
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
File: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (raw, json)
Hash identifier: V1DI/9mBxy1BlPs2TT3yx8NsXkHJzBliTwoAN9ceLj0=
Subject key identifier: 9E:3E:75:EA:BA:E4:2C:1B:F6:24:E5:B7:F4:51:BE:1F:E0:2F:D0:8A
Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial: 079F
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
Signing time: Fri 30 Jan 2026 21:18:36 +0000
ROA not before: Fri 30 Jan 2026 21:18:36 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 141447
IP address blocks: 103.159.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951 (0x79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Validity
Not Before: Jan 30 21:18:36 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=697d202c-1847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:c6:14:e8:62:8f:4e:65:64:f9:58:3a:a3:
76:1b:d3:5a:16:77:8f:7b:6e:20:d5:75:97:21:ac:
59:fc:c2:bc:21:7a:3f:76:ee:19:1e:d7:3b:03:c2:
dd:96:96:44:77:f6:70:8e:79:5a:1a:f5:af:6e:19:
2c:cc:93:3e:cd:b9:60:a7:b4:a7:06:a8:dc:3e:56:
02:3e:3c:0d:46:dc:b6:63:ed:1f:91:4c:8b:b1:e0:
72:8c:9e:41:b1:7f:89:ff:90:f9:d7:85:ac:11:1e:
3f:0f:ed:6b:5e:99:b6:f1:50:22:57:e2:43:53:b1:
33:10:04:73:dd:d7:6a:28:43:7b:f8:ae:44:e0:f9:
33:8f:74:46:33:e3:64:1a:32:90:8e:99:bb:fd:d6:
e1:6c:19:6c:fa:f1:d3:65:89:d1:76:b7:c9:bb:8a:
fa:48:76:5f:76:84:61:6c:71:84:b9:27:32:12:58:
f1:62:65:ed:fa:0e:e0:e3:d6:63:62:b2:17:1d:69:
c9:8b:b5:8b:36:11:3c:bf:c5:7e:47:7d:dc:3a:c5:
3c:d8:76:0f:93:2a:5f:e2:98:e6:cd:c2:cf:70:0e:
fd:93:81:ec:02:14:88:92:f2:d7:c2:73:dc:cd:60:
f4:77:08:d1:f5:b6:23:fb:5c:cf:06:15:83:c5:d4:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:75:EA:BA:E4:2C:1B:F6:24:E5:B7:F4:51:BE:1F:E0:2F:D0:8A
X509v3 Authority Key Identifier:
keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.163.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b7:e3:90:4f:0c:69:b6:4a:33:05:d6:47:cb:f0:d9:c3:b2:
7a:d7:db:93:16:28:79:68:64:14:df:b5:f7:b7:92:6a:ef:30:
c1:68:fa:95:ba:55:1c:65:68:72:da:7a:aa:a1:ad:cf:6e:d9:
75:c9:fd:b9:b8:7a:82:9d:d1:cb:fc:7c:c0:59:cc:2f:ea:ec:
2d:c0:0d:a6:6f:17:a2:20:5a:c5:17:5d:90:71:5e:c2:94:a6:
bb:03:8d:24:c5:bb:23:0e:35:dc:11:98:63:4c:60:36:2c:d2:
8c:d6:e6:32:ed:c3:c7:97:fe:74:28:99:72:45:e6:45:11:be:
99:1f:b4:89:4a:ff:d4:1a:18:ad:8f:f0:bc:27:57:a9:1a:3c:
19:67:c5:28:13:8f:10:8f:a6:50:ba:98:87:13:c5:72:10:85:
9a:0a:0f:a1:05:d0:98:e9:21:36:58:08:51:b3:77:41:86:57:
8b:9d:a8:e0:5b:12:be:75:76:a1:20:0c:83:75:98:60:95:7c:
92:b4:99:43:14:9d:71:10:84:63:44:f0:42:fb:82:16:30:33:
2b:02:21:de:c1:82:d1:2c:5a:30:73:20:f9:e8:81:98:5e:1c:
5e:ce:7e:49:1f:45:0e:0f:c2:b3:36:38:0a:ce:ba:ae:be:57:
8f:83:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:15 2026 by rpki-client