
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CFF8393A232C11F0B9CB2044C4F9AE02.roa
File: CFF8393A232C11F0B9CB2044C4F9AE02.roa (raw, json)
Hash identifier: YZv4QiX7IWi80YAKcDZDW6MOPXA5QzX/os4KNPASKDk=
Subject key identifier: 0E:ED:2E:94:EC:BD:B5:9A:13:9B:86:F6:F8:8E:26:C5:5F:64:6E:2C
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0C78
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CFF8393A232C11F0B9CB2044C4F9AE02.roa
Signing time: Mon 02 Feb 2026 19:15:36 +0000
ROA not before: Mon 02 Feb 2026 19:15:36 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 136908
IP address blocks: 117.121.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3192 (0xc78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Validity
Not Before: Feb 2 19:15:36 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6980f7d8-b287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:d5:16:43:02:53:66:44:c3:3e:4e:84:8d:
a1:41:ab:e4:82:92:a0:53:39:9d:32:56:79:69:7b:
8e:01:48:9b:e1:79:d2:52:43:7e:a7:31:7c:49:eb:
5d:6a:34:73:fd:a6:0f:8f:de:cc:dd:69:eb:37:26:
a3:e3:fc:f7:46:53:fc:54:3c:ac:bd:b7:3f:b7:f3:
f4:74:f7:0b:94:78:92:41:79:01:43:b4:9e:eb:95:
ff:32:21:7c:5e:73:ac:b2:31:06:2a:e1:3f:a6:9c:
2d:4c:7b:82:1d:bc:ec:f9:ff:f1:60:0e:c7:8c:82:
69:be:32:d6:7f:1a:f8:23:2f:d7:01:02:8c:3d:99:
1f:90:de:25:78:3f:89:17:cb:e8:7b:82:54:20:24:
2c:69:05:32:08:aa:9f:03:04:d8:fd:30:32:07:d7:
58:12:75:b9:69:97:04:26:0f:65:7f:b9:0d:43:89:
5f:e3:4a:98:8f:15:33:b7:01:4e:fa:ff:71:b6:5f:
2b:14:4d:a7:9a:4f:19:0b:f0:06:ce:b0:85:79:b7:
ac:fb:1d:6b:72:08:a5:43:84:1e:59:b1:3f:f7:15:
54:6a:d2:cb:e8:14:49:ed:41:be:92:88:b9:aa:d7:
52:16:70:6d:ec:22:6a:ba:b8:41:6f:ff:58:e3:c3:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:2E:94:EC:BD:B5:9A:13:9B:86:F6:F8:8E:26:C5:5F:64:6E:2C
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CFF8393A232C11F0B9CB2044C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fc:ee:ae:f7:6b:39:9a:6f:91:27:fc:15:7e:aa:fe:6a:c7:
e2:78:19:77:0f:08:b7:6d:1e:ec:84:2a:38:45:94:3b:16:4e:
21:c7:2a:d8:a8:a7:d1:cd:d3:56:29:05:ac:b8:3b:bc:56:3f:
ee:7e:ae:91:43:5b:52:55:f4:eb:7c:1d:83:49:3f:90:df:06:
7b:82:e2:c9:d5:4c:a9:c4:f1:d1:1b:1e:c9:c0:ee:e4:2c:25:
90:73:25:5b:78:ca:79:b3:3b:8f:1e:9c:40:83:ed:71:7a:00:
08:87:71:09:f2:c8:85:2b:4a:cc:c8:10:08:c0:e4:4a:89:75:
05:83:9a:09:51:a9:c8:00:90:69:12:ef:be:eb:d2:0a:95:b8:
91:8a:19:b9:09:61:a7:41:45:d9:b4:89:4b:b6:8d:29:9f:b8:
af:12:ae:55:79:90:01:31:96:c8:c8:bd:c6:61:61:c1:45:c2:
e1:4f:1a:00:37:b8:20:9a:89:19:d0:fa:6d:d0:14:2d:55:34:
a7:cd:8a:83:2c:36:3c:e4:06:e8:3c:b3:c1:2c:a5:a5:af:0c:
c2:c0:d8:fd:4d:bd:4b:85:fa:1f:5a:49:d0:c6:d7:41:71:b9:
ae:c6:45:d9:3b:00:fa:cc:85:ed:82:dd:34:11:74:c7:9f:ef:
0e:b8:1d:ff
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD
OUJDQTgzOTIwHhcNMjYwMjAyMTkxNTM2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgwZjdkOC1iMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAss3VFkMCU2ZEwz5OhI2hQavkgpKgUzmdMlZ5aXuOAUib4XnSUkN+pzF8Setd
ajRz/aYPj97M3WnrNyaj4/z3RlP8VDysvbc/t/P0dPcLlHiSQXkBQ7Se65X/MiF8
XnOssjEGKuE/ppwtTHuCHbzs+f/xYA7HjIJpvjLWfxr4Iy/XAQKMPZkfkN4leD+J
F8voe4JUICQsaQUyCKqfAwTY/TAyB9dYEnW5aZcEJg9lf7kNQ4lf40qYjxUztwFO
+v9xtl8rFE2nmk8ZC/AGzrCFebes+x1rcgilQ4QeWbE/9xVUatLL6BRJ7UG+koi5
qtdSFnBt7CJqurhBb/9Y48OIbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA7tLpTs
vbWaE5uG9viOJsVfZG4sMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD
QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M3MUUvQzc4RTRBNzIxQ0E4MTFFQThDQkI0NTQzQzRGOUFFMDIvQ0ZGODM5M0Ey
MzJDMTFGMEI5Q0IyMDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB1eeYwDQYJKoZIhvcNAQELBQADggEBAH387q73azmab5En
/BV+qv5qx+J4GXcPCLdtHuyEKjhFlDsWTiHHKtiop9HN01YpBay4O7xWP+5+rpFD
W1JV9Ot8HYNJP5DfBnuC4snVTKnE8dEbHsnA7uQsJZBzJVt4ynmzO48enECD7XF6
AAiHcQnyyIUrSszIEAjA5EqJdQWDmglRqcgAkGkS777r0gqVuJGKGbkJYadBRdm0
iUu2jSmfuK8SrlV5kAExlsjIvcZhYcFFwuFPGgA3uCCaiRnQ+m3QFC1VNKfNioMs
NjzkBug8s8EspaWvDMLA2P1NvUuF+h9aSdDG10Fxua7GRdk7APrMhe2C3TQRdMef
7w64Hf8=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:24:13 2026 by rpki-client