
$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa
File: BFD9F81CFFEB11F085398A1A766F56BC.roa (raw, json)
Hash identifier: nay00zvaYojMbXAfW+NehMGP+B+DbKBPKXxgjVM2Z6A=
Subject key identifier: 91:06:1F:EC:92:3D:31:10:05:6D:EB:AA:6D:D3:0F:22:2E:62:BA:0B
Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial: 10CE
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa
Signing time: Mon 02 Feb 2026 04:00:45 +0000
ROA not before: Mon 02 Feb 2026 04:00:45 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135589
IP address blocks: 103.13.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4302 (0x10ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Validity
Not Before: Feb 2 04:00:45 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6980216d-968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:43:55:2c:fc:0a:2b:47:78:d5:2e:26:0f:
b1:a4:ff:c6:ec:69:51:80:65:e1:84:5c:da:00:0b:
82:9b:a5:b2:d9:54:63:40:03:0e:ad:f9:b8:19:26:
fe:27:8a:d2:9b:66:8d:47:bd:f6:6f:a0:4b:99:1c:
a5:d6:f5:87:b3:68:32:17:e9:ed:1f:3c:9c:c2:90:
51:ed:4e:1d:f6:c9:20:37:54:f4:5d:d6:44:18:48:
af:f1:cd:28:1b:2e:13:b8:ce:ad:d1:7b:13:e0:34:
bb:6e:dd:8d:1b:c4:a2:f1:d1:a6:b1:5c:41:d8:85:
dd:f3:52:8c:82:71:e6:e2:d6:cf:bd:af:4e:77:98:
fa:d9:6f:e6:76:a1:a6:4f:a5:01:34:61:6c:2d:27:
d2:89:bb:3d:9a:2f:b5:9c:61:49:af:5d:d3:19:c2:
57:63:e6:cb:0f:43:97:24:b8:89:07:ea:d9:5e:4e:
c9:a3:7d:c8:8e:6c:78:45:25:8f:bc:34:de:42:b1:
21:43:d9:17:f7:2f:0a:0a:5e:4f:52:e3:54:ba:31:
46:98:fd:9e:d4:87:70:8c:99:3e:ba:ec:54:6c:d9:
55:d7:ac:cd:17:ac:ab:66:e6:05:95:9d:6e:67:06:
8c:c0:33:1e:8e:41:d9:74:4b:d7:a0:5e:7f:e0:e8:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:06:1F:EC:92:3D:31:10:05:6D:EB:AA:6D:D3:0F:22:2E:62:BA:0B
X509v3 Authority Key Identifier:
keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.35.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:da:a7:9e:88:a8:f7:6d:76:79:1f:45:36:d3:6b:77:28:37:
d7:7c:81:b9:1b:82:a1:49:64:bf:91:ef:11:de:93:34:d1:d9:
ce:50:ea:3a:c2:6f:f7:2e:b3:0f:b1:1d:f0:a9:c0:34:0f:f0:
bb:5a:44:f5:51:32:c4:3a:ec:e3:3b:28:58:25:4c:33:08:22:
ca:73:5d:fc:05:80:d1:b6:a3:b6:93:8e:0c:c0:12:d2:89:12:
89:03:51:de:cd:97:ef:3e:55:61:12:93:2a:84:cc:f4:04:f4:
8a:91:37:96:7d:15:90:bd:5c:48:3c:b8:27:aa:eb:e3:49:b6:
c0:05:0b:c0:a9:07:7f:af:c2:e5:ec:b1:a1:28:99:0d:ba:24:
f8:86:ff:f9:7a:0c:2e:2c:81:15:93:51:eb:be:bd:aa:83:c0:
ca:1b:94:8b:7f:f7:a5:77:28:c9:8f:59:d2:1c:03:c9:3f:d8:
5e:14:7e:47:5d:47:7a:ba:08:3b:0c:88:61:1d:0e:0a:89:4b:
15:16:37:13:68:16:1e:0f:30:19:8f:9a:53:81:aa:95:0a:02:
e1:32:b7:b3:12:6c:ce:75:90:fd:01:bb:0e:7a:32:02:ac:19:
fd:eb:b6:0b:d6:e0:f7:46:ef:11:48:69:82:81:f1:8b:05:4a:
7c:1c:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:18 2026 by rpki-client