
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/339F0FFA9D9D11F0981B7A12C4F9AE02.roa
File: 339F0FFA9D9D11F0981B7A12C4F9AE02.roa (raw, json)
Hash identifier: mlPj9h27GHJcAlUcHuCHIYsZ7D35GZNul1E1Ft+ryUE=
Subject key identifier: 6D:96:F3:C2:31:8D:88:1B:2C:86:9D:B1:27:AF:4D:32:B5:B3:1B:6C
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: EB
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/339F0FFA9D9D11F0981B7A12C4F9AE02.roa
Signing time: Thu 19 Feb 2026 04:30:57 +0000
ROA not before: Thu 19 Feb 2026 04:30:57 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 55573
IP address blocks: 121.200.215.0/24 maxlen: 24
2405:7d80::/48 maxlen: 48
2405:7d80:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Validity
Not Before: Feb 19 04:30:57 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69969201-3647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:95:c2:f8:f7:14:02:9a:bd:75:29:d0:42:
47:d5:94:30:77:fa:d9:03:06:f4:4f:4b:6a:9c:e6:
c3:21:e5:03:28:2d:3e:84:ee:4a:66:d0:24:0c:cf:
56:93:aa:f5:10:0e:8b:90:8f:16:32:c6:b9:03:d7:
fd:c3:f6:1f:6f:83:a8:47:e0:32:33:fb:57:7d:7e:
ba:07:27:eb:8b:0b:b9:11:9c:c2:ff:85:e0:d5:a4:
44:72:6e:2f:60:c5:36:07:f3:bc:52:35:40:da:39:
cf:07:b0:8e:0e:4e:f7:31:b6:6c:25:45:32:4c:96:
e3:41:7c:88:4d:1e:5b:97:31:93:86:15:ac:23:02:
ad:09:5e:37:1a:f6:c6:fc:38:49:f8:68:5f:fa:bc:
85:b3:bd:e8:a6:04:6c:56:dc:75:b9:99:17:13:23:
45:61:52:31:56:49:6a:ba:23:60:86:7b:0e:23:86:
ca:49:29:eb:49:86:62:46:18:00:2f:19:bd:88:3d:
45:c6:bd:f8:73:ff:97:42:be:23:be:71:7f:f9:cb:
9e:3d:78:48:42:5e:0b:d1:6e:74:87:70:84:b4:fa:
e3:7f:c1:33:ab:24:9c:f7:c3:1b:9d:00:de:ed:67:
a2:a4:dd:83:80:df:55:f4:d9:48:1c:db:c0:e4:09:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:96:F3:C2:31:8D:88:1B:2C:86:9D:B1:27:AF:4D:32:B5:B3:1B:6C
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/339F0FFA9D9D11F0981B7A12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.200.215.0/24
IPv6:
2405:7d80::/48
2405:7d80:5::/48
Signature Algorithm: sha256WithRSAEncryption
51:d2:72:ed:d0:6c:c6:27:c3:14:24:6f:cf:66:1c:97:53:72:
3d:13:fe:3e:96:76:24:53:5d:7d:86:72:40:a2:6e:b1:c1:80:
7f:fe:54:89:cd:a2:74:7d:69:2b:20:27:45:48:87:93:5c:89:
09:98:52:b7:fc:90:04:23:d3:94:1e:ea:89:cb:2a:95:cd:40:
ec:ed:a6:b1:26:77:f1:4b:38:21:f9:ca:19:b3:a3:c4:a0:0b:
a7:33:4a:78:43:2b:f9:ec:5c:ce:65:4a:52:78:9c:df:95:27:
81:32:85:02:4a:17:71:45:81:58:1c:f8:68:4f:6e:bc:12:5f:
1e:b9:75:5c:73:01:02:20:d8:66:ca:77:1f:67:e9:89:ee:dc:
dd:51:f9:9e:a9:64:86:b8:17:9c:94:5c:a3:e3:a5:52:51:d5:
d9:cc:28:ec:76:be:f8:f6:95:a9:04:26:a4:9a:ec:3d:0b:ef:
c0:b2:28:99:2f:a2:74:e6:90:ad:4e:85:19:e3:ef:ef:87:7f:
ec:a6:c5:fe:9e:e7:ae:63:fd:66:0a:14:90:9c:df:89:9e:b1:
85:e2:e1:56:d3:cd:a8:4a:cd:6d:9e:19:ee:b0:55:8f:51:dd:
74:65:63:18:dd:29:fd:ea:85:36:2b:87:87:0b:f2:91:20:68:
15:cd:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:15 2026 by rpki-client