
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa
File: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (raw, json)
Hash identifier: PEGA4OC8mv05BIyz+nUXG4RC+NNc/DMmZ+NwYP8Ecm0=
Subject key identifier: 17:25:36:25:D8:0B:3C:18:08:31:1F:4B:EE:F8:06:A2:0F:B2:37:D0
Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial: 0A7E
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa
Signing time: Wed 04 Feb 2026 19:16:48 +0000
ROA not before: Wed 04 Feb 2026 19:16:48 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136170
IP address blocks: 123.100.226.0/24 maxlen: 24
202.157.176.0/23 maxlen: 24
202.157.184.0/23 maxlen: 24
202.157.186.0/23 maxlen: 23
202.157.186.0/24 maxlen: 24
202.157.187.0/24 maxlen: 24
202.157.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686 (0xa7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Validity
Not Before: Feb 4 19:16:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69839b20-d2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:50:ea:44:22:13:ac:59:75:c6:76:09:d4:
59:f3:e3:c8:d1:b6:96:f7:5e:fe:18:37:05:c9:70:
8c:d9:65:5b:b9:29:ed:5c:ab:a2:c7:4c:61:3a:f1:
69:70:ec:12:b3:ba:c1:84:24:5b:e2:b9:83:2b:fd:
5f:1f:8f:ec:07:99:78:0c:f7:c9:b0:eb:0c:68:a8:
3b:04:fe:4c:6f:2b:43:7a:c8:e1:f0:0a:6c:3c:47:
06:77:19:05:a1:75:ea:ae:94:4d:0a:e0:b9:d1:77:
66:fa:de:e1:9f:f9:a4:77:b3:2c:09:99:09:4d:76:
77:26:86:db:0a:82:ac:f6:49:46:dd:70:d0:90:b7:
38:da:11:85:d2:1c:07:a2:14:34:75:8d:7e:76:e6:
9c:0c:b6:d6:49:79:70:ef:54:94:5a:04:6c:a4:b3:
b7:c5:80:24:26:24:1c:27:23:af:36:7d:01:d7:e3:
76:f4:a1:bd:6a:75:38:01:2e:b3:73:56:6c:9b:14:
ec:3f:75:e3:db:e7:a1:47:91:46:91:bf:33:d0:f9:
f5:f3:52:e6:6e:96:69:2a:86:f8:a2:af:2b:ae:a7:
c6:37:d6:d2:ad:ff:f7:4a:ee:9a:35:17:cf:cc:db:
6b:c3:33:4c:5e:74:76:37:9a:c0:dc:5b:0c:aa:a8:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:25:36:25:D8:0B:3C:18:08:31:1F:4B:EE:F8:06:A2:0F:B2:37:D0
X509v3 Authority Key Identifier:
keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.100.226.0/24
202.157.176.0/23
202.157.184.0-202.157.189.255
Signature Algorithm: sha256WithRSAEncryption
52:12:3e:4f:1b:b4:3d:c7:4b:ed:61:a3:76:c0:cb:af:ee:03:
ab:be:46:04:cd:4c:6c:d4:09:7d:a2:69:c1:a7:7d:9d:f3:c4:
52:5d:5e:9f:15:85:3a:eb:84:b4:ff:99:ba:cc:c3:8f:c2:db:
c6:8b:6e:08:82:c5:5f:44:85:c2:78:d1:c5:f7:07:72:dc:d4:
e0:22:01:ee:ab:13:98:a6:24:64:f3:93:0d:02:0b:b7:3e:2d:
b9:e4:7e:7e:ef:29:5d:ff:64:33:1b:41:83:d1:d1:5f:99:79:
c0:83:51:01:2c:05:e9:47:45:be:72:21:bd:ac:70:5f:ef:bc:
b6:09:09:2e:83:de:9d:36:68:09:1b:b7:53:45:87:1b:2a:2e:
60:bd:65:19:f9:1a:d6:d0:eb:b7:33:d5:8f:c9:c9:c3:64:ae:
6e:75:3e:32:ee:71:23:1f:d8:d5:bb:87:d2:5e:6e:83:6f:d1:
e6:8f:e7:c5:37:eb:4f:5f:c7:31:a4:5e:0b:2d:ab:31:68:02:
9d:65:28:94:52:e0:18:51:6b:22:f9:7a:08:29:a5:3b:f7:34:
66:b1:cb:ed:f6:40:bc:f1:cd:4d:ff:8f:c9:37:e7:cd:25:96:
eb:03:02:41:1b:d4:10:8e:aa:2b:a8:74:bb:14:ff:d6:ab:ea:
8c:f5:00:6c
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICCn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2
NTIwRjA4MDIwHhcNMjYwMjA0MTkxNjQ4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgzOWIyMC1kMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZpQ6kQiE6xZdcZ2CdRZ8+PI0baW917+GDcFyXCM2WVbuSntXKuix0xhOvFp
cOwSs7rBhCRb4rmDK/1fH4/sB5l4DPfJsOsMaKg7BP5MbytDesjh8ApsPEcGdxkF
oXXqrpRNCuC50Xdm+t7hn/mkd7MsCZkJTXZ3JobbCoKs9klG3XDQkLc42hGF0hwH
ohQ0dY1+duacDLbWSXlw71SUWgRspLO3xYAkJiQcJyOvNn0B1+N29KG9anU4AS6z
c1ZsmxTsP3Xj2+ehR5FGkb8z0Pn181LmbpZpKob4oq8rrqfGN9bSrf/3Su6aNRfP
zNtrwzNMXnR2N5rA3FsMqqh1QQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFBclNiXY
CzwYCDEfS+74BqIPsjfQMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG
OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTk1ODAvQzdDRTJFMTA3RjhEMTFFQUFEOENENTFFQzRGOUFFMDIvREU3NkIwNEVD
MkJBMTFFQjk5RTVFMzZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBAB7ZOIDBAHKnbAwDAMEA8qduAMEAcqdvDANBgkqhkiG9w0B
AQsFAAOCAQEAUhI+Txu0PcdL7WGjdsDLr+4Dq75GBM1MbNQJfaJpwad9nfPEUl1e
nxWFOuuEtP+ZuszDj8LbxotuCILFX0SFwnjRxfcHctzU4CIB7qsTmKYkZPOTDQIL
tz4tueR+fu8pXf9kMxtBg9HRX5l5wINRASwF6UdFvnIhvaxwX++8tgkJLoPenTZo
CRu3U0WHGyouYL1lGfka1tDrtzPVj8nJw2SubnU+Mu5xIx/Y1buH0l5ug2/R5o/n
xTfrT1/HMaReCy2rMWgCnWUolFLgGFFrIvl6CCmlO/c0ZrHL7fZAvPHNTf+PyTfn
zSWW6wMCQRvUEI6qK6h0uxT/1qvqjPUAbA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:30:37 2026 by rpki-client