
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/A3E98D0E22A911EB96014E82C4F9AE02.roa
File: A3E98D0E22A911EB96014E82C4F9AE02.roa (raw, json)
Hash identifier: 0gmbpZ8UWX94h4DuRckq0XOz1fjFBcdW9bM07w4DwZs=
Subject key identifier: F1:A5:D7:B7:18:BA:8E:44:48:E4:E2:80:8D:39:53:4B:D5:F3:AB:78
Certificate issuer: /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
Certificate serial: 07EB
Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/A3E98D0E22A911EB96014E82C4F9AE02.roa
Signing time: Wed 11 Feb 2026 14:32:16 +0000
ROA not before: Wed 11 Feb 2026 14:32:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141398
IP address blocks: 103.158.62.0/23 maxlen: 23
103.158.62.0/24 maxlen: 24
103.158.63.0/24 maxlen: 24
2406:b240::/32 maxlen: 32
2406:b240:1000::/48 maxlen: 48
2406:b240:2000::/48 maxlen: 48
2406:b240:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl
rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
Validity
Not Before: Feb 11 14:32:16 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=698c92f0-ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:7b:3f:c0:d2:75:bd:f4:d0:59:53:26:18:
3c:42:26:75:12:5b:3e:ac:38:51:42:c0:4a:d1:e2:
a7:6e:ad:ce:d5:17:d6:0f:4d:14:64:f4:0a:fc:66:
82:6a:1a:35:b2:e6:26:2a:89:ba:6d:ea:46:6c:87:
d7:fb:31:37:d9:97:8f:32:eb:b4:4e:e8:b9:7a:99:
bd:7c:3a:d4:bf:49:99:20:26:e9:e2:1d:6f:d2:55:
08:6e:29:9f:38:24:01:41:81:f8:ba:27:c2:06:d5:
aa:f6:78:ed:1d:7c:8d:28:89:f2:c6:02:af:0f:6c:
59:5d:55:1e:e2:3f:51:bc:e8:8c:38:cb:de:49:84:
65:ec:c2:c8:ac:aa:94:a8:97:05:d0:76:0c:1d:2d:
88:ea:54:f9:f6:e6:c7:0b:5d:ab:6f:e9:09:e2:d0:
9f:8b:3b:76:f9:42:63:65:38:28:09:a9:0e:b7:33:
d7:2f:ea:7e:b6:4c:f5:28:97:d6:fe:e5:fe:47:77:
3d:5b:75:f8:5b:de:6a:2e:e8:ab:22:bb:24:bc:ca:
be:7a:90:b3:b2:18:a7:48:55:b5:cf:4b:33:aa:be:
d1:44:41:ba:58:36:0b:92:03:9a:eb:24:62:f2:0c:
4a:1b:c6:75:25:37:53:17:b7:09:e9:37:02:98:37:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A5:D7:B7:18:BA:8E:44:48:E4:E2:80:8D:39:53:4B:D5:F3:AB:78
X509v3 Authority Key Identifier:
keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/A3E98D0E22A911EB96014E82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.62.0/23
IPv6:
2406:b240::/32
Signature Algorithm: sha256WithRSAEncryption
6e:a5:40:b7:8c:27:b0:f1:d1:b4:dd:d9:ad:24:ab:54:b9:92:
42:50:0e:51:a8:0c:22:12:7c:e3:ab:a9:99:31:01:34:f5:f9:
20:6a:b3:56:4e:32:a1:78:49:f6:c2:70:ad:c2:29:cc:cf:1e:
7e:7a:4b:06:65:bd:41:3a:a8:58:da:21:18:be:20:e3:a4:30:
3e:15:ed:a2:25:9f:47:2f:95:e8:07:c9:60:6d:37:e7:0f:ba:
ce:70:95:1b:d5:01:a2:3e:d7:2c:93:a2:1a:cb:ad:ea:76:fa:
b4:d3:52:c1:57:36:e1:fc:33:1c:3c:ad:27:da:ba:be:69:58:
e0:3a:fb:c0:b8:48:9e:de:76:6c:71:69:67:86:e8:76:4a:aa:
82:2a:37:b1:c4:4e:18:11:5d:75:54:61:23:e7:00:86:93:05:
15:7a:c5:96:e0:40:9b:be:f0:24:79:dd:d4:ce:1f:38:63:35:
83:1d:66:52:e6:eb:81:f1:68:9c:ac:10:18:11:ec:21:7d:7e:
69:84:94:56:29:b4:e5:1e:84:dd:f5:5b:df:15:87:f0:25:f6:
cb:92:84:e7:d1:06:2b:dc:81:a9:86:3c:cc:c0:c2:4f:c9:0e:
7f:30:2e:0d:7e:fb:45:ea:32:77:77:8f:e9:fa:27:c3:8f:7f:
82:1d:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:24 2026 by rpki-client