
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa
File: C98708BE477711EBB4044E31C4F9AE02.roa (raw, json)
Hash identifier: rfB6cKoGstk7sIp1asdLZKTU/mLRnkq24gAeVkCxYNw=
Subject key identifier: 25:A2:63:24:F5:E2:A7:E7:6F:09:20:69:E0:23:F8:6B:B1:60:01:1B
Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial: 1C16
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa
Signing time: Mon 02 Feb 2026 16:13:54 +0000
ROA not before: Mon 02 Feb 2026 16:13:53 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 24220
IP address blocks: 116.66.160.0/20 maxlen: 20
116.66.160.0/20 maxlen: 24
116.66.160.0/23 maxlen: 24
116.66.162.0/23 maxlen: 24
116.66.164.0/22 maxlen: 24
116.66.168.0/23 maxlen: 24
116.66.170.0/23 maxlen: 24
116.66.172.0/23 maxlen: 24
116.66.174.0/23 maxlen: 24
2402:d800::/32 maxlen: 33
2402:d800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7190 (0x1c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
Validity
Not Before: Feb 2 16:13:53 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6980cd41-86de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:c2:bc:06:7a:a9:e4:cd:f7:45:e2:fa:8f:
a9:d6:9a:58:bd:c4:94:0b:7e:e1:c7:94:35:ec:06:
41:c6:c0:47:fe:8a:38:1a:15:ed:45:c4:0a:41:a5:
dd:1f:70:50:ab:b8:8e:df:44:4e:38:a2:95:c9:1d:
97:cd:0b:31:55:2f:7a:e2:b6:37:45:36:20:e8:45:
75:99:e9:c5:c0:14:61:f6:23:d0:dd:b7:59:74:74:
ed:4d:ae:f7:87:4f:45:f1:8b:e0:fa:e8:d7:84:4c:
c7:f0:57:03:ea:83:c5:88:cf:9d:5b:da:7a:8d:44:
25:83:98:1a:a4:67:b2:02:6a:d9:f4:cd:dc:c7:76:
01:ae:65:97:7e:04:9d:e4:44:cb:ba:bf:cb:25:8b:
68:e0:38:93:45:48:16:f7:a8:08:9a:3f:17:ea:43:
35:9a:3a:ca:04:48:4a:56:20:7f:79:6f:01:b2:37:
a8:78:a3:a8:ff:e6:2c:c3:84:39:47:94:5d:10:d9:
7a:e8:ac:90:fc:c8:be:18:ef:fe:a0:2b:aa:42:a8:
21:4a:a0:0f:69:48:9b:cb:86:f0:ca:43:9a:00:6e:
74:aa:fb:87:f2:8b:4e:e5:d3:a3:7b:41:98:e4:80:
94:bb:84:01:80:bc:5b:d1:20:ba:73:35:ee:a2:f9:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:63:24:F5:E2:A7:E7:6F:09:20:69:E0:23:F8:6B:B1:60:01:1B
X509v3 Authority Key Identifier:
keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.66.160.0/20
IPv6:
2402:d800::/32
Signature Algorithm: sha256WithRSAEncryption
b7:9e:2f:ed:c8:f4:aa:95:a0:6c:6d:eb:06:8d:de:a7:ab:48:
78:65:35:ef:94:10:0c:23:41:f0:14:4c:9d:02:00:10:d9:f2:
77:8f:26:96:05:00:63:61:52:a5:b4:1d:76:46:e3:5e:ff:e2:
98:7d:dd:db:40:ef:35:ec:b1:06:6a:90:f2:40:12:dc:3d:82:
9e:7a:03:17:0d:6c:b5:cd:00:1c:36:9d:9e:aa:dc:e0:1f:22:
88:81:d9:ce:be:8b:94:92:f3:20:38:26:0e:06:44:d1:4b:bf:
f3:4f:3f:67:30:c0:ab:3c:fd:27:3e:75:d1:ea:90:db:6c:f9:
6e:7b:73:35:11:c3:a9:d8:b7:6f:cd:1b:d4:c6:88:f4:d4:51:
3b:ef:c6:e6:70:b8:3c:d4:df:13:d1:c3:7c:4b:5a:25:28:45:
3f:91:32:f8:cf:5f:14:1f:80:b6:71:3d:35:82:57:dd:66:d5:
1e:26:3b:a2:03:cd:f4:25:cc:d8:32:a7:6b:0f:fc:0f:94:4c:
f4:a1:e8:e5:c2:1e:b1:fb:d9:65:25:73:40:91:51:d2:1a:3f:
21:04:e5:33:7f:fe:a1:0a:86:2e:d2:cb:4d:44:f1:1b:c4:6d:
d1:88:4c:f7:c0:b1:ca:92:34:bd:d1:af:75:7c:ca:37:36:8a:
df:27:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:42 2026 by rpki-client