
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/B20C8966F0A011EBAAC0FE77C4F9AE02.roa
File: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (raw, json)
Hash identifier: aOytWg2FwJS1l+7KIT64oIXAEUwTgWxFpLSXtg4UFSQ=
Subject key identifier: FB:88:23:2D:15:83:2C:10:08:ED:3B:7E:72:53:4B:2B:0F:1A:A7:0C
Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Certificate serial: 353E
Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/B20C8966F0A011EBAAC0FE77C4F9AE02.roa
Signing time: Mon 02 Feb 2026 15:12:08 +0000
ROA not before: Mon 02 Feb 2026 15:12:08 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 56038
IP address blocks: 103.43.116.0/22 maxlen: 22
103.43.116.0/24 maxlen: 24
103.43.117.0/24 maxlen: 24
103.43.118.0/24 maxlen: 24
103.43.119.0/24 maxlen: 24
103.69.72.0/24 maxlen: 24
103.69.73.0/24 maxlen: 24
110.232.116.0/22 maxlen: 24
116.206.80.0/22 maxlen: 22
116.206.80.0/24 maxlen: 24
116.206.81.0/24 maxlen: 24
116.206.82.0/24 maxlen: 24
116.206.83.0/24 maxlen: 24
2406:4a00::/48 maxlen: 48
2406:4a00:1100::/48 maxlen: 48
2406:4a00:1600::/40 maxlen: 40
2406:4a00:1600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13630 (0x353e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Validity
Not Before: Feb 2 15:12:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6980bec8-6292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:33:93:7b:ec:ee:87:d1:08:4a:79:d7:75:
a0:62:b9:a4:0c:af:ec:63:7e:d0:3d:61:71:d9:14:
c2:cf:51:d7:4d:84:9e:70:c1:01:d2:4d:43:2d:95:
79:7c:44:15:07:7e:c9:9d:7d:10:ab:e8:fb:13:63:
5e:14:35:55:e3:11:f3:fe:64:76:df:ec:8b:b6:c9:
18:a6:de:fd:d8:50:c1:3d:0c:c6:0a:2a:ac:bd:ee:
3e:54:9e:eb:f5:66:6c:06:e1:6c:ed:5f:f7:00:7a:
27:17:32:a3:9d:61:57:b3:03:83:90:7f:54:50:5a:
c7:8a:1f:17:11:55:82:5c:2d:09:1f:f0:67:a1:62:
04:5e:f0:f0:c1:b8:be:39:30:3f:09:8c:a3:f3:a8:
24:9d:82:ff:cc:4a:6f:27:97:51:80:5c:04:6b:c3:
80:c8:67:7f:bc:51:9d:6b:09:f4:f5:ff:0b:b5:a4:
98:87:06:5c:12:5d:1e:36:1c:98:16:ca:6c:61:25:
8b:1b:c8:2d:8a:e9:9d:d8:dd:6d:68:73:6d:26:9e:
65:f4:e2:ee:4b:3c:a9:9a:82:33:98:82:c7:91:fa:
9d:5f:c4:66:96:90:ef:9a:25:7e:bc:ad:d6:95:a0:
8a:b4:26:0a:92:69:13:ea:9e:1b:22:5d:dc:61:60:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:23:2D:15:83:2C:10:08:ED:3B:7E:72:53:4B:2B:0F:1A:A7:0C
X509v3 Authority Key Identifier:
keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/B20C8966F0A011EBAAC0FE77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.116.0/22
103.69.72.0/23
110.232.116.0/22
116.206.80.0/22
IPv6:
2406:4a00::/48
2406:4a00:1100::/48
2406:4a00:1600::/40
Signature Algorithm: sha256WithRSAEncryption
23:70:ce:3b:e7:0d:5d:2c:03:ff:b6:ba:dc:30:66:94:a6:ee:
32:f9:89:a1:b5:ed:71:df:29:09:6a:1e:23:6f:15:ef:ee:be:
f9:cd:f2:12:5f:0e:6a:2b:b0:51:48:01:ae:d5:dc:87:f7:f8:
6b:76:8d:71:99:18:e8:b6:60:36:6e:47:20:b5:65:ba:83:6b:
a3:25:e0:7e:e7:0f:33:17:87:b3:ce:2b:b4:1b:82:1f:1c:6e:
06:a0:1e:27:f7:1a:47:2d:a8:fd:bf:8c:bb:f4:16:0c:13:47:
18:66:a6:fa:f3:bb:7c:02:08:b8:5e:87:6d:7d:81:2a:38:eb:
6f:ce:ce:ad:f9:0a:01:94:9e:e9:38:f8:8a:97:1b:27:fd:fa:
77:73:76:fe:32:3a:3f:8a:8b:3f:f2:d8:7e:c5:4f:3c:d1:f5:
0d:ba:2f:4e:1c:ca:84:77:8a:d3:2f:e5:3a:83:1c:aa:4e:5b:
98:de:0a:fe:c5:f3:28:d9:69:42:a9:f3:6f:3a:d7:29:f5:71:
b5:43:1f:24:a1:cd:6c:c7:da:9a:5e:de:01:69:6b:81:d6:79:
28:26:79:7f:ec:ff:53:e2:58:03:f0:0e:97:db:7f:60:d3:8a:
5e:aa:e0:9a:99:29:eb:8f:9d:5b:68:5f:2b:2f:80:d0:9c:ae:
d1:7f:b2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:00 2026 by rpki-client