
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa
File: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (raw, json)
Hash identifier: HiFjTLozZCcVNUflSCdlWmzWz8aOoc3HnrFxSFDUOAI=
Subject key identifier: 60:EB:A1:BF:4F:A5:71:D2:F5:02:EB:DD:6E:15:2F:C7:1D:73:42:47
Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial: 1BAE
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa
Signing time: Tue 10 Feb 2026 16:13:53 +0000
ROA not before: Tue 10 Feb 2026 16:13:53 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137483
IP address blocks: 202.144.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7086 (0x1bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Validity
Not Before: Feb 10 16:13:53 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=698b5941-e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:81:af:d4:d3:66:72:9e:84:83:63:54:79:
80:f3:d5:19:72:ea:87:d6:ed:fa:4f:56:ac:11:d7:
33:4e:22:fa:2e:c9:92:cc:f2:ce:54:e5:99:9a:a6:
4a:7b:bf:c1:2e:bd:27:5a:0d:fc:c3:59:66:17:a2:
fb:0b:d7:79:82:93:64:c6:bb:8b:de:c2:b3:78:7c:
d9:fa:70:99:20:5b:49:2f:05:e8:f0:95:f6:41:e9:
ef:c2:51:66:f8:e8:33:e1:9a:6d:55:f2:c8:e6:55:
ee:f5:fb:6c:95:50:81:4b:19:cf:08:f5:3b:05:05:
d3:87:41:9a:c0:7f:05:44:fd:1a:e8:bd:f7:aa:03:
21:27:23:33:76:24:3d:eb:1c:ff:55:88:9b:21:98:
03:35:31:13:ae:01:a9:ad:42:83:70:c5:c6:fa:84:
e6:d8:68:58:69:e2:eb:63:d5:03:8d:67:5a:ea:3c:
2b:91:c5:d6:86:6c:1d:3a:a8:b6:36:70:bf:98:1f:
fd:f1:63:a5:4e:36:27:23:62:9a:af:4d:93:99:68:
6d:bf:32:b6:d9:12:e2:23:28:83:53:e5:5f:e8:bf:
96:3f:80:45:16:40:49:2b:33:e3:60:d6:6a:14:5e:
05:8e:b8:62:af:8c:d6:66:23:a2:6b:09:9d:9f:c8:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:A1:BF:4F:A5:71:D2:F5:02:EB:DD:6E:15:2F:C7:1D:73:42:47
X509v3 Authority Key Identifier:
keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.144.201.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b1:c9:f7:5f:55:40:ab:d7:04:23:c6:c0:cb:4a:12:0e:e9:
03:c8:d6:1f:ad:ea:c5:72:d5:9c:9d:fd:e9:e2:cb:56:89:9a:
a2:bf:8e:90:2b:e9:0b:b4:07:a1:00:ee:5c:c6:e6:35:e7:5a:
15:2d:03:0c:7d:b3:b8:ba:42:b2:7f:df:74:26:d3:08:58:20:
e3:65:39:fc:b3:e0:80:b3:fe:9d:72:61:aa:70:8f:51:02:16:
69:b3:e7:3a:64:eb:bb:98:db:5d:4a:f5:3d:c5:61:14:5c:e6:
54:b4:61:8e:0f:24:eb:83:19:51:92:85:dd:55:b9:11:f8:00:
78:de:b7:df:75:0b:31:ef:1b:71:d3:fb:87:ba:52:08:b0:6f:
6c:32:8e:fe:07:29:f6:b5:93:90:2f:98:7b:ed:a0:e7:0f:5e:
af:f0:b8:de:63:91:99:bb:e7:27:90:a5:9b:5d:ff:8b:1d:8c:
00:c3:88:dc:f8:3e:d0:ab:96:fe:35:4f:c5:0c:81:8a:61:4c:
94:42:96:29:c5:e8:48:89:ba:24:19:9b:d4:be:a5:d5:b4:2e:
ca:6f:6e:73:dc:ce:53:96:a6:fa:94:4e:fd:c0:71:68:61:ee:
e7:b0:80:22:4f:71:e0:d6:b2:0e:46:8f:dc:c6:8b:18:3e:d1:
de:7a:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:26 2026 by rpki-client