
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/1801797EB79211E986129837C4F9AE02.roa
File: 1801797EB79211E986129837C4F9AE02.roa (raw, json)
Hash identifier: LIsToFM6VK9TZ44K7kM0E8YqGwslEtePQnTq2vzw8rE=
Subject key identifier: 0D:89:34:36:6D:37:8E:0B:D6:90:84:BB:8E:61:00:43:0A:20:36:E5
Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Certificate serial: 0E59
Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/1801797EB79211E986129837C4F9AE02.roa
Signing time: Fri 06 Feb 2026 18:15:05 +0000
ROA not before: Fri 06 Feb 2026 18:15:05 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133936
IP address blocks: 103.49.24.0/24 maxlen: 24
103.49.25.0/24 maxlen: 24
103.49.26.0/24 maxlen: 24
103.49.27.0/24 maxlen: 24
2401:f880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3673 (0xe59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Validity
Not Before: Feb 6 18:15:05 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69862fa8-8c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:04:5d:21:cd:f9:0e:75:b9:a9:bb:77:72:
89:3a:84:cf:3b:e8:e1:75:51:dd:a6:39:a0:72:65:
21:e3:6b:b8:e7:57:55:98:ce:e1:78:a2:b8:9e:37:
e9:23:4f:e6:39:0f:60:0e:bc:1f:19:fa:a8:13:95:
b5:19:df:de:0b:a9:99:2f:9e:3c:91:3d:76:1f:9e:
0a:dd:4d:b5:93:cc:83:d3:e2:56:f3:0c:0b:71:08:
45:4a:f7:fc:12:09:c4:2d:8a:a4:77:b1:a6:41:57:
eb:98:cd:f2:de:6b:51:04:bd:2a:90:ae:e0:72:f9:
6a:99:66:88:1f:4e:d5:97:78:97:9c:33:3a:67:a0:
35:97:c9:8f:95:e5:43:45:f5:fd:c9:4b:bb:a7:d3:
5b:cb:6d:0f:02:4a:37:c0:0b:57:dd:0d:d9:22:e7:
aa:8b:3b:2f:38:6b:ea:25:46:6b:cd:96:e6:41:d7:
94:ce:4b:49:90:19:48:b7:ca:35:17:58:38:ab:c7:
43:7f:f9:42:6a:da:d0:5b:ab:16:19:27:30:36:60:
92:16:08:e9:4d:33:12:0d:a4:f4:7d:54:5a:ef:e1:
93:fa:ab:94:bc:c7:54:27:0c:8b:c2:dd:a1:e3:bf:
3a:79:80:90:3e:67:f5:28:f0:cf:a5:49:45:73:6d:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:89:34:36:6D:37:8E:0B:D6:90:84:BB:8E:61:00:43:0A:20:36:E5
X509v3 Authority Key Identifier:
keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/1801797EB79211E986129837C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.24.0/22
IPv6:
2401:f880::/32
Signature Algorithm: sha256WithRSAEncryption
a4:d3:a6:7d:bf:61:08:41:b3:44:35:42:ef:00:0c:64:75:d2:
42:a8:83:5f:f5:b9:b9:f0:70:7f:44:d0:78:90:25:b7:37:a0:
72:1c:7e:3f:9a:5c:23:cd:20:40:30:24:c7:b4:42:b2:4a:c2:
38:06:0e:68:cc:63:f2:13:6c:a2:6d:a3:fe:2c:51:83:89:19:
b7:cc:2a:76:7f:3f:c8:d4:25:e6:79:01:16:a6:77:63:cd:6a:
74:0c:f1:4e:c2:0c:b8:ab:27:da:30:52:01:36:42:dc:02:70:
34:e8:b9:54:cf:0b:da:c5:70:b2:bf:b3:4b:88:d5:cc:5d:1f:
ad:3a:8e:40:e5:6c:80:05:af:8f:ad:cb:47:f2:29:a6:73:6e:
c5:7a:bf:23:d3:8d:a1:14:8c:75:47:12:61:e5:d9:2a:d3:9a:
b8:f0:54:fa:22:8e:b6:22:8f:4e:5f:f8:66:22:54:8d:04:55:
96:60:f6:7d:9e:cd:ed:6c:87:0e:ae:b2:33:c8:47:27:f2:89:
21:c1:77:62:ad:f4:ea:9a:ae:65:51:30:1e:25:6e:f6:c8:cd:
4b:f0:6f:5b:5e:00:c5:57:1b:35:46:f2:e2:47:c8:55:fc:5f:
bb:41:e3:99:63:bc:0d:0c:63:bc:f3:77:ae:c8:50:c4:76:00:
43:fc:5e:10
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC
OEU0QzEyOTQwHhcNMjYwMjA2MTgxNTA1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg2MmZhOC04YzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxkwEXSHN+Q51uam7d3KJOoTPO+jhdVHdpjmgcmUh42u451dVmM7heKK4njfp
I0/mOQ9gDrwfGfqoE5W1Gd/eC6mZL548kT12H54K3U21k8yD0+JW8wwLcQhFSvf8
EgnELYqkd7GmQVfrmM3y3mtRBL0qkK7gcvlqmWaIH07Vl3iXnDM6Z6A1l8mPleVD
RfX9yUu7p9Nby20PAko3wAtX3Q3ZIueqizsvOGvqJUZrzZbmQdeUzktJkBlIt8o1
F1g4q8dDf/lCatrQW6sWGScwNmCSFgjpTTMSDaT0fVRa7+GT+quUvMdUJwyLwt2h
4786eYCQPmf1KPDPpUlFc21U6wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFA2JNDZt
N44L1pCEu45hAEMKIDblMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3
OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEM0RDcvOTlEOTE1M0FCNzkwMTFFOUJFRThERDM0QzRGOUFFMDIvMTgwMTc5N0VC
NzkyMTFFOTg2MTI5ODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnMRgwDQQCAAIwBwMFACQB+IAwDQYJKoZIhvcNAQELBQAD
ggEBAKTTpn2/YQhBs0Q1Qu8ADGR10kKog1/1ubnwcH9E0HiQJbc3oHIcfj+aXCPN
IEAwJMe0QrJKwjgGDmjMY/ITbKJto/4sUYOJGbfMKnZ/P8jUJeZ5ARamd2PNanQM
8U7CDLirJ9owUgE2QtwCcDTouVTPC9rFcLK/s0uI1cxdH606jkDlbIAFr4+ty0fy
KaZzbsV6vyPTjaEUjHVHEmHl2SrTmrjwVPoijrYij05f+GYiVI0EVZZg9n2eze1s
hw6usjPIRyfyiSHBd2Kt9OqarmVRMB4lbvbIzUvwb1teAMVXGzVG8uJHyFX8X7tB
45ljvA0MY7zzd67IUMR2AEP8XhA=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:43 2026 by rpki-client