
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa
File: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (raw, json)
Hash identifier: M6pucHFMXfG0koXLLg4E/7INSEC19wV7hM909Gs8BUM=
Subject key identifier: C5:49:13:E2:AD:8F:67:4F:DE:91:B8:11:98:1A:40:FB:1C:46:A1:C8
Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Certificate serial: 0CA1
Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa
Signing time: Wed 28 Jan 2026 19:15:45 +0000
ROA not before: Wed 28 Jan 2026 19:15:45 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38565
IP address blocks: 36.252.0.0/15 maxlen: 23
36.253.19.0/24 maxlen: 24
36.253.24.0/24 maxlen: 24
36.253.26.0/24 maxlen: 24
43.243.96.0/22 maxlen: 24
49.126.0.0/16 maxlen: 20
103.38.196.0/22 maxlen: 24
116.68.208.0/21 maxlen: 24
2400:9500::/32 maxlen: 32
2400:9500:4000::/36 maxlen: 44
2400:9500:6000::/36 maxlen: 44
2400:9500:8000::/36 maxlen: 44
2400:9500:c000::/36 maxlen: 44
2400:9500:e000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3233 (0xca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Validity
Not Before: Jan 28 19:15:45 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=697a6061-72b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:af:1e:12:ee:fb:8c:fa:88:9a:e4:17:07:
dc:04:1b:51:a3:bb:8a:d5:a0:f5:e5:31:96:13:91:
3f:b5:90:7f:b8:51:95:e6:12:86:61:1e:bb:7c:ec:
b8:28:40:f0:22:26:48:1b:b8:1b:0e:35:a0:19:55:
ec:4a:0f:08:04:e0:f0:39:4e:41:97:8b:69:1c:da:
68:96:05:75:6d:16:6d:2f:38:19:51:2d:37:67:be:
9a:8f:66:65:0d:93:36:43:2a:90:37:25:e5:39:81:
bd:e8:fc:8b:4f:73:4d:a6:bf:e3:89:bd:69:a4:2a:
c5:fd:23:ad:6f:26:c5:d5:6a:85:97:fa:90:4b:e7:
30:4e:56:6d:20:8d:e4:a8:45:90:4b:4d:f5:67:3d:
13:d9:c8:3f:a6:11:d3:50:7d:ed:13:b5:44:7c:c9:
90:03:16:e2:57:aa:b4:95:9c:17:a2:f2:9b:04:f5:
45:67:d7:d8:99:92:6e:18:0b:71:3a:d0:3f:63:51:
38:e4:db:b7:1c:c7:5c:6e:62:4f:f2:79:d5:6b:3a:
35:2c:a4:f5:0b:74:f1:37:0c:04:5f:95:fa:ae:0a:
46:c7:8e:52:9d:b3:90:dc:5e:c1:4d:f7:9f:0d:e8:
8d:85:f6:fd:bb:ce:09:cb:06:a9:fc:e5:b7:d8:b8:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:49:13:E2:AD:8F:67:4F:DE:91:B8:11:98:1A:40:FB:1C:46:A1:C8
X509v3 Authority Key Identifier:
keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.252.0.0/15
43.243.96.0/22
49.126.0.0/16
103.38.196.0/22
116.68.208.0/21
IPv6:
2400:9500::/32
Signature Algorithm: sha256WithRSAEncryption
b0:fd:bd:13:36:6f:ef:0a:69:64:a5:ae:d2:cd:0c:63:f1:47:
09:8e:ed:b1:0b:f8:61:40:89:89:dd:d1:1d:54:96:8a:fa:82:
c2:60:f8:73:ec:32:a8:6b:f8:7f:42:52:e6:30:a0:1b:3b:80:
bb:4d:4a:11:43:d3:2c:91:d6:ac:d6:d0:28:88:cc:b5:a0:d5:
7d:92:d9:ca:48:b1:da:82:15:c8:ec:ec:08:60:d6:58:81:81:
33:c8:0f:e0:44:53:e6:bf:c3:8d:07:0f:42:f9:17:f9:dd:f5:
7d:e0:6e:13:7d:13:53:7b:06:23:51:87:f1:d1:a6:35:ad:16:
94:41:b4:55:c8:93:4f:d9:d6:35:81:4c:dd:6c:c5:f0:fb:1d:
c5:4c:b9:20:42:80:cc:fb:5d:de:6f:34:79:91:39:5f:1a:7e:
f8:b1:3e:b5:cf:7d:d1:78:07:e7:f1:23:45:4a:51:07:d2:3e:
b7:e0:33:8f:ec:4a:4c:e0:f7:e8:c2:64:c4:0c:9c:fe:97:79:
b4:ec:d4:2e:27:68:2d:64:3d:df:d9:8c:82:3c:8d:90:2d:c9:
e5:f5:c3:e4:16:e6:62:8c:24:16:00:1b:eb:b4:93:38:75:26:
94:90:35:01:ec:66:f5:db:ef:b0:99:16:f4:bd:87:61:8a:56:
ad:01:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:59 2026 by rpki-client