
$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
File: C4928820F06C11EC91459B5CC4F9AE02.roa (raw, json)
Hash identifier: PB7QOYlvRwfsWOXpc6d0385exuRFXi8mvCHTNI8vfms=
Subject key identifier: 11:87:F6:83:06:67:CF:33:02:95:D7:CF:E9:FD:CD:ED:33:BB:8A:D4
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 035C
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
Signing time: Tue 03 Feb 2026 21:33:53 +0000
ROA not before: Tue 03 Feb 2026 21:33:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140646
IP address blocks: 103.12.36.0/22 maxlen: 22
103.12.38.0/24 maxlen: 24
103.12.39.0/24 maxlen: 24
103.189.212.0/23 maxlen: 23
103.189.212.0/24 maxlen: 24
103.189.213.0/24 maxlen: 24
2400:88e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 860 (0x35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Validity
Not Before: Feb 3 21:33:53 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=698269c1-a74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:63:0e:eb:00:44:a7:1e:3e:1b:a5:9e:4b:
b8:35:82:d3:e0:a4:18:3a:b0:22:4d:3f:3b:75:3b:
4d:3b:22:57:c9:fd:49:10:ff:d4:9b:d8:f0:62:db:
95:54:b5:d8:9b:31:23:dd:0b:3d:9e:46:ef:8e:38:
b0:6b:e0:ca:f2:fa:67:d7:e1:a1:5e:68:a6:e0:0e:
fd:bf:78:ff:78:9a:9f:ff:20:6b:a1:0b:89:eb:3c:
8b:1e:7e:02:af:5d:a7:98:85:12:d1:4c:37:e9:2a:
e4:ce:03:54:dd:e8:30:c4:3f:d2:22:d0:88:b9:e4:
7e:85:a0:c6:ee:2b:b4:1a:05:cc:51:61:70:42:b1:
a3:50:d3:6a:9d:0a:16:5a:f3:0d:88:41:37:04:7f:
f2:79:25:aa:fe:7a:89:0c:79:d6:a9:5e:70:16:58:
6f:28:80:b7:cd:36:0f:d4:11:56:69:f7:bf:2f:fc:
2a:20:d6:04:65:e1:b1:16:99:23:42:11:b4:af:8a:
7b:ff:d0:85:10:b4:db:61:ce:85:10:11:96:03:8f:
2d:80:1a:f8:4a:8b:69:a9:84:2a:3b:6c:3f:14:b8:
f7:47:15:ec:e4:38:58:b8:01:ce:f0:76:20:32:7f:
8b:b9:af:9c:42:42:3b:7a:95:65:16:4d:3b:c9:00:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:F6:83:06:67:CF:33:02:95:D7:CF:E9:FD:CD:ED:33:BB:8A:D4
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.36.0/22
103.189.212.0/23
IPv6:
2400:88e0::/32
Signature Algorithm: sha256WithRSAEncryption
cd:2f:7e:2d:3a:02:50:e5:3d:70:fc:a9:5d:e3:25:d9:22:5d:
e8:bf:43:44:40:54:5c:e9:e0:c8:f5:cf:85:dc:06:e7:4f:2e:
16:9b:0f:c2:9d:83:fb:5e:a0:94:a4:c1:97:ec:fb:c3:c3:ff:
7b:6f:29:fd:e4:65:fc:6e:42:ca:a8:5c:7f:4a:0e:df:26:7c:
56:1e:ea:80:06:09:46:36:f3:39:06:1c:cf:b6:66:b7:60:30:
ee:04:46:3a:6d:22:0f:fb:7a:2a:bd:27:e2:4f:5e:f7:8c:e8:
81:a6:b9:be:d2:d8:87:95:40:0b:bd:e4:bc:79:d4:c3:6c:b0:
58:b9:cb:07:aa:d6:fc:60:eb:48:56:50:33:c8:56:b8:72:8a:
f9:06:aa:9d:48:dc:90:e8:60:ea:c7:f3:3b:0c:ae:a9:f6:b3:
5a:22:bb:7b:bb:b6:17:e1:e1:0a:b4:43:d6:4b:9a:03:38:32:
3f:4d:17:b6:ac:37:d8:60:b7:9f:71:fb:d5:ee:55:85:11:02:
b0:15:47:fc:f3:d5:d6:74:76:40:3d:5b:fd:41:01:03:1c:7b:
cf:59:e7:40:8b:ea:f6:3e:7b:ae:84:fb:52:11:9c:cf:d7:61:
52:6d:56:42:9e:5d:01:b7:f1:f2:41:0d:69:43:e2:69:26:d2:
09:55:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:24 2026 by rpki-client