
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa
File: D973D5BE97D711EEA1B09A33C4F9AE02.roa (raw, json)
Hash identifier: D+qSiCU0O3oSG7UcpKXST7cPd+ZdbpgcmmDNxZN3ZAA=
Subject key identifier: 74:68:3B:D0:44:73:A2:C1:48:DB:52:F0:E8:AC:58:D0:48:1C:D9:94
Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial: 0195
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa
Signing time: Sat 31 Jan 2026 03:23:34 +0000
ROA not before: Sat 31 Jan 2026 03:23:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149446
IP address blocks: 210.87.104.0/23 maxlen: 24
2401:5720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Validity
Not Before: Jan 31 03:23:34 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=697d75b6-120e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:d2:e3:7e:13:2f:1f:13:a8:f6:b5:47:b8:
60:bc:7a:ce:fe:b2:2b:ab:70:f5:f1:87:7a:01:08:
57:0a:89:17:c0:6f:52:a5:a0:20:b1:be:b6:8c:16:
56:d2:f2:79:a6:75:9b:24:d4:64:9b:53:ee:6f:e4:
4b:22:61:b7:e3:02:60:eb:ad:a1:4e:26:21:db:20:
f1:46:a4:c5:b3:4a:42:56:d1:e0:d9:1e:c5:92:96:
b6:c1:d7:7c:95:ef:f0:84:47:e6:b2:5e:6c:4b:93:
ed:dd:b2:a9:18:1b:51:0d:18:82:f7:a3:74:04:42:
33:b2:b7:67:70:13:6f:9b:b1:b4:a2:4a:fc:67:90:
5d:6d:93:56:7f:5a:be:b9:cb:0e:cf:ce:59:6b:8e:
86:9d:b1:a2:f9:b0:cd:e3:4c:e5:ac:f3:66:93:ea:
5c:2c:f8:fe:12:a2:f5:4c:e8:81:1c:9d:bd:aa:7c:
92:bf:28:81:e5:55:3a:91:0f:fc:b5:64:c0:71:54:
31:c0:50:86:19:02:6b:a1:d8:26:0d:3f:ca:8c:a3:
82:84:32:2b:08:d7:0d:a4:b9:14:60:9d:78:44:1c:
eb:c6:0a:da:5d:ea:c6:93:bf:c1:77:0d:7b:29:71:
de:2a:02:43:cb:e2:08:ce:cd:f6:f9:dd:cd:7f:66:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:3B:D0:44:73:A2:C1:48:DB:52:F0:E8:AC:58:D0:48:1C:D9:94
X509v3 Authority Key Identifier:
keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.104.0/23
IPv6:
2401:5720::/32
Signature Algorithm: sha256WithRSAEncryption
8f:3c:53:21:20:d5:3c:82:1d:04:c1:e0:2c:47:06:fd:4a:34:
b2:28:fd:4d:01:d9:9a:77:9b:4e:7d:dd:18:30:9a:66:29:68:
ae:8e:50:a5:0a:b0:9f:c9:9d:5a:0c:37:0f:9d:ca:12:ff:37:
26:53:e3:1d:82:d1:3f:9a:ff:f9:46:c6:20:2a:28:a3:58:39:
df:24:05:41:b7:86:87:2c:4d:4e:4e:6d:cb:ec:70:03:f9:b4:
d8:76:ad:5e:3c:85:f8:bf:57:e8:7e:60:e5:af:2a:dd:f4:86:
a8:9a:f3:e3:89:3f:4e:62:d4:67:b2:bd:5d:2c:0a:86:1b:49:
0a:0a:62:e7:dd:88:2d:91:3e:5c:cb:6f:3e:f2:07:6d:da:5a:
14:78:05:5d:e1:6f:41:9f:66:bd:d6:ca:a9:f1:f6:4c:94:f4:
9b:d9:6f:37:9e:f5:a8:4c:5f:d9:54:de:f4:d9:3b:3c:76:00:
e5:e1:25:fd:a1:1c:03:54:8c:4c:8c:9a:fc:3e:ff:94:35:64:
04:d5:b1:ff:f8:f9:48:b8:b4:13:a0:f1:9e:82:a7:20:f7:ab:
6f:43:d9:32:5a:c3:0a:b3:a7:c6:0c:0c:f6:77:3f:f4:b1:8b:
e4:b0:e8:06:2c:69:71:26:3e:6d:95:5e:12:6f:76:03:1e:1c:
e8:0b:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:39 2026 by rpki-client