
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa
File: DEDB3932BED411EF835BB47AC4F9AE02.roa (raw, json)
Hash identifier: yvK9knQEE9/5qk9MXvg3FGC10d83BjLOLkQcXI/rfs8=
Subject key identifier: 22:A0:8E:74:9E:62:3E:CD:12:68:EF:17:40:E9:BA:E2:DC:81:4B:0D
Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Certificate serial: DB
Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa
Signing time: Sun 15 Feb 2026 06:25:10 +0000
ROA not before: Sun 15 Feb 2026 06:25:10 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133496
IP address blocks: 2001:df4:cc40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Validity
Not Before: Feb 15 06:25:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=699166c6-d6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:df:5f:0d:fa:1d:82:ac:83:38:05:53:ee:
e9:06:20:0e:41:e5:14:3f:50:9b:bb:f5:e4:d9:a2:
c5:1a:6a:9b:72:20:f1:6d:25:24:2a:95:b9:9f:03:
b9:86:a6:e8:b9:8f:d4:b4:87:8e:cd:5b:b8:52:04:
9a:b5:a9:68:c8:d7:7b:9f:d4:79:e4:17:31:8f:2a:
83:ec:93:85:20:6e:a0:a7:67:7a:69:7e:6a:13:4a:
53:c0:b5:f7:90:24:03:e7:86:5a:ea:10:8c:bf:e2:
89:73:6d:fe:be:3a:7a:e1:87:08:a2:93:eb:d9:ee:
75:cf:60:27:04:a2:3b:3b:b3:ca:56:37:db:cf:5d:
69:67:f9:6c:78:03:95:c8:14:35:b0:fc:37:79:d8:
86:24:cd:be:b9:ff:cc:c6:27:60:35:aa:3b:64:44:
54:a7:9b:af:1d:76:8b:42:b5:c0:45:52:25:1f:0c:
0b:3d:57:0e:86:62:2e:c2:fa:95:1a:08:67:9a:a6:
f4:b0:a5:14:02:49:12:33:0a:79:dc:ff:5e:36:c6:
3b:8c:d2:a4:ab:d3:a7:41:60:d8:ea:a7:eb:89:4d:
cf:d5:f5:7a:14:1f:45:21:a4:46:46:16:42:50:2a:
5a:70:db:3d:62:bf:59:f8:15:a8:86:49:49:31:cd:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A0:8E:74:9E:62:3E:CD:12:68:EF:17:40:E9:BA:E2:DC:81:4B:0D
X509v3 Authority Key Identifier:
keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:cc40::/48
Signature Algorithm: sha256WithRSAEncryption
31:7f:de:75:b3:5f:41:e9:d0:aa:68:dc:86:82:14:f6:e9:d6:
75:82:02:96:6c:ad:61:68:67:ef:43:ac:b9:79:c3:61:34:31:
5b:c4:58:3c:8d:b4:ea:1e:15:53:df:07:bc:e0:22:14:34:04:
7b:f3:73:62:21:47:37:bb:b3:07:d6:9f:ef:87:e2:6d:7d:b4:
dc:7a:56:80:c1:56:a3:e5:4c:3e:21:d1:24:38:5a:dc:08:78:
57:d2:14:f0:20:1f:bc:1c:d4:26:1e:ac:38:29:af:0f:02:4b:
e6:f6:0a:41:fb:33:0a:ba:d7:f3:ba:3c:dd:c3:14:a6:05:b3:
e8:0e:0a:51:eb:57:02:47:2c:ca:b7:72:83:a5:ca:28:29:09:
6c:bf:ba:6c:51:f4:ca:c1:2e:5a:e9:7f:7e:73:19:43:fb:9d:
56:1e:c1:97:bf:84:ea:0d:34:1f:93:2a:62:ac:9f:c1:6a:a0:
83:ba:fb:00:65:fe:23:f2:0c:e4:9a:44:8e:f1:67:40:ab:cb:
8f:b2:69:7a:ba:ac:d9:1a:e6:d4:85:44:f2:8c:28:d0:01:db:
85:9f:4d:60:77:b0:15:b2:4e:b4:a4:eb:56:57:64:29:c1:76:
57:11:ac:79:f3:85:4a:68:4a:27:ac:75:7e:a8:1d:23:c5:ce:
3f:44:72:5e
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzgzMDcxMTAvBgNVBAUTKDNERDA5NUJFN0EzQkQxREQ4MjlFMkEyNjQ5RkM3RTgx
QTdFRkUzNEMwHhcNMjYwMjE1MDYyNTEwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTkxNjZjNi1kNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJzfXw36HYKsgzgFU+7pBiAOQeUUP1Cbu/Xk2aLFGmqbciDxbSUkKpW5nwO5
hqbouY/UtIeOzVu4UgSataloyNd7n9R55BcxjyqD7JOFIG6gp2d6aX5qE0pTwLX3
kCQD54Za6hCMv+KJc23+vjp64YcIopPr2e51z2AnBKI7O7PKVjfbz11pZ/lseAOV
yBQ1sPw3ediGJM2+uf/MxidgNao7ZERUp5uvHXaLQrXARVIlHwwLPVcOhmIuwvqV
Gghnmqb0sKUUAkkSMwp53P9eNsY7jNKkq9OnQWDY6qfriU3P1fV6FB9FIaRGRhZC
UCpacNs9Yr9Z+BWohklJMc1yxQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCKgjnSe
Yj7NEmjvF0DpuuLcgUsNMB8GA1UdIwQYMBaAFD3Qlb56O9Hdgp4qJkn8foGn7+NM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODMwNy8zNDMyRjYwQ0JF
Q0QxMUVGOThDNzQxMzJDNEY5QUUwMi9QZENWdm5vNzBkMkNuaW9tU2Z4LWdhZnY0
MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BkQ1Z2bm83MGQyQ25pb21TZngtZ2FmdjQwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgzMDcvMzQzMkY2MENCRUNEMTFFRjk4Qzc0MTMyQzRGOUFFMDIvREVEQjM5MzJC
RUQ0MTFFRjgzNUJCNDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ30zEAwDQYJKoZIhvcNAQELBQADggEBADF/3nWzX0Hp
0Kpo3IaCFPbp1nWCApZsrWFoZ+9DrLl5w2E0MVvEWDyNtOoeFVPfB7zgIhQ0BHvz
c2IhRze7swfWn++H4m19tNx6VoDBVqPlTD4h0SQ4WtwIeFfSFPAgH7wc1CYerDgp
rw8CS+b2CkH7Mwq61/O6PN3DFKYFs+gOClHrVwJHLMq3coOlyigpCWy/umxR9MrB
Llrpf35zGUP7nVYewZe/hOoNNB+TKmKsn8FqoIO6+wBl/iPyDOSaRI7xZ0Cry4+y
aXq6rNka5tSFRPKMKNAB24WfTWB3sBWyTrSk61ZXZCnBdlcRrHnzhUpoSiesdX6o
HSPFzj9Ecl4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:52 2026 by rpki-client