
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa
File: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (raw, json)
Hash identifier: XwsQn0FNPhYqvgYiHupw01gNECx6tbTPhriYHPAoEkM=
Subject key identifier: 15:24:61:FB:43:3B:2E:14:C6:B6:08:64:8A:72:A7:E7:84:39:84:70
Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Certificate serial: 04CE
Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa
Signing time: Sat 31 Jan 2026 23:20:03 +0000
ROA not before: Sat 31 Jan 2026 23:20:03 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149295
IP address blocks: 103.177.242.0/23 maxlen: 23
103.177.242.0/24 maxlen: 24
103.177.243.0/24 maxlen: 24
2001:df0:2dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Validity
Not Before: Jan 31 23:20:03 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=697e8e23-d117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:d4:55:cf:d7:72:17:7f:67:ec:69:2d:aa:
65:e6:ee:bf:06:23:3f:cc:25:fd:50:9a:a1:e6:83:
b1:1e:31:1f:87:1c:52:2c:74:ac:82:a2:44:fd:83:
bd:04:8f:3c:66:ee:23:d9:4e:8f:1b:32:ab:a5:cf:
8c:0e:2c:48:0d:0e:bd:8b:98:93:b0:6f:71:7f:ba:
18:da:6f:2e:d0:8f:c5:16:02:da:99:16:fc:c5:13:
f2:6a:b8:41:5f:db:4d:b2:03:e3:78:5a:55:ee:85:
6c:79:81:f1:ce:14:3c:69:cc:81:8e:4a:d4:c9:c2:
bb:06:a4:29:0e:82:38:62:95:9e:c4:1a:c5:c7:c5:
34:91:ab:2d:19:19:67:20:f9:9c:69:8e:8d:b3:d4:
d5:a2:2b:ed:0e:72:ec:6a:22:d5:26:c5:1a:8f:8e:
36:bb:55:ff:ad:4b:61:f5:ee:91:24:a1:4f:5b:83:
07:fa:f8:1b:d3:0e:e7:10:0e:51:5d:4b:17:8f:71:
54:8c:b7:ef:08:f6:32:ee:01:a2:12:53:66:6a:02:
c5:25:c3:59:a2:2a:b0:fe:70:b9:db:16:78:c4:6f:
22:33:e6:8f:0a:c7:7e:26:10:6c:45:25:62:8d:e1:
d1:81:4d:be:0c:5f:00:03:d4:f4:98:c9:64:23:c3:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:24:61:FB:43:3B:2E:14:C6:B6:08:64:8A:72:A7:E7:84:39:84:70
X509v3 Authority Key Identifier:
keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.242.0/23
IPv6:
2001:df0:2dc0::/48
Signature Algorithm: sha256WithRSAEncryption
44:69:1e:b9:7a:46:d6:ea:a9:1e:4a:25:f0:5c:9f:31:fe:0b:
22:e9:c5:62:f7:ae:61:08:09:a6:bb:25:3f:a9:8c:49:3b:1b:
fa:84:56:be:52:2e:f7:de:1f:49:dd:db:4a:1d:1c:35:f1:0b:
2a:a7:37:64:38:1b:4c:c8:c4:8a:fa:ad:81:b1:5f:71:2f:11:
f4:35:0f:30:9f:f6:59:78:76:ca:64:82:b2:e5:4c:73:78:18:
84:88:3c:82:36:47:4b:06:32:f5:36:73:f9:5f:1b:ba:ed:1d:
a4:ae:65:83:a1:79:6c:ed:e3:3c:b0:3e:d3:ef:4c:29:e8:e8:
14:8d:ed:c6:88:61:24:52:43:e9:8f:cb:ab:93:47:2b:3e:24:
be:6a:08:32:d7:54:92:a4:bf:a6:af:87:e9:f1:a2:eb:7d:f5:
f6:bf:7a:9d:84:1a:bc:8d:ae:9b:db:b7:27:be:94:dd:42:a2:
bb:5f:bf:a4:b2:d8:c6:36:42:53:08:be:41:fd:e4:99:97:eb:
29:a7:4e:44:f1:46:32:40:c6:ea:22:cd:6d:5c:11:17:47:16:
4a:14:b8:3b:ae:53:7c:65:0e:cf:f3:64:2e:5e:eb:39:6f:df:
28:2d:5f:5f:62:c3:05:53:a6:40:d5:36:a7:69:d3:c5:01:98:
2c:75:fa:35
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3
QkU2NjhCNkEwHhcNMjYwMTMxMjMyMDAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdlOGUyMy1kMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlR7UVc/Xchd/Z+xpLapl5u6/BiM/zCX9UJqh5oOxHjEfhxxSLHSsgqJE/YO9
BI88Zu4j2U6PGzKrpc+MDixIDQ69i5iTsG9xf7oY2m8u0I/FFgLamRb8xRPyarhB
X9tNsgPjeFpV7oVseYHxzhQ8acyBjkrUycK7BqQpDoI4YpWexBrFx8U0kastGRln
IPmcaY6Ns9TVoivtDnLsaiLVJsUaj442u1X/rUth9e6RJKFPW4MH+vgb0w7nEA5R
XUsXj3FUjLfvCPYy7gGiElNmagLFJcNZoiqw/nC52xZ4xG8iM+aPCsd+JhBsRSVi
jeHRgU2+DF8AA9T0mMlkI8NtGwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBUkYftD
Oy4UxrYIZIpyp+eEOYRwMB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF
NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjM3REQvREU1OUY2MDI1RTczMTFFQzhCRTRDQzRFQzRGOUFFMDIvQ0E5NUZCMEVB
MUU2MTFFREFCRkQ3RDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnsfIwDwQCAAIwCQMHACABDfAtwDANBgkqhkiG9w0BAQsF
AAOCAQEARGkeuXpG1uqpHkol8FyfMf4LIunFYveuYQgJprslP6mMSTsb+oRWvlIu
994fSd3bSh0cNfELKqc3ZDgbTMjEivqtgbFfcS8R9DUPMJ/2WXh2ymSCsuVMc3gY
hIg8gjZHSwYy9TZz+V8buu0dpK5lg6F5bO3jPLA+0+9MKejoFI3txohhJFJD6Y/L
q5NHKz4kvmoIMtdUkqS/pq+H6fGi63319r96nYQavI2um9u3J76U3UKiu1+/pLLY
xjZCUwi+Qf3kmZfrKadORPFGMkDG6iLNbVwRF0cWShS4O65TfGUOz/NkLl7rOW/f
KC1fX2LDBVOmQNU2p2nTxQGYLHX6NQ==
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:32:03 2026 by rpki-client