
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/D4B06AAA3A6E11ED8266115DC4F9AE02.roa
File: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (raw, json)
Hash identifier: g7Q3x7d9Ix37yRvofdxZqyQAkdkBrfKjlCENgC9FFE8=
Subject key identifier: EA:ED:E3:5E:D5:95:E9:3F:9F:29:62:70:6D:6F:5F:A6:62:08:F5:49
Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
Certificate serial: 0290
Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/D4B06AAA3A6E11ED8266115DC4F9AE02.roa
Signing time: Wed 11 Feb 2026 01:21:17 +0000
ROA not before: Wed 11 Feb 2026 01:21:17 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141686
IP address blocks: 103.161.250.0/23 maxlen: 23
103.161.250.0/24 maxlen: 24
103.161.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl
rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
Validity
Not Before: Feb 11 01:21:17 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698bd98d-26f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:6b:c9:72:0f:4d:66:3d:af:b6:0e:ff:c4:
cc:e5:2a:f7:1b:00:73:a8:24:eb:aa:2c:45:e7:59:
4b:e2:0c:69:9f:3d:ee:af:68:d3:98:60:a0:dd:0b:
7d:f0:ee:be:72:e7:42:26:17:5d:a8:36:73:8c:95:
62:9a:44:78:32:b7:07:a7:ef:80:14:e8:1f:2a:83:
d0:a6:42:b0:29:22:2d:4e:9f:2e:5a:14:12:90:96:
e7:3e:77:7e:43:42:b9:c8:c0:8b:8d:36:31:0d:80:
44:6f:33:5f:dd:d8:f5:fa:0c:01:85:92:6e:48:46:
00:d2:78:ca:cd:77:32:2d:c1:14:d2:1e:ad:83:b4:
5e:57:a0:54:18:c1:f0:df:1a:f0:4e:fa:94:df:65:
00:f9:07:1c:c0:c8:88:9f:af:c8:94:48:e5:8f:bb:
4c:e6:57:f2:38:ad:e4:e0:85:ee:d7:cd:40:49:8c:
ea:05:b4:18:8a:74:c2:5e:9c:c2:d4:e0:27:28:27:
ed:62:4f:a0:34:f7:4b:fc:e2:01:5d:f6:f1:6e:c7:
53:60:e2:5a:e7:2d:28:25:2e:da:1e:7f:6c:5e:9a:
3c:1c:ea:7f:5b:2a:a0:8d:7f:8d:60:01:ba:a8:25:
f3:5b:c8:3c:92:8f:e1:1c:ad:e4:96:c1:18:62:30:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:ED:E3:5E:D5:95:E9:3F:9F:29:62:70:6D:6F:5F:A6:62:08:F5:49
X509v3 Authority Key Identifier:
keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/D4B06AAA3A6E11ED8266115DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.250.0/23
Signature Algorithm: sha256WithRSAEncryption
85:8b:b0:49:16:3f:55:cc:2b:5e:ac:2a:7e:23:e2:b5:ca:97:
c6:87:c4:0e:e9:a5:f7:6e:c7:38:d8:5d:bd:a6:dd:13:5e:93:
b2:be:9d:b5:c0:a8:b1:28:0d:d0:21:b9:9a:be:2d:fc:28:ff:
2a:1a:4b:ec:78:92:e7:31:cd:9e:26:b4:9d:68:3a:9f:7b:b5:
7e:92:e4:f6:f8:96:9a:27:98:38:c9:e9:3e:00:40:98:1b:42:
35:ca:a2:ae:11:3e:bc:33:86:09:52:00:3d:8f:1a:4c:d2:ba:
e3:01:a8:9b:a5:af:ed:3a:69:e1:a5:c1:d0:30:9f:9b:6c:06:
e1:24:a9:06:0c:67:f4:4e:8d:cb:35:73:23:86:11:b9:4c:8a:
b2:c1:7c:a9:45:2c:a2:bc:44:a4:c7:b9:88:bd:af:2f:ec:91:
0a:b4:29:50:64:b4:98:ba:f7:99:cd:db:cc:53:01:79:69:df:
f7:b9:e5:e3:00:9e:9f:e4:96:5d:6d:08:b0:3e:d7:51:42:fc:
ad:ae:1e:a4:9b:57:63:8a:37:86:e5:be:9a:6f:82:46:8f:5c:
30:68:6a:84:52:a2:df:0a:47:69:20:4f:53:fc:f9:41:d5:16:
51:85:a8:fc:42:7d:72:5d:55:4b:82:7c:34:df:c5:99:58:56:
65:8a:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:30 2026 by rpki-client