
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa
File: B70AE7D20C6B11EC82638A40C4F9AE02.roa (raw, json)
Hash identifier: lcPQk8kRtIgXnaGq0kDSW0LFBhjFOijngKDz0c89xxA=
Subject key identifier: 40:86:A7:A2:EA:6B:E9:01:4E:B0:4B:72:EB:CE:46:2A:B6:B1:0B:74
Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Certificate serial: 287E
Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa
Signing time: Thu 12 Feb 2026 07:38:04 +0000
ROA not before: Thu 12 Feb 2026 07:38:04 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132447
IP address blocks: 45.121.88.0/22 maxlen: 22
45.121.88.0/24 maxlen: 24
45.121.89.0/24 maxlen: 24
45.121.90.0/24 maxlen: 24
45.121.91.0/24 maxlen: 24
103.21.164.0/22 maxlen: 22
103.21.164.0/24 maxlen: 24
103.21.165.0/24 maxlen: 24
103.21.166.0/24 maxlen: 24
103.21.167.0/24 maxlen: 24
2405:6b00::/48 maxlen: 48
2405:6b00:64::/48 maxlen: 48
2405:6b00:65::/48 maxlen: 48
2405:6b00:66::/48 maxlen: 48
2405:6b00:67::/48 maxlen: 48
2405:6b00:68::/48 maxlen: 48
2405:6b00:69::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10366 (0x287e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Validity
Not Before: Feb 12 07:38:04 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=698d835c-c7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:68:76:ee:92:e4:f8:01:49:91:00:32:d3:
41:f6:03:da:4e:bd:c2:bb:72:1b:d0:95:75:2e:dc:
6c:42:a4:55:4c:a8:ad:e1:f6:d7:fd:d7:20:cc:ee:
a0:75:d5:72:e0:c2:56:27:e7:bb:3a:bc:1f:02:ae:
fc:0b:1d:9e:d1:3e:77:3e:a4:6f:20:23:6d:40:b8:
13:26:fb:78:13:b2:0d:ba:76:b5:20:87:4f:b0:ac:
e3:0c:e2:1e:ad:9c:bc:ef:18:fb:7d:41:fc:05:40:
bc:f0:7f:86:d0:ce:63:c0:0e:3f:54:65:d8:86:6b:
72:2d:01:39:a9:92:3c:cb:c2:ad:ed:25:ad:2a:f1:
f1:67:75:90:21:ee:4e:05:fb:b5:e2:97:c0:3d:e3:
f1:e6:b9:d2:6e:72:96:17:7f:b1:23:1e:ff:83:4c:
6d:62:48:16:80:0b:4b:5f:61:33:13:d1:cd:9b:b1:
4d:84:fa:dc:b9:1a:5e:35:9f:97:e9:25:b0:b1:30:
36:51:10:2e:05:46:c0:73:41:28:31:4d:d7:13:ef:
97:92:36:05:71:f6:89:60:fa:d4:9d:50:2e:0e:c6:
1e:10:12:29:b7:b6:13:ac:99:82:bc:86:77:89:e0:
8a:c0:a6:1a:16:bb:52:9b:6a:23:0f:12:b1:1e:c3:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:A7:A2:EA:6B:E9:01:4E:B0:4B:72:EB:CE:46:2A:B6:B1:0B:74
X509v3 Authority Key Identifier:
keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.88.0/22
103.21.164.0/22
IPv6:
2405:6b00::/48
2405:6b00:64::-2405:6b00:69:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:25:b6:78:bb:13:8d:93:c8:dc:55:de:52:4c:8c:9e:dd:04:
36:cf:27:45:98:84:58:3b:79:16:76:8a:af:0d:38:1a:f5:c1:
cd:0b:9a:9c:f2:9b:de:21:2a:15:31:a4:1b:1a:09:86:8c:d8:
f8:50:86:4a:40:14:5d:d2:df:d0:02:8a:9b:f6:6c:cc:86:51:
78:0c:e6:2a:f1:20:2b:db:f4:18:e3:95:05:3c:84:89:63:e8:
08:42:90:6a:17:23:4d:61:4c:41:47:8f:42:ba:78:1d:4e:5a:
65:3c:ec:dd:e4:53:11:06:84:12:77:fd:bc:e1:9d:36:4a:df:
d4:31:ac:34:0d:31:c1:c7:77:af:59:df:ae:56:f7:6b:16:83:
ad:19:b3:58:7a:2b:0b:74:fe:8d:47:74:7d:89:78:72:f6:16:
b2:94:fa:b4:57:54:0a:74:bd:a6:db:29:af:6f:b6:25:49:70:
da:f2:43:af:26:6b:bf:49:a2:b3:f2:94:02:fb:38:8d:92:76:
1f:59:c7:ee:fe:3a:1e:26:92:0f:be:ad:f9:54:98:29:09:f3:
c2:7e:f1:11:67:9d:66:60:55:62:b9:20:5f:4d:20:6f:46:5c:
98:1d:fb:a9:25:1e:aa:93:e2:c6:de:d2:05:59:c6:59:52:45:
b6:8e:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:51 2026 by rpki-client