
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa
File: 58D5764A683311ECB9C17757C4F9AE02.roa (raw, json)
Hash identifier: B89plsbzpJPq8s829DD1iasXmMCvgKmuBXymcNPJP00=
Subject key identifier: 52:21:1C:06:DE:38:4F:4B:6F:20:2A:BF:55:ED:F9:56:F2:E8:E7:D9
Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial: 3539
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa
Signing time: Thu 12 Feb 2026 15:10:28 +0000
ROA not before: Thu 12 Feb 2026 15:10:28 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 17480
IP address blocks: 43.255.236.0/22 maxlen: 22
103.23.52.0/22 maxlen: 22
113.21.96.0/20 maxlen: 20
113.21.112.0/20 maxlen: 20
202.171.64.0/20 maxlen: 20
203.147.64.0/20 maxlen: 20
203.147.80.0/21 maxlen: 21
220.156.160.0/20 maxlen: 20
2401:c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13625 (0x3539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Validity
Not Before: Feb 12 15:10:28 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=698ded64-da0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:cb:47:0f:b4:68:cf:54:64:cb:f8:04:6c:
3a:fb:ce:ab:6c:7c:02:2a:59:dd:72:b9:a9:15:52:
1b:14:b5:af:dc:78:98:ce:34:c3:87:0b:83:74:da:
95:45:d4:69:89:3e:6b:4d:dd:39:b8:af:e0:45:bd:
b0:59:0c:4f:b9:8f:f4:6e:9e:8b:e3:76:fc:f3:30:
33:6a:92:18:e0:5f:9a:b2:c5:ef:0d:ea:f2:b4:18:
31:71:a4:6a:56:e2:1c:5b:4d:d8:cd:c8:e8:e8:d1:
49:3a:e5:67:60:dd:83:0e:d5:c2:cd:cb:ae:34:50:
29:1e:67:3a:1a:66:7d:b7:33:d0:2b:86:ba:8e:50:
89:f2:fb:a9:3f:5e:89:0f:5c:8c:0d:d3:5f:66:3a:
63:23:d2:45:82:3c:06:0b:f2:74:41:96:df:52:99:
2e:b3:8c:e2:75:07:2d:02:91:63:69:57:a9:fe:81:
74:b1:cc:9d:c1:1c:5b:d5:ef:cb:1c:83:4c:bf:2d:
c8:fb:ee:5b:f2:bf:c3:97:22:a8:89:4c:b1:0a:a5:
a2:fa:47:1d:03:0f:28:29:7c:f3:4d:18:fe:24:f4:
a1:25:c8:3b:07:3f:2b:6e:a2:f1:8f:5e:63:a2:30:
77:72:e6:51:2d:a2:9d:72:5a:72:a2:86:c5:a4:d7:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:21:1C:06:DE:38:4F:4B:6F:20:2A:BF:55:ED:F9:56:F2:E8:E7:D9
X509v3 Authority Key Identifier:
keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.236.0/22
103.23.52.0/22
113.21.96.0/19
202.171.64.0/20
203.147.64.0-203.147.87.255
220.156.160.0/20
IPv6:
2401:c00::/32
Signature Algorithm: sha256WithRSAEncryption
99:19:31:b6:2a:c9:76:d2:c4:63:cc:80:08:5b:13:74:78:89:
5c:7e:64:df:0a:ac:19:da:d7:32:07:e9:fe:bb:e9:72:e0:e5:
c1:7c:20:63:35:c1:98:fb:a2:9b:4e:7d:67:da:84:f0:1a:9f:
2f:1c:8d:99:2c:f2:61:75:d1:ab:96:32:35:0c:5a:33:0b:3c:
a3:50:4b:6c:11:f0:4c:c5:0b:de:b6:96:51:0f:2e:26:94:3b:
af:67:c2:7a:45:2a:44:51:da:64:02:20:66:1b:e8:17:c7:21:
4f:05:37:43:fe:f1:9b:72:f6:09:07:13:68:e3:f7:8d:ed:be:
95:24:4d:51:52:08:cd:50:89:20:ce:06:02:7d:95:a8:f4:ef:
7e:ae:16:a8:31:85:16:f9:9d:83:94:e7:ee:a0:d6:43:97:d3:
99:40:36:9f:99:cb:b6:4a:f2:d0:14:e9:93:f9:53:4d:42:de:
0c:2d:26:d5:23:fe:a7:dd:b0:d3:6a:a3:15:e8:64:f0:e6:68:
3d:7f:0f:2e:7a:08:62:ed:9f:7e:87:2f:9c:79:dc:87:29:4c:
0b:d4:a8:92:92:14:4d:23:18:70:81:85:5d:34:12:4b:87:5b:
66:db:b2:50:91:43:7b:46:f2:2d:93:4c:19:bd:64:78:da:1c:
15:f6:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:34:08 2026 by rpki-client