
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/AF7700B2B52A11EAB9426C7DC4F9AE02.roa
File: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (raw, json)
Hash identifier: BeGrC5mJSgW0geDJyC0tfvb5uk3Luu/Jt19BeOwKBXI=
Subject key identifier: A6:BE:60:65:9E:A9:D8:6A:D9:83:38:D7:AB:B4:14:78:D8:F8:4A:6B
Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial: 1BAB
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/AF7700B2B52A11EAB9426C7DC4F9AE02.roa
Signing time: Tue 10 Feb 2026 16:13:50 +0000
ROA not before: Tue 10 Feb 2026 16:13:50 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133854
IP address blocks: 103.81.204.0/24 maxlen: 24
103.81.205.0/24 maxlen: 24
103.81.206.0/24 maxlen: 24
202.144.200.0/24 maxlen: 24
202.144.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7083 (0x1bab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Validity
Not Before: Feb 10 16:13:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=698b593e-266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:cf:86:ef:90:b1:05:3f:7c:24:20:7e:e6:
2e:e1:70:26:64:d4:99:e8:e3:f4:17:8f:51:f5:dd:
8d:d6:fa:3c:63:e7:1b:82:a7:75:1e:2c:5f:1a:bc:
3a:84:77:ec:66:77:8c:a9:ae:96:92:41:07:69:f3:
ba:8e:40:9d:52:71:cb:97:71:0d:0d:c2:0e:4b:fa:
7e:95:00:83:7c:c4:dd:61:11:e0:89:1e:a4:eb:76:
0d:c6:de:7d:7a:4a:ee:ac:81:d0:45:88:80:8a:ba:
f8:39:6f:29:79:21:70:6c:1c:a2:f7:02:87:53:25:
91:97:f7:a2:d4:af:ee:eb:1a:4f:7a:81:6e:aa:8c:
96:3a:a2:3d:5d:8e:fb:72:3d:ec:12:f1:6a:5c:e7:
ae:b4:a1:12:20:19:06:05:0f:3d:fb:fc:d3:da:03:
5b:28:77:7e:ab:ab:15:4c:c2:d9:83:9b:f9:49:2a:
9d:f3:7f:ff:f6:8c:c9:99:18:b2:4d:8e:6e:c3:54:
2a:f5:34:fd:d5:70:7a:60:a0:9c:f3:3c:4a:52:bb:
20:45:3b:73:91:3e:0d:2a:01:aa:0c:41:18:30:35:
46:98:ce:25:af:e3:25:37:4a:3d:79:17:15:61:05:
e8:70:03:79:26:7d:23:2b:8b:cf:d8:25:d8:68:14:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BE:60:65:9E:A9:D8:6A:D9:83:38:D7:AB:B4:14:78:D8:F8:4A:6B
X509v3 Authority Key Identifier:
keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/AF7700B2B52A11EAB9426C7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.204.0-103.81.206.255
202.144.200.0/24
202.144.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:41:a6:1d:6c:1e:db:8e:37:b1:30:4d:6a:0e:95:3e:58:b3:
b5:fb:23:2c:7a:55:5d:95:45:14:26:3a:4a:ad:44:14:05:81:
c9:64:2c:7f:7b:cc:75:e0:19:3f:6f:ac:31:52:c8:3e:3b:63:
53:bd:d2:3f:15:0b:34:62:62:07:46:b9:2d:d7:cf:19:b2:a3:
5a:c3:03:2d:34:8d:af:ee:cb:ce:47:f8:bd:13:e3:2b:34:eb:
25:31:27:b4:a4:22:ea:59:50:f8:08:ad:a1:2b:8a:e2:74:25:
5e:dc:b1:0d:56:bb:b5:8d:fa:4c:82:78:d8:8f:8f:c4:66:fe:
ea:06:51:e8:b5:6e:6a:9d:88:37:48:d8:a7:6e:1e:09:cc:68:
da:57:df:70:67:97:99:b3:03:9f:81:01:d9:b4:f0:54:a1:3d:
10:45:03:2e:85:6c:aa:9a:c8:9b:96:3e:a2:60:b2:7c:82:2e:
0d:df:3e:17:50:2d:c9:08:5e:66:54:96:f9:8e:af:56:fa:1a:
8b:f9:70:3d:d8:fd:00:15:e0:98:ef:c4:4e:eb:6e:13:41:9c:
24:90:1f:37:71:c2:bf:15:da:9d:bd:3e:1a:25:0a:e7:d7:2b:
61:e2:4c:c9:18:d2:0b:22:fa:78:d5:b4:a3:ff:a0:4b:b0:ad:
67:78:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:14 2026 by rpki-client