09:b5:3c:af:2e:eb:52:49:6d:71:a4:
22:8f:95:0b:c4:84:4c:a6:ef:33:28:d3:98:95:6d:61:85:8b:
c8:6c:ba:48:77:33:3f:e8:e3:4b:4f:74:08:04:4a:ff:b0:95:
bc:44:57:d6:2e:7e:d0:ba:d1:b3:e3:04:d2:ad:0f:8c:2c:fd:
7b:99:26:d9:a6:2e:86:80:90:79:3f:ba:84:b9:b3:58:30:64:
2f:aa:21:64:77:61:ab:4f:70:f0:12:62:1f:e6:b9:cc:28:21:
67:4d:02:0f:17:b4:fc:f3:65:af:6e:9b:10:af:73:4e:55:d5:
f9:8e:71:8c:c5:c0:0c:ab:bb:a6:5d:44:c2:24:6d:5a:3d:31:
7e:e7:11:0b:c3:db:40:8c:09:cf:a8:2e:57:c6:98:7a:9e:13:
bf:e5:58:b4:bf:72:0d:ab:9a:f5:74:56:30:c2:fb:17:58:25:
9c:21:e2:b9:f6:ef:b6:04:fe:f3:fa:47:53:fa:7b:7a:79:e6:
99:10:6a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:28 2026 by rpki-client