
$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/B88A958007B611F1BF9DF7EA143D8C67.roa
File: B88A958007B611F1BF9DF7EA143D8C67.roa (raw, json)
Hash identifier: MypZozje9jZXB1eaQ0+B7Oks+wJWUOenzt3vK3jLfu8=
Subject key identifier: 2C:EE:80:B7:7D:AE:E8:B0:73:31:85:75:39:CC:4C:61:6F:BB:0E:5F
Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial: 014D
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/B88A958007B611F1BF9DF7EA143D8C67.roa
Signing time: Thu 12 Feb 2026 02:01:19 +0000
ROA not before: Thu 12 Feb 2026 02:01:19 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38473
IP address blocks: 202.20.102.0/24 maxlen: 24
202.20.103.0/24 maxlen: 24
202.20.104.0/24 maxlen: 24
2001:df0:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Validity
Not Before: Feb 12 02:01:19 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=698d346e-2a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:59:a7:86:10:e8:54:84:c0:43:36:46:a6:
d5:8a:9b:91:f0:ae:8d:c9:dd:c5:85:fc:be:72:b5:
e9:11:b6:07:ba:eb:87:7a:d4:2d:bd:8e:c5:f6:6c:
61:2d:fb:25:b5:41:cc:b5:9a:97:88:8d:5d:4c:8d:
3b:87:6f:8c:f1:30:8e:89:a7:22:c5:78:99:20:f7:
09:0b:5a:8b:b4:39:58:59:b7:1a:0f:51:80:fa:8b:
b9:0c:65:1e:b8:36:9e:5b:ee:fa:be:ac:3a:45:d9:
e0:f0:1b:e2:b7:fd:f1:52:ee:16:61:38:c8:11:71:
d0:cd:62:da:84:63:f3:4f:3f:ff:7b:d4:0d:06:33:
f2:9f:1e:09:78:95:08:a6:71:92:8a:db:4b:12:cd:
32:08:fd:fd:60:d1:b9:f2:d4:81:9e:00:3b:79:cf:
7b:3b:07:ee:23:c8:51:ad:95:9f:81:09:08:3b:4b:
ba:20:e7:51:45:99:7c:6a:9a:f2:c6:3e:70:f8:c4:
cf:62:e0:50:e7:e6:55:51:e4:b8:12:de:2a:fa:30:
39:20:56:2c:86:5f:57:79:df:29:18:bb:22:64:15:
32:3a:bb:11:19:a3:ac:09:76:df:94:82:5b:13:f7:
d1:e3:45:5a:c8:77:90:0f:45:3d:8f:5b:ba:a9:d3:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EE:80:B7:7D:AE:E8:B0:73:31:85:75:39:CC:4C:61:6F:BB:0E:5F
X509v3 Authority Key Identifier:
keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/B88A958007B611F1BF9DF7EA143D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.20.102.0-202.20.104.255
IPv6:
2001:df0:77::/48
Signature Algorithm: sha256WithRSAEncryption
63:7d:75:b3:af:19:9d:f5:80:a8:90:63:42:a2:03:c9:de:bd:
5b:a9:e2:60:d2:ac:77:6f:40:d6:45:51:5b:9f:b9:31:4b:fe:
e7:08:d7:b5:6b:cc:cc:07:b1:9b:03:c7:f3:f3:ad:2e:b7:34:
e9:18:56:ff:49:98:3f:15:9f:50:eb:2c:d4:f7:c8:84:7f:14:
75:c0:de:eb:02:fa:c1:1d:5c:5c:64:4f:3b:aa:42:8a:8e:8c:
ee:76:0c:57:18:68:54:87:50:66:e6:ce:c1:98:c7:e7:62:7b:
38:f8:cc:bc:15:b5:07:03:cb:3d:63:3a:83:9b:f1:6f:50:b7:
db:c2:5d:b1:97:aa:3b:73:a2:f3:67:5b:dc:a9:d5:99:76:c8:
4f:28:1c:e0:29:a4:7e:19:11:44:3f:82:cf:de:5b:11:90:b0:
cb:95:62:40:17:36:ef:86:8d:ae:79:8d:91:1d:bd:ae:05:e1:
bb:48:bd:9b:5b:9a:f4:a6:f7:3d:b6:77:a6:7a:12:8a:60:2b:
fe:46:e2:ec:c1:ea:f3:df:b5:46:5f:58:6c:62:bd:aa:a3:d5:
c5:98:91:4a:af:4d:7f:e1:b8:1b:e3:cc:58:45:e2:43:45:bc:
2d:43:64:c4:4c:02:b1:05:2e:b1:50:4c:13:22:05:12:39:d5:
f7:b3:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:54 2026 by rpki-client