
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa
File: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (raw, json)
Hash identifier: FK5yNx0Zju78inYHJZWj8IN7ADGrj2pD7r0/+Xwwns4=
Subject key identifier: 05:E1:5A:49:8D:4A:55:11:B3:F2:23:CE:0E:C6:24:87:EF:99:3B:E7
Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Certificate serial: 03D5
Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa
Signing time: Sat 31 Jan 2026 00:21:38 +0000
ROA not before: Sat 31 Jan 2026 00:21:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 136240
IP address blocks: 103.84.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981 (0x3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Validity
Not Before: Jan 31 00:21:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697d4b11-c009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:2b:9a:61:e7:2a:43:cc:98:36:a0:0b:d6:
67:71:a7:ce:45:a0:da:7b:c3:98:42:07:57:6e:e4:
43:81:2d:1b:5d:56:b9:88:c2:0a:56:85:d0:5a:ab:
c1:7d:f3:5c:0e:e6:37:b5:a9:f0:22:86:2f:df:30:
9b:7e:58:7a:fa:39:75:54:31:14:1d:c0:20:75:d1:
c4:81:db:9c:30:ce:32:c1:63:36:95:e8:47:01:6d:
02:12:57:92:d4:8a:18:4d:e9:22:42:eb:d1:8b:1b:
b4:6e:d5:55:82:84:7a:a3:00:c7:ef:a2:53:6b:36:
8d:27:67:36:41:53:b5:06:bd:c1:d0:a1:c2:70:d4:
a3:e0:87:c5:e9:8c:52:6f:5c:2f:6a:69:89:64:0c:
4e:c2:01:91:ec:03:3b:1d:b8:ee:8c:0c:45:3f:49:
22:9e:c6:03:e7:c5:b6:f8:d9:ef:00:4b:7e:e2:b0:
20:83:30:d6:67:66:53:8b:1e:8c:c9:39:90:8b:b1:
6a:97:99:e6:92:b1:b6:0d:52:3f:f5:23:52:2d:80:
57:30:54:46:12:ed:2a:92:9c:32:76:d0:b9:66:7c:
d8:73:b0:88:77:78:19:2f:d6:f0:6b:44:a8:20:9f:
f7:63:c1:11:43:45:8f:6b:e2:83:ee:43:69:a7:a8:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:5A:49:8D:4A:55:11:B3:F2:23:CE:0E:C6:24:87:EF:99:3B:E7
X509v3 Authority Key Identifier:
keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4e:1d:9d:58:0e:73:a5:86:7c:14:8b:8b:ed:7b:9e:4c:1b:
cb:d4:af:2b:86:7a:d6:ac:70:71:26:2f:2f:74:3a:d3:9c:30:
f8:f3:ed:52:ae:23:b4:26:7a:d5:09:82:48:0a:61:0a:1d:39:
87:e5:cf:38:e7:fd:b8:b7:7c:81:ea:20:e2:30:18:ff:55:b1:
0d:5c:ba:f6:d1:43:2b:51:48:e5:37:48:41:86:87:2d:84:2f:
34:5d:bd:eb:91:9d:74:36:02:95:5c:07:af:e2:f2:05:cb:bc:
91:f9:3f:97:66:27:4b:36:75:35:6d:c4:7b:94:64:59:ed:6b:
a9:f1:60:c2:99:23:29:30:ef:94:83:7a:8b:00:eb:bf:56:0e:
e3:f1:a1:35:b6:94:1f:1a:a5:e4:92:a3:07:3a:e0:93:66:c1:
57:05:1e:76:f9:96:6f:be:61:65:1f:75:0c:8e:7e:59:cc:fe:
14:9d:a1:f6:99:6e:81:f8:64:45:1d:a0:f2:ce:f1:20:1e:b6:
a5:15:e1:77:28:58:a8:86:c1:ab:b3:6e:1d:a7:86:05:81:24:
90:e6:a2:81:9f:2d:f8:a7:af:35:ea:bf:d1:32:8c:eb:b2:5d:
cf:66:54:99:a0:b2:1d:51:77:37:56:bb:cf:09:73:2d:70:7d:
ca:a5:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:32:21 2026 by rpki-client