
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/6880FA2C59D211EAB77C8C13C4F9AE02.roa
File: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (raw, json)
Hash identifier: dVT4lBZy6iX7h2LjLN3u3qmg8uoVhOG8vKNNak0Y8YM=
Subject key identifier: 64:E1:BC:01:BD:79:5F:03:0C:3A:83:CF:8C:CB:1E:37:17:4C:B7:05
Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial: 23B2
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/6880FA2C59D211EAB77C8C13C4F9AE02.roa
Signing time: Fri 30 Jan 2026 16:13:18 +0000
ROA not before: Fri 30 Jan 2026 16:13:18 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 56017
IP address blocks: 43.249.176.0/22 maxlen: 24
103.4.72.0/22 maxlen: 24
113.197.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9138 (0x23b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Validity
Not Before: Jan 30 16:13:18 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697cd89e-c1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:72:78:de:05:72:b1:a7:b0:e4:19:67:3b:
e0:db:21:f7:12:12:3c:65:fe:d6:8c:2a:8e:04:35:
e2:4b:7c:d9:ba:3b:e5:bc:51:d5:55:63:09:a8:d8:
be:ab:0e:fc:5c:44:71:05:16:06:34:59:e4:07:67:
ac:3f:d4:f5:1d:85:c5:43:33:d8:fa:05:8f:ed:07:
17:bc:09:83:51:7b:18:b7:48:f3:97:47:23:80:8a:
cb:24:02:68:35:20:6a:19:8d:c0:8f:ff:94:8f:04:
1c:87:32:35:4c:9b:19:48:60:1c:17:ab:b0:9e:43:
4e:2b:30:b1:50:3b:23:81:63:0d:85:fe:ed:17:c3:
a2:4b:02:97:17:38:a8:3d:d3:6d:ba:8b:46:15:b6:
88:b2:9c:cb:da:4c:ab:2a:83:20:78:ad:d3:cf:d2:
10:dd:bb:b7:20:34:93:94:f2:5f:01:39:48:8a:7c:
47:1e:e2:31:5d:91:2c:52:13:64:22:8c:69:77:4d:
eb:9d:31:e5:e5:e1:cf:ac:76:16:2b:e9:38:f9:71:
8b:e0:53:41:b4:54:c2:3b:c6:d2:5a:5d:6a:0e:75:
d0:70:2e:44:ea:e1:71:df:66:3a:f7:90:00:23:9e:
d9:fe:8b:0d:2d:0f:64:2f:b4:0b:61:b0:09:56:b9:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:BC:01:BD:79:5F:03:0C:3A:83:CF:8C:CB:1E:37:17:4C:B7:05
X509v3 Authority Key Identifier:
keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/6880FA2C59D211EAB77C8C13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.176.0/22
103.4.72.0/22
113.197.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:ad:b3:1f:0a:8d:b3:8c:e6:b9:ec:43:4b:c4:64:79:f2:51:
ba:1c:d7:ae:71:02:cd:9f:85:b2:17:89:ec:88:cf:bc:6b:76:
4f:f1:88:b5:3a:42:f8:45:5b:03:8f:cd:64:49:ca:a8:b6:34:
fa:13:2d:4f:85:07:34:92:17:c0:37:96:a4:e0:73:a6:9e:4d:
04:3a:8e:18:c6:d3:33:64:bc:63:24:ea:56:ba:d9:36:a3:04:
53:18:a4:4c:43:92:a8:3b:64:31:9d:0d:e4:a6:bf:0e:f0:51:
9d:79:f9:03:4d:7c:27:48:42:7e:8d:06:32:50:03:66:a2:00:
3b:f6:a0:61:aa:15:37:11:46:e6:f9:92:98:1f:67:03:41:8e:
36:ce:84:e2:0a:89:31:36:34:66:b0:8f:e9:51:4f:31:bc:67:
8a:83:85:92:fe:ff:48:25:2f:55:15:1a:0c:9c:83:a8:0d:86:
63:fc:e0:f5:b0:01:4f:30:b8:57:e5:90:e9:c3:ab:6c:2b:f9:
07:4a:b2:47:63:0a:da:fa:23:40:3d:7f:cc:b3:d2:c4:5b:d8:
2c:b1:e4:99:8f:7b:d3:c5:ac:a7:43:4e:73:7f:48:1a:3d:26:
44:e4:d1:04:7b:e5:d3:76:11:00:16:7d:5c:b6:b8:60:a4:98:
f9:60:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:56:25 2026 by rpki-client