
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
File: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (raw, json)
Hash identifier: zQjPG1I4Lh7X5QX0VSV9qfh+q619fUb5OgdeNTRcrBk=
Subject key identifier: 6A:B2:13:CB:45:1C:A1:CF:32:13:15:A7:13:49:BB:6B:ED:7B:CD:96
Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial: 013A
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
Signing time: Mon 09 Feb 2026 05:24:18 +0000
ROA not before: Mon 09 Feb 2026 05:24:18 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140065
IP address blocks: 103.147.223.0/24 maxlen: 24
103.164.2.0/24 maxlen: 24
203.17.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Validity
Not Before: Feb 9 05:24:18 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69896f82-4cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:66:40:89:1f:dd:31:d2:48:d3:2e:7e:3a:
33:7c:be:2c:c7:76:c6:59:ef:d0:bf:ac:9b:58:d4:
f7:a5:58:d9:f7:dc:d5:81:be:95:2c:54:43:96:8d:
cf:83:79:ba:b7:5e:a6:1b:57:c3:3a:78:2b:62:08:
ce:5a:a2:86:2c:2e:c9:ed:b7:87:58:b3:e2:64:5e:
d6:98:0f:26:0e:49:22:33:eb:ad:a0:65:c7:1e:99:
9f:73:04:82:9c:ad:61:d7:2a:de:c6:52:a0:7b:0c:
a1:8f:89:c4:65:35:73:bd:86:14:84:b7:b4:5e:f9:
a5:26:5f:41:70:09:42:86:d7:0d:c1:f7:57:b1:37:
f2:64:ff:39:15:34:4c:75:a4:1a:05:3e:cc:a3:e0:
c2:dc:f3:93:aa:34:af:33:7e:01:35:8a:d5:a9:c9:
69:ff:7e:bc:26:e9:04:78:b1:31:8a:3b:2d:fb:09:
7d:b6:ec:61:e5:3e:80:f8:bd:d5:86:48:bb:38:ea:
37:ce:f6:6c:56:ba:17:dc:7c:d4:5a:ac:df:3d:22:
f0:e6:b4:eb:7f:e0:4d:07:0d:bb:17:ea:fd:9f:11:
d1:9f:e3:3a:09:0e:45:71:cd:76:90:c0:b7:a4:05:
36:14:1e:56:b7:67:1c:6e:89:90:b2:8f:c5:a9:f7:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B2:13:CB:45:1C:A1:CF:32:13:15:A7:13:49:BB:6B:ED:7B:CD:96
X509v3 Authority Key Identifier:
keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.223.0/24
103.164.2.0/24
203.17.240.0/22
Signature Algorithm: sha256WithRSAEncryption
12:56:12:12:f1:4f:9e:22:1e:d3:d5:a4:89:93:dd:0d:82:d4:
76:4c:ce:d0:af:dc:47:ff:13:5a:5c:a3:f3:e8:0d:14:e4:dc:
f4:4f:a3:c9:62:19:fc:1f:6c:7f:c3:77:13:bc:70:ad:a4:88:
ec:15:b7:f7:a2:97:c7:98:00:94:b3:88:12:5a:0f:98:2d:01:
9c:98:16:00:b4:3f:c5:4d:c7:33:b2:71:d2:88:58:f8:73:3b:
25:a7:26:6f:6a:b1:db:ff:c0:f4:97:48:01:1e:69:3a:d7:3d:
04:2d:e8:c0:d0:4b:2b:cf:1a:e2:0d:8c:f7:14:f2:59:cb:4d:
97:68:5a:6f:28:66:ce:b7:d3:7f:8d:74:0f:69:13:9e:1a:5a:
c7:a7:ac:97:a5:93:86:2a:9e:7f:bd:04:a3:5d:74:5e:c2:bf:
a0:31:a2:55:38:ff:e6:c0:4d:1c:0d:d6:ae:0e:bc:6e:24:f5:
08:fd:54:95:b3:61:da:99:61:70:95:7b:81:25:36:dc:c4:2e:
38:43:3a:68:af:81:8a:b9:fa:ca:dd:5c:b0:3a:2b:e5:57:55:
86:93:6f:07:d5:ac:8a:9d:11:7d:3b:c0:f3:59:f2:5c:73:fe:
fc:5c:f3:a3:41:88:65:ae:e6:79:d7:bc:f9:10:30:e3:f3:59:
9f:10:f7:eb
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB
N0Y4RDcxRTcwHhcNMjYwMjA5MDUyNDE4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg5NmY4Mi00Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGRmQIkf3THSSNMufjozfL4sx3bGWe/Qv6ybWNT3pVjZ99zVgb6VLFRDlo3P
g3m6t16mG1fDOngrYgjOWqKGLC7J7beHWLPiZF7WmA8mDkkiM+utoGXHHpmfcwSC
nK1h1yrexlKgewyhj4nEZTVzvYYUhLe0XvmlJl9BcAlChtcNwfdXsTfyZP85FTRM
daQaBT7Mo+DC3POTqjSvM34BNYrVqclp/368JukEeLExijst+wl9tuxh5T6A+L3V
hki7OOo3zvZsVroX3HzUWqzfPSLw5rTrf+BNBw27F+r9nxHRn+M6CQ5Fcc12kMC3
pAU2FB5Wt2ccbomQso/FqfeY3QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGqyE8tF
HKHPMhMVpxNJu2vte82WMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0
NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTNDNzYvQjQ5OTJENTIzNDU4MTFFRkI0MkY5RDM3QzRGOUFFMDIvNTFCQkVFMTBC
MkJFMTFFRkExMDg5NDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABnk98DBABnpAIDBALLEfAwDQYJKoZIhvcNAQELBQADggEB
ABJWEhLxT54iHtPVpImT3Q2C1HZMztCv3Ef/E1pco/PoDRTk3PRPo8liGfwfbH/D
dxO8cK2kiOwVt/eil8eYAJSziBJaD5gtAZyYFgC0P8VNxzOycdKIWPhzOyWnJm9q
sdv/wPSXSAEeaTrXPQQt6MDQSyvPGuINjPcU8lnLTZdoWm8oZs6303+NdA9pE54a
WsenrJelk4Yqnn+9BKNddF7Cv6AxolU4/+bATRwN1q4OvG4k9Qj9VJWzYdqZYXCV
e4ElNtzELjhDOmivgYq5+srdXLA6K+VXVYaTbwfVrIqdEX07wPNZ8lxz/vxc86NB
iGWu5nnXvPkQMOPzWZ8Q9+s=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:33 2026 by rpki-client