
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/1B97FEB84E8111ECA3589560C4F9AE02.roa
File: 1B97FEB84E8111ECA3589560C4F9AE02.roa (raw, json)
Hash identifier: knDl3ydeWrR5EoyUZz0p4spTJdI3nVsBtrFKiZtGuWs=
Subject key identifier: 7F:28:F5:25:5B:98:37:22:17:12:B7:89:A5:7E:32:C7:86:53:2F:2D
Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530
Certificate serial: 04EE
Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/1B97FEB84E8111ECA3589560C4F9AE02.roa
Signing time: Tue 17 Feb 2026 09:45:08 +0000
ROA not before: Tue 17 Feb 2026 09:45:08 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149034
IP address blocks: 103.177.52.0/23 maxlen: 24
2400:3820::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl
rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262 (0x4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530
Validity
Not Before: Feb 17 09:45:08 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=699438a4-5132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:ff:f9:0c:68:b1:58:23:1d:47:8e:e8:a9:
bc:f0:fe:63:f6:21:86:32:a0:9c:e5:8d:be:9b:00:
23:df:78:b6:25:8d:89:1f:ca:ed:2d:0c:4a:bf:80:
2b:1f:24:f7:dd:f5:11:7e:7e:c4:78:1c:e7:13:38:
66:23:8b:07:24:12:60:ed:33:43:48:d2:1a:5d:6d:
5b:9b:0e:26:82:0d:b2:94:39:05:9d:d1:40:d9:c4:
28:9a:54:07:3b:4e:d4:18:f5:7e:9b:36:3e:a8:67:
dc:b0:a5:bb:b0:d3:49:92:23:0a:4f:ef:50:44:0c:
29:22:12:90:ff:cb:b6:bb:dc:bf:80:3a:04:58:dd:
6a:04:34:ad:25:7e:01:b3:0e:d7:b1:6d:b7:2d:e9:
72:5d:6b:06:7b:24:7c:a2:25:47:86:2d:3b:b2:1b:
95:21:64:f9:3d:13:7c:fb:5b:47:c5:49:5b:f4:0d:
77:4e:93:0a:d3:e3:0b:0a:93:73:60:23:52:9e:67:
60:8c:a8:ad:0e:f2:ca:78:3b:b9:1e:67:8e:49:87:
46:ef:82:04:47:f1:8d:5e:80:b5:27:67:d3:59:3d:
8e:36:08:bf:ee:9b:be:d6:9e:5d:1e:79:bc:fc:62:
c3:b5:a2:35:7e:f7:c5:dd:77:0e:d8:08:65:cd:7e:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:F5:25:5B:98:37:22:17:12:B7:89:A5:7E:32:C7:86:53:2F:2D
X509v3 Authority Key Identifier:
keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/1B97FEB84E8111ECA3589560C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.52.0/23
IPv6:
2400:3820::/32
Signature Algorithm: sha256WithRSAEncryption
aa:e8:83:64:09:c6:d4:77:c1:20:15:e5:0d:f4:6c:03:6d:30:
59:35:6f:bd:3b:72:4e:07:82:97:62:91:1a:3d:d4:15:68:22:
17:66:46:70:9c:63:37:29:ee:9e:8e:48:cf:56:39:e8:4a:8f:
0a:16:92:f4:26:c0:63:e6:0b:2f:9b:8a:5e:9b:62:33:53:d4:
9e:03:44:24:21:f4:b3:9f:fe:f0:49:e9:c1:3d:6c:a9:57:95:
86:a2:f5:4f:2e:b3:ab:e3:61:0d:a4:09:fb:e8:d8:a2:f5:ba:
48:48:41:07:c2:53:fc:b1:90:4e:5c:59:7a:28:3d:e9:10:91:
7c:94:71:ee:93:03:b3:1d:f6:73:03:1e:74:56:cd:3a:26:df:
d5:80:c5:cd:d5:23:05:d9:cb:0e:ac:cb:bc:f7:34:ec:1c:80:
79:66:45:31:cc:4e:04:06:32:94:3e:22:d2:00:dd:a1:88:ae:
43:35:29:63:a4:2a:0d:dc:ad:41:5b:20:3d:b5:64:9e:0a:6f:
2b:b0:b0:ec:1f:0b:c2:c3:c5:db:c7:43:ff:18:13:f8:3e:7d:
37:66:d4:a2:67:f4:54:5d:4b:b3:0f:5d:bb:6c:38:ba:1f:2d:
10:80:e8:d3:fd:9a:73:d3:d0:0d:fa:d9:89:0b:9e:0f:91:d9:
09:f9:15:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:11 2026 by rpki-client