
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
File: 2F02BC96718D11EE97E3E022C4F9AE02.roa (raw, json)
Hash identifier: mYYZxIgcK1y/6L2Be9bucBJQ4d5ohpULEChgpLxdOmU=
Subject key identifier: 3A:09:EF:4A:9D:F9:8D:85:98:4D:A4:30:D3:3A:17:DD:62:D1:4F:9A
Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial: 020A
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
Signing time: Tue 03 Feb 2026 02:23:06 +0000
ROA not before: Tue 03 Feb 2026 02:23:06 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 19905
IP address blocks: 157.120.160.0/23 maxlen: 24
157.120.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Validity
Not Before: Feb 3 02:23:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69815c0a-ea44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:e9:1c:3b:e2:3e:e2:6c:22:a5:8f:d2:11:
95:11:c2:46:ad:68:68:4b:ad:5d:7c:76:26:d2:9f:
d1:1f:3a:4c:fe:10:6c:86:2d:26:17:ef:eb:5b:d6:
88:8d:8e:46:d8:83:ad:f7:08:7d:b6:91:85:93:80:
b2:24:ae:03:5f:c6:fd:d7:d0:4e:0c:0a:73:47:01:
f6:51:c9:74:b7:d8:d9:75:a6:d6:4c:f8:39:63:77:
3b:67:98:30:85:ac:ce:32:1d:f5:bc:42:ab:bc:e3:
3d:ff:25:b4:a0:b6:c1:7a:c8:7e:06:3d:10:95:17:
3b:8b:2e:fa:e3:c5:4a:c0:0f:d5:c6:2f:f5:66:4f:
fa:54:31:9e:62:57:d8:0f:a3:fe:df:10:53:cd:c1:
1e:c4:84:7e:58:97:d0:91:93:42:ee:28:f2:89:d6:
98:e6:9a:66:7f:c5:4e:2a:63:b8:93:83:f0:f6:53:
1e:b4:eb:69:85:ed:cf:a7:69:66:73:88:5c:84:57:
5d:be:5a:82:03:1a:d6:a4:d7:46:a9:55:0d:a1:8d:
75:04:03:27:c3:ed:eb:4d:d5:c7:c5:54:d5:83:fb:
34:9b:ac:05:11:81:0d:8f:e0:8a:ce:d6:9d:73:d1:
72:9f:4f:b3:09:ca:72:53:da:44:a6:2a:e6:ae:56:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:EF:4A:9D:F9:8D:85:98:4D:A4:30:D3:3A:17:DD:62:D1:4F:9A
X509v3 Authority Key Identifier:
keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.120.160.0-157.120.162.255
Signature Algorithm: sha256WithRSAEncryption
23:44:53:d8:b4:6f:09:c8:77:e3:7b:5e:d9:e8:46:36:7f:f2:
a0:e9:31:69:ef:3d:e1:3f:08:c4:c1:69:8f:1b:6f:7a:18:b2:
ec:a6:ca:89:88:43:cf:22:9a:b6:91:a5:d2:1a:88:16:2f:c0:
cb:a6:77:0f:b8:49:d3:5a:0a:6e:1e:9c:50:62:1c:14:83:c9:
d1:ba:ee:bd:12:b3:78:ed:56:3f:74:e3:84:e4:e9:44:c1:3a:
cd:0e:de:a1:83:69:c6:46:fa:41:ca:f5:f7:3e:62:49:bb:80:
84:86:d4:a6:1c:d7:a5:89:11:19:ee:92:43:8e:02:57:f1:07:
65:24:21:1b:fb:6c:37:2a:40:1d:98:0f:61:9c:00:57:c9:96:
0c:c0:6c:b3:e8:31:6a:b1:33:fd:d7:fa:3a:da:6d:7d:9b:6b:
ed:68:04:76:1f:66:9b:11:f3:8b:c5:8d:8a:04:8c:6f:dc:80:
9d:13:e4:01:70:2d:de:43:ca:39:a0:f4:c3:7c:b0:45:01:30:
84:68:95:09:cf:2e:a1:69:fe:14:5a:d1:f3:ad:b1:40:6b:7c:
fc:fe:83:a6:c1:f2:3b:ee:20:e3:fc:7e:25:a2:98:04:7a:4a:
3f:35:af:ed:b2:00:3d:7f:04:c2:7f:e7:ec:bd:05:b4:2d:4b:
c7:bd:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 07:19:45 2026 by rpki-client