
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
File: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (raw, json)
Hash identifier: scvIWP77Dxx2pnNVjzHe/pRPe7w91/W8yTlJFoFg89g=
Subject key identifier: DB:DB:13:B1:84:0C:F9:4C:E6:3C:2F:5A:1C:2F:AE:B3:F7:AA:70:18
Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial: 0E12
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
Signing time: Wed 04 Feb 2026 18:14:53 +0000
ROA not before: Wed 04 Feb 2026 18:14:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138581
IP address blocks: 103.133.204.0/22 maxlen: 23
103.133.205.0/24 maxlen: 24
2404:5340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3602 (0xe12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Validity
Not Before: Feb 4 18:14:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69838c9c-84cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:76:91:cf:f1:24:a0:45:26:cb:cb:99:9a:
b2:fb:9b:17:d2:45:a6:86:fd:8f:56:52:c9:7d:31:
c9:0a:f1:d5:f8:51:2b:46:be:e2:75:fb:d6:8b:c9:
32:eb:c1:3a:ae:1b:fd:cf:da:f2:e6:ff:37:6a:1f:
4d:e0:ca:00:74:41:ae:cc:92:fb:46:c1:33:f9:f2:
28:de:fd:44:de:4b:a8:57:2e:26:dc:c2:74:91:e1:
87:8f:c2:57:08:17:30:91:d2:c9:fb:09:f2:94:8e:
85:92:53:d0:cc:30:ad:cf:b8:0a:6e:35:55:b9:94:
e0:a7:65:49:94:73:11:06:9a:23:15:c0:c0:0c:9c:
93:0c:11:f3:66:af:84:01:4d:bf:3b:64:76:40:c4:
fc:32:8b:e2:7f:04:37:47:54:69:9a:36:54:f3:db:
d2:e7:5c:d5:84:94:e5:98:0e:43:49:ff:64:bf:d9:
b6:37:3b:94:63:32:eb:cc:ff:ae:b4:28:1e:c3:bc:
c4:40:cf:d2:91:ad:44:e3:9b:fb:23:ba:68:48:40:
f1:8c:6f:48:fd:da:d2:b9:31:29:2b:be:58:6e:b1:
9e:55:d8:99:c4:e5:64:61:1e:c4:95:d2:f3:21:80:
31:58:86:b1:a2:65:8f:16:65:7b:28:cd:e2:89:b2:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DB:13:B1:84:0C:F9:4C:E6:3C:2F:5A:1C:2F:AE:B3:F7:AA:70:18
X509v3 Authority Key Identifier:
keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.204.0/22
IPv6:
2404:5340::/32
Signature Algorithm: sha256WithRSAEncryption
b9:87:9f:f4:be:05:c0:ee:b6:2c:bb:93:d0:1c:ff:62:86:e9:
d1:21:d2:61:3d:26:54:e6:14:19:e5:31:ba:57:1b:3d:9e:67:
7a:1f:34:36:11:26:f1:0b:45:f9:c3:12:ef:5e:83:6f:07:ca:
1c:e3:cd:1c:6d:89:0f:bb:72:ee:ff:b8:7d:ec:b8:4b:15:84:
3b:fc:6d:d9:63:06:f4:9d:1d:6e:e6:8f:e3:78:1f:cc:11:73:
19:0e:04:ac:ee:51:b8:75:06:15:08:9f:54:bf:0b:e6:f5:fe:
4c:58:2f:38:82:55:5e:fd:81:21:6f:d6:b1:bf:f8:20:4c:a6:
83:09:c5:0c:9f:fb:61:ad:f0:33:7e:45:20:5e:86:ca:b7:8f:
4f:6e:21:b2:e5:0c:18:2f:58:20:8d:9c:c0:32:ea:8a:68:d3:
b1:a1:e0:fd:72:da:f1:9a:62:db:46:78:55:b4:f7:ee:14:f4:
de:be:63:6e:ea:f3:e3:e9:d3:83:68:81:8e:e0:68:66:2b:60:
85:09:fb:f2:dc:52:80:0a:2a:41:a2:f8:14:fc:19:c1:c4:18:
58:90:a4:b7:dc:bd:e0:a1:f5:05:ed:6e:2c:e1:8b:7c:c9:97:
ab:16:1a:d9:3c:4f:0d:1e:17:ac:0f:69:43:77:52:97:b3:94:
c6:0a:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:47 2026 by rpki-client