
$ rpki-client -vvf rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/DF78B598FF0311F092EDFD107EEE528E.roa
File: DF78B598FF0311F092EDFD107EEE528E.roa (raw, json)
Hash identifier: VfXQmp7OlyXR13fyyGP0pGRwSmy4Jr//dugZpNsFEfU=
Subject key identifier: F3:A1:27:1C:7E:CD:F0:91:A6:0B:8F:FF:1F:70:BA:DA:F3:C2:0C:AF
Certificate issuer: /CN=A913914F/serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB
Certificate serial: 0348
Authority key identifier: 10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/DF78B598FF0311F092EDFD107EEE528E.roa
Signing time: Tue 03 Feb 2026 01:20:34 +0000
ROA not before: Tue 03 Feb 2026 01:20:34 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 134736
IP address blocks: 59.153.108.0/22 maxlen: 22
59.153.108.0/24 maxlen: 24
59.153.109.0/24 maxlen: 24
59.153.110.0/24 maxlen: 24
59.153.111.0/24 maxlen: 24
103.198.148.0/22 maxlen: 22
103.198.148.0/24 maxlen: 24
103.198.149.0/24 maxlen: 24
103.198.150.0/24 maxlen: 24
103.198.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl
rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913914F, serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB
Validity
Not Before: Feb 3 01:20:34 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69814d62-9319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:8c:32:94:ef:c1:59:c1:d9:58:da:2a:af:
f7:b5:10:4b:b3:9c:c3:a2:80:e7:52:bc:8e:4b:a1:
76:e1:2e:59:ea:b7:6b:ae:24:14:fc:c7:f7:d4:ea:
d6:db:04:a8:bf:9e:06:e3:5c:1e:d3:eb:84:69:7d:
06:68:bd:25:e2:a7:e8:75:8b:91:22:31:df:6d:cc:
d1:78:8f:e2:d7:a2:78:9a:dd:9d:49:96:45:b3:5c:
26:77:51:6c:89:0a:67:cf:c3:72:94:1f:f2:4c:97:
dd:40:ce:6b:9d:ad:1c:b6:11:af:be:20:34:67:32:
1b:c2:f9:de:d8:93:0c:30:05:35:4d:9b:7c:3a:ec:
d2:da:f6:6d:b0:75:fa:56:76:27:54:98:67:10:96:
04:d7:c9:2f:46:fa:73:11:18:4b:c5:0c:1e:16:0e:
e0:37:9a:76:e6:e7:12:3a:4d:39:38:e1:77:ca:d2:
d5:ff:84:8e:f4:1f:05:87:0e:44:d4:18:68:30:4b:
8f:9e:88:af:f1:a1:c4:cf:0e:31:a8:73:9d:c3:09:
a5:81:20:d2:95:ab:8b:78:5c:34:d7:3f:2a:d8:27:
a1:45:0d:c3:43:76:1f:02:1c:82:14:ae:35:b8:ef:
78:bf:23:4b:fb:29:f3:39:45:87:f0:7c:02:39:bc:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:27:1C:7E:CD:F0:91:A6:0B:8F:FF:1F:70:BA:DA:F3:C2:0C:AF
X509v3 Authority Key Identifier:
keyid:10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/DF78B598FF0311F092EDFD107EEE528E.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.108.0/22
103.198.148.0/22
Signature Algorithm: sha256WithRSAEncryption
45:06:e5:24:00:1a:90:17:0c:02:0a:5c:15:81:16:5c:71:60:
89:58:a9:cc:b8:e4:28:df:7d:a1:45:35:7f:63:95:89:07:ef:
4e:cf:9b:7c:e3:d1:6e:25:ce:c2:d4:3f:31:ff:a5:ee:e5:94:
bb:87:d8:09:cd:95:f6:37:d0:09:72:84:0a:1d:0a:4c:35:af:
dd:bc:76:b8:a9:32:a7:20:52:79:d2:ba:96:49:fc:51:31:c4:
c1:ac:bc:3f:e7:64:4a:6c:85:8d:90:fa:8c:08:ba:47:4f:08:
2a:c9:2a:f8:ee:e6:6d:be:c4:b3:e9:82:6a:26:e9:19:a6:10:
5e:62:ba:14:36:5e:a9:97:6b:60:d6:fa:a5:57:5b:bd:da:3d:
b5:4f:4f:e6:fe:0e:f4:09:47:07:02:52:7d:1f:f9:c8:d9:9d:
14:be:e2:40:f8:eb:da:7e:66:b6:8e:85:ed:dc:ee:2a:83:3e:
ef:9b:8e:17:b0:d2:4b:04:1e:ad:a2:9b:35:8f:4f:2a:4f:4b:
58:e1:3c:b1:86:84:b3:37:00:9f:ff:2d:be:15:dd:ca:4c:c5:
03:42:da:b4:a4:ac:b3:97:1d:13:89:96:2f:6f:9a:6c:65:e9:
5b:eb:8a:e6:63:e0:46:56:c9:e8:4f:61:a1:28:d9:49:60:3e:
f5:86:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:53:53 2026 by rpki-client