
$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
File: 728286AE27BF11EDA6A02960C4F9AE02.roa (raw, json)
Hash identifier: sSRfRnYQRMGkVkEen327Ppn7OTWcdEFTS3+DBpjI3Ak=
Subject key identifier: 37:CF:B9:B6:70:4E:D5:90:2D:71:8C:5C:47:B5:C6:F8:DD:61:E8:D8
Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial: 02B7
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
Signing time: Sat 31 Jan 2026 01:21:05 +0000
ROA not before: Sat 31 Jan 2026 01:21:05 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134475
IP address blocks: 103.160.129.0/24 maxlen: 24
103.185.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Validity
Not Before: Jan 31 01:21:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697d5901-cdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:59:4e:a9:57:1d:56:c4:60:a7:64:b8:55:
4b:d2:05:56:e8:84:d4:cc:b5:64:19:b0:a7:68:fd:
67:e7:0d:a1:95:dd:8e:aa:31:32:95:92:85:56:e1:
f1:eb:42:37:3f:37:bd:9c:94:d6:80:2a:73:00:8e:
f6:ec:26:9f:07:c6:a0:80:63:2b:80:17:c9:c4:8d:
92:51:af:f8:2c:7f:ff:58:4b:45:89:3c:0b:17:71:
6f:12:97:67:4a:c7:12:cf:25:06:c5:c8:4f:be:91:
0e:72:d5:ae:f5:ad:e6:b4:2a:01:8c:5c:b1:57:12:
f0:bf:2a:82:25:c8:d5:c5:c2:b4:d0:58:19:fc:79:
de:b4:68:5e:2a:8f:28:8e:07:76:fa:f3:cc:d0:76:
6f:eb:78:b3:0a:c7:24:19:b0:42:8f:21:a5:15:54:
34:01:11:0b:f2:3b:90:96:72:9d:f0:ce:7e:bf:f5:
0a:cf:35:83:81:07:21:a5:00:3a:a8:06:6a:51:5f:
3c:e9:a7:e1:66:ca:5a:92:db:78:0f:93:9f:c7:59:
6d:3a:44:d5:27:fe:a6:cc:3b:1e:ae:6c:29:ae:1c:
e0:58:9c:cd:61:96:64:38:ec:ae:43:43:9b:dc:ab:
e7:ca:8e:2c:8f:14:9b:dc:81:ca:ca:a0:1f:c1:94:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:B9:B6:70:4E:D5:90:2D:71:8C:5C:47:B5:C6:F8:DD:61:E8:D8
X509v3 Authority Key Identifier:
keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.129.0/24
103.185.192.0/24
Signature Algorithm: sha256WithRSAEncryption
47:45:11:e0:5c:92:d1:6f:87:35:12:14:b3:3a:54:70:f8:59:
0e:71:dc:5c:32:30:b8:a9:21:18:a5:a9:0d:97:0f:88:ce:45:
e1:75:75:4f:cd:9e:ef:4c:45:81:71:48:5a:7f:04:4a:4f:b8:
1e:c6:15:fd:42:e4:84:22:29:de:e0:55:5c:6d:1f:7a:99:d3:
ec:92:5b:6d:4c:b4:21:0b:f0:ce:df:8c:df:76:39:72:44:eb:
71:73:83:5c:ed:ee:4d:ff:7e:6b:77:fb:80:d3:de:dd:c4:99:
39:81:bf:2d:44:75:06:8c:24:6a:fe:4b:b3:a0:4f:bd:55:58:
22:59:fa:fd:eb:5c:69:f9:5b:1f:d7:de:e1:e2:ff:92:3d:6c:
f6:ba:c3:45:6e:1c:aa:8f:7b:f3:02:56:ed:e4:76:ee:93:3b:
46:57:65:22:0b:4f:1c:c5:f0:ed:12:5c:75:a9:1f:28:f4:60:
08:0c:a7:c8:0f:40:b9:2f:7e:c4:2d:fe:14:27:ec:1a:29:5f:
67:da:f3:8b:12:1b:66:b5:51:d4:b5:39:bf:d3:36:f8:83:95:
e0:c0:e4:97:74:80:1b:1d:0c:cf:b6:33:58:89:0e:ae:2d:e3:
3c:41:be:91:36:cd:91:b4:1d:29:b3:34:d1:e5:7d:41:3f:b8:
9b:69:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:05 2026 by rpki-client