
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa
File: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (raw, json)
Hash identifier: FBRWrNJf6OdKp91SzfDl7S7IM0rMuqcc821hyRfBDRE=
Subject key identifier: 19:D7:FD:8F:FF:0E:04:F7:9E:47:13:9E:83:F6:9E:3A:21:7F:93:F5
Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial: 050F
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa
Signing time: Fri 30 Jan 2026 23:20:11 +0000
ROA not before: Fri 30 Jan 2026 23:20:11 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 137453
IP address blocks: 103.175.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1295 (0x50f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Validity
Not Before: Jan 30 23:20:11 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=697d3cab-016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:a8:05:1c:ba:45:b5:37:c2:67:44:56:d7:
af:76:9b:b5:be:16:6e:0c:0e:f2:26:1c:88:ea:ec:
19:e5:3a:3e:6d:15:71:f3:8f:ee:d9:16:07:f9:63:
88:2f:0f:1f:8a:1f:74:e4:34:6a:93:21:d4:47:e0:
a9:0d:be:23:fc:9e:13:8c:c7:0e:ab:31:b9:76:e6:
d4:df:a3:19:65:ad:b5:dd:a0:c1:ec:49:c6:e1:a2:
42:55:45:ba:79:14:d6:f1:6f:72:e6:a9:e4:a4:41:
93:9c:ba:a4:57:58:0e:25:22:52:49:59:29:73:a1:
ee:5e:01:2f:b7:12:91:78:c8:a2:76:d5:70:e7:8f:
6b:76:db:5d:de:26:ec:af:9d:a8:2c:95:83:8e:9e:
5a:38:8a:98:0f:df:9e:12:43:77:bf:11:ab:3c:e5:
7d:95:52:8c:e3:18:88:c7:37:db:04:c1:e9:ed:b5:
2e:94:1f:69:44:ca:0e:34:c2:d9:ef:fe:80:eb:fc:
ae:bc:67:b5:5e:53:b8:e6:75:6b:3e:05:6e:9c:30:
77:07:56:9b:6a:5c:cd:64:8d:91:47:cd:f2:4b:7e:
39:76:7c:7a:b6:ed:24:e6:04:db:8d:1b:dc:4f:48:
f0:96:81:c6:1f:70:88:e7:0b:45:79:30:7b:78:af:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D7:FD:8F:FF:0E:04:F7:9E:47:13:9E:83:F6:9E:3A:21:7F:93:F5
X509v3 Authority Key Identifier:
keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.245.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cb:2c:e9:20:17:d7:f6:c0:cf:ec:cb:24:bb:73:aa:da:12:
09:e7:e3:c6:73:1d:19:3f:a4:21:3e:f4:94:3f:24:b5:f2:a9:
e7:4d:f8:15:2b:fb:f4:78:d3:fa:9d:a2:cb:45:3b:06:e9:56:
a2:c5:01:69:48:1e:db:dc:58:2d:4d:ed:de:7f:a5:75:99:ea:
8f:c2:fb:a9:c1:6c:39:8d:e0:bb:84:b8:03:98:83:5e:67:d5:
88:8f:ee:21:50:44:9c:ef:ca:98:27:e4:0d:2e:15:dc:2f:6b:
0c:b9:c0:05:ec:f6:52:83:a7:4e:6e:c1:b0:b8:61:77:9b:15:
fc:47:1c:f7:81:6c:bf:51:b7:e2:49:9b:ea:ae:f2:d4:8c:3d:
fa:d6:c7:41:28:a8:6f:f9:51:74:29:0a:a6:f3:4d:62:7a:29:
f7:ce:d3:60:24:c7:e4:3f:de:06:ee:98:3e:e0:4a:17:75:d1:
fa:ec:69:e9:6f:7b:26:88:03:07:91:71:50:fc:27:6a:2b:d0:
6b:75:3c:be:e8:57:c1:0d:cc:af:de:59:ee:08:20:69:22:aa:
d8:9f:8f:a4:b1:ff:d8:3b:9c:fd:a5:e8:7f:4a:c6:65:97:ba:
95:b2:d7:60:bc:40:10:b1:e6:28:58:49:f3:7e:91:86:c0:0a:
42:25:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:30:35 2026 by rpki-client