
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/C9819022CE7011E98E86DD52C4F9AE02.roa
File: C9819022CE7011E98E86DD52C4F9AE02.roa (raw, json)
Hash identifier: Euz3FC5/THS/IJOs5pfq6woTR4rrsuQFYSRyDHYZ9ng=
Subject key identifier: 14:F7:7D:7D:40:C2:17:FD:D1:7A:90:93:19:7F:BE:26:C0:A1:73:F4
Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0
Certificate serial: 0DE5
Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/C9819022CE7011E98E86DD52C4F9AE02.roa
Signing time: Thu 12 Feb 2026 18:15:17 +0000
ROA not before: Thu 12 Feb 2026 18:15:17 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133210
IP address blocks: 103.112.80.0/24 maxlen: 24
103.255.250.0/24 maxlen: 24
2001:df1:a800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl
rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3557 (0xde5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0
Validity
Not Before: Feb 12 18:15:17 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698e18b5-c8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:39:ac:81:22:e9:e0:c6:33:02:7a:6d:4f:
6a:e4:27:81:c9:fb:c0:a8:b9:96:4e:c3:56:18:0b:
c0:66:1e:26:fe:c3:da:49:02:6c:1b:f3:e6:8a:eb:
8e:7b:de:6e:06:3c:ec:70:48:d6:7e:65:7a:0a:6d:
1f:01:b5:a1:9b:14:7c:9f:36:74:ae:3f:83:6a:6d:
55:0d:0a:11:9d:d6:c1:be:d4:91:89:c7:39:31:c6:
02:90:24:dc:07:af:12:c4:a9:fa:ec:d1:f1:35:04:
0f:a2:c9:dd:5d:1c:80:ff:4c:7d:ea:bf:90:27:9a:
59:61:14:76:04:4a:78:1e:31:31:9e:83:31:f9:51:
b7:25:8f:53:f4:41:d6:02:33:3e:d9:c5:5e:63:4c:
db:c5:60:a8:65:d7:2e:b6:a9:21:7e:ea:9f:31:b1:
9d:fc:79:05:07:16:f7:df:aa:e4:f4:3c:9b:45:e0:
1d:3f:c6:5c:d1:8c:75:b3:db:ed:70:fe:82:06:b7:
94:6a:35:5c:42:9e:e9:09:4a:9b:ff:f6:59:3d:60:
69:b9:cb:05:8c:e3:c1:88:cf:5a:08:a2:60:99:e6:
52:c3:94:8f:b0:87:d5:73:96:00:5c:0e:e2:bf:b4:
35:71:c6:b9:57:0c:eb:ec:d2:eb:68:31:b5:c8:94:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:7D:7D:40:C2:17:FD:D1:7A:90:93:19:7F:BE:26:C0:A1:73:F4
X509v3 Authority Key Identifier:
keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/C9819022CE7011E98E86DD52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.80.0/24
103.255.250.0/24
IPv6:
2001:df1:a800::/48
Signature Algorithm: sha256WithRSAEncryption
c6:cc:35:45:68:89:68:3b:17:2e:a4:0e:d9:7b:c3:58:c7:ac:
d8:73:1a:cf:a5:55:8f:4f:bb:17:2f:85:e7:de:5f:2b:13:0d:
de:dd:3f:db:cf:38:fc:c6:32:9b:25:47:c4:9e:1f:06:a9:c0:
86:55:60:29:5a:99:98:b6:ed:e0:f9:36:12:13:9a:c2:d6:a7:
a5:bd:2d:bc:1b:18:01:eb:b8:c1:50:ef:fc:3c:2d:a8:e6:06:
49:46:14:49:32:be:07:c3:91:5a:34:17:b8:35:1d:a3:f2:11:
0b:54:90:85:f5:21:da:d3:8d:df:a5:60:8e:f7:8c:55:1c:97:
65:cd:77:03:1a:d6:39:32:38:b1:2e:d0:e7:4a:14:ad:78:ef:
85:2e:36:66:f2:8d:ec:20:80:f6:a8:0f:73:55:c4:97:13:94:
63:1b:fe:5d:8e:4f:1b:a9:3e:3c:10:38:1a:dd:2a:37:1c:44:
b5:cb:2d:85:b2:c9:3e:a8:e0:71:35:10:c2:ce:2d:b7:db:d6:
21:5d:94:7f:a1:05:cc:38:41:c0:93:9f:10:4e:e0:bc:09:ca:
d5:4c:40:7e:db:55:02:b4:a2:33:ee:4c:0d:13:04:62:6d:61:
60:8a:59:6a:f8:89:7a:df:75:02:36:ee:9b:63:6b:a9:e2:3f:
b3:92:26:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:50 2026 by rpki-client