
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
File: 22D8137A51A711EBAAAB6410C4F9AE02.roa (raw, json)
Hash identifier: tBfM93FKPo01g3EnlUkojxzMSEB+jk1tOP6IV1x0rXw=
Subject key identifier: 1C:2F:02:D9:A6:7D:95:3F:DC:38:49:D1:CB:B4:EB:44:E3:70:56:68
Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial: 0760
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
Signing time: Mon 02 Feb 2026 21:18:30 +0000
ROA not before: Mon 02 Feb 2026 21:18:30 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132372
IP address blocks: 103.161.132.0/24 maxlen: 24
103.161.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Validity
Not Before: Feb 2 21:18:30 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698114a6-5ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:65:ec:cc:14:31:86:c3:39:7e:23:a7:82:
4c:f8:47:52:4c:57:b3:b1:70:23:34:07:be:6f:38:
34:e5:f2:5d:91:a6:d2:bd:31:5a:d0:ca:01:64:e0:
ec:30:fd:eb:56:76:cb:78:75:03:76:4f:82:9e:53:
6b:41:75:b1:e3:6c:9c:7c:24:b1:76:c0:07:13:95:
7e:7a:17:42:3f:01:1a:a5:c2:4b:02:4b:2a:08:55:
09:a9:76:c4:ca:31:b2:df:db:1b:70:ea:05:b8:ee:
da:71:ed:f6:ba:ec:c2:e9:de:75:a5:e3:a9:ff:5d:
f7:cc:27:eb:b2:b1:cf:84:c9:3f:a8:a3:bf:07:6e:
60:39:6e:9a:58:38:86:80:70:43:31:33:e9:28:85:
42:26:b3:f2:68:7b:8d:ed:3a:13:9b:fa:2a:f7:ca:
14:b3:e4:fa:9c:d5:7a:28:83:81:64:09:32:4d:99:
c8:8c:90:aa:87:7c:3f:88:73:ac:b1:85:96:87:bf:
29:2e:74:e5:87:f3:86:42:37:c2:9e:e8:96:26:a4:
36:79:07:47:e4:81:d7:df:c4:07:75:ac:1f:76:57:
dc:4f:61:29:eb:9b:46:e6:95:3d:8b:eb:66:7e:33:
70:b7:77:8d:cb:aa:d9:a6:76:10:d9:20:ec:d9:79:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2F:02:D9:A6:7D:95:3F:DC:38:49:D1:CB:B4:EB:44:E3:70:56:68
X509v3 Authority Key Identifier:
keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:7b:e5:42:9a:07:33:89:58:ec:97:1f:82:9d:95:b7:8a:ce:
ba:15:1a:c1:44:1c:ab:ae:6c:08:45:b2:93:c7:dc:8f:12:6c:
51:bf:76:a1:ac:19:39:84:7f:ac:b2:2e:ca:9e:fb:66:13:bd:
3a:81:95:fb:8e:6c:a8:e9:12:a0:12:fb:d8:db:9c:c4:5d:1a:
cc:0d:ff:08:4d:a4:13:43:6e:80:64:f8:28:64:f0:5f:41:14:
99:97:a0:60:1c:35:ae:7e:86:c2:c2:0b:6e:c9:bb:5f:a9:ed:
91:68:89:ad:a4:eb:26:0f:4c:d8:2b:3a:a3:68:ec:3a:f5:f3:
ab:53:67:c4:58:cf:e1:f8:40:ea:ec:8e:d3:8b:57:94:45:a6:
22:27:6e:a6:35:01:09:2a:5e:04:e1:c5:b1:52:64:d4:7e:50:
14:6d:02:91:e7:89:0a:eb:4f:50:3e:d3:76:33:17:c7:83:c7:
75:fb:87:71:6a:fa:fc:c7:24:69:3e:f1:b9:4f:61:45:59:9f:
38:17:80:5d:f8:61:63:4c:c9:9d:39:08:00:19:80:95:0e:4d:
7d:9d:40:9b:02:70:5a:04:c8:08:93:27:f7:7d:46:10:53:16:
d0:00:f4:25:79:62:90:53:9e:0b:21:0e:38:37:19:58:c9:f3:
94:10:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:14 2026 by rpki-client