
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa
File: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (raw, json)
Hash identifier: 92xsCLVa8arPNCsgQO3g6tVWdDdiC457i4nwdotF9k0=
Subject key identifier: F1:12:E0:13:7B:36:35:CF:A5:3D:45:00:BF:E4:75:C1:15:4E:24:38
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 04CB
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa
Signing time: Mon 26 Jan 2026 05:48:17 +0000
ROA not before: Mon 26 Jan 2026 05:48:17 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135413
IP address blocks: 103.173.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Jan 26 05:48:17 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69770021-9a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:84:68:31:19:71:6e:b2:5b:3e:9c:a3:8e:
50:7f:95:05:df:75:3b:22:63:e4:a0:7e:bb:b3:47:
97:20:26:ed:6e:16:e0:40:36:80:0d:11:82:64:4b:
1c:b9:a1:73:0b:1a:63:46:c8:47:ae:3b:e1:29:87:
1e:63:d9:80:0e:67:06:7a:2d:ff:f9:18:67:24:d9:
0c:54:64:d3:0f:58:c4:d4:29:b6:cc:4a:cf:45:41:
91:69:aa:7c:ad:ef:d1:8b:9d:07:4c:2a:d8:d2:0d:
aa:48:11:f4:35:26:d6:74:86:d9:5b:41:39:14:e8:
b4:11:35:c8:b1:9a:cd:d6:30:36:ee:fa:c7:37:04:
6b:75:fb:5b:dc:61:e3:28:89:72:fa:1f:ca:8b:e7:
b3:c6:16:4f:1c:39:b1:5f:9f:2f:2d:7e:be:75:f2:
21:f9:66:fc:c7:93:c9:19:e0:d6:7c:3a:7d:80:e5:
9c:9a:2d:a6:57:ed:0f:43:46:fe:82:5b:6c:c8:bb:
94:96:d9:21:c2:03:13:6f:51:f4:b1:40:bd:77:e7:
1f:d3:67:91:71:80:6d:97:92:21:e4:ab:98:6c:56:
f5:e8:ab:d2:ef:c4:73:c4:80:e1:f8:ec:27:4b:fd:
5a:9d:44:1c:3a:df:0c:23:ce:fd:e6:87:5e:8b:d9:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:12:E0:13:7B:36:35:CF:A5:3D:45:00:BF:E4:75:C1:15:4E:24:38
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:56:7c:b8:16:73:e8:63:ba:de:f7:e2:a8:3e:03:6f:34:e3:
17:72:4a:dc:ed:b2:63:f1:36:0c:f6:9d:35:9a:0d:3b:20:28:
c7:e8:9f:ee:3e:a9:d2:c8:11:a4:08:04:ff:66:87:9f:f7:db:
1c:30:a0:08:3c:26:26:37:35:d1:c7:b3:ab:1a:62:97:a7:66:
e1:07:94:09:20:67:e3:58:ee:b3:74:d8:ee:05:55:87:80:cb:
87:fb:4d:bb:3c:13:b1:c1:92:19:52:66:c5:fc:f4:d7:e7:bf:
17:fb:97:68:ac:c1:c7:a9:2c:72:fe:4b:cb:db:d6:37:9d:54:
f9:92:6a:bb:61:d4:da:85:50:47:4b:26:00:7d:31:73:a1:72:
26:96:2b:d0:1c:50:d3:de:82:d0:b6:76:b1:d8:c5:f1:d9:54:
67:dd:ee:ac:fe:7d:a6:02:01:b2:ca:35:0e:1e:b9:2f:b0:d1:
b9:6a:51:ed:3d:8f:71:6e:41:f4:ed:d4:30:75:58:ef:cf:2a:
da:45:01:6f:4f:08:79:7e:1e:98:6f:32:fc:5c:cf:35:f9:14:
a0:a0:ec:67:bc:3c:b9:68:59:78:cb:72:3c:af:6a:e1:0d:89:
64:56:c6:78:a8:93:84:36:3b:04:18:48:52:78:3c:66:8c:cf:
6f:d8:3e:6e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0
OEUxQUZCNDkwHhcNMjYwMTI2MDU0ODE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTc3MDAyMS05YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt++EaDEZcW6yWz6co45Qf5UF33U7ImPkoH67s0eXICbtbhbgQDaADRGCZEsc
uaFzCxpjRshHrjvhKYceY9mADmcGei3/+RhnJNkMVGTTD1jE1Cm2zErPRUGRaap8
re/Ri50HTCrY0g2qSBH0NSbWdIbZW0E5FOi0ETXIsZrN1jA27vrHNwRrdftb3GHj
KIly+h/Ki+ezxhZPHDmxX58vLX6+dfIh+Wb8x5PJGeDWfDp9gOWcmi2mV+0PQ0b+
gltsyLuUltkhwgMTb1H0sUC9d+cf02eRcYBtl5Ih5KuYbFb16KvS78RzxIDh+Own
S/1anUQcOt8MI8795odei9msBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPES4BN7
NjXPpT1FAL/kdcEVTiQ4MB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD
QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEZFODcvNEUxNDAxRTY1Q0I2MTFFQ0E3NzExODBFQzRGOUFFMDIvOUNBMUZDMjZG
QTdBMTFGMEExRkU4MkYyNEQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrWswDQYJKoZIhvcNAQELBQADggEBAD5WfLgWc+hjut73
4qg+A2804xdyStztsmPxNgz2nTWaDTsgKMfon+4+qdLIEaQIBP9mh5/32xwwoAg8
JiY3NdHHs6saYpenZuEHlAkgZ+NY7rN02O4FVYeAy4f7Tbs8E7HBkhlSZsX89Nfn
vxf7l2iswcepLHL+S8vb1jedVPmSarth1NqFUEdLJgB9MXOhciaWK9AcUNPegtC2
drHYxfHZVGfd7qz+faYCAbLKNQ4euS+w0blqUe09j3FuQfTt1DB1WO/PKtpFAW9P
CHl+HphvMvxczzX5FKCg7Ge8PLloWXjLcjyvauENiWRWxniok4Q2OwQYSFJ4PGaM
z2/YPm4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:58 2026 by rpki-client