
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa
File: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (raw, json)
Hash identifier: 6sEONU1eT7ggL94AI93CtalLCv5yF7DoF7b4Gc6XPEk=
Subject key identifier: 4B:9C:F8:F3:7C:2D:21:C6:60:2B:4E:C4:1C:E4:F0:D2:88:5A:2E:46
Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial: 0423
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa
Signing time: Wed 11 Feb 2026 00:20:43 +0000
ROA not before: Wed 11 Feb 2026 00:20:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133201
IP address blocks: 103.233.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Validity
Not Before: Feb 11 00:20:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698bcb5b-90e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:5a:39:ac:d9:5e:39:37:51:94:a1:de:09:
e3:53:60:aa:09:17:3d:cf:9d:a6:3f:a1:ca:88:55:
27:a3:75:b1:a4:4e:b2:4f:9e:b1:e5:0e:f4:e3:1c:
d8:5e:0d:76:d6:2a:6e:ed:32:4c:ad:be:6c:08:15:
ba:b0:48:29:3c:7e:1f:a2:66:a4:e2:c9:96:0f:78:
d8:2b:20:71:2e:a7:e9:b0:cc:6d:f7:53:7f:bc:fa:
6e:ea:1a:df:f1:81:77:d6:25:ac:17:59:15:56:d1:
0e:37:ef:0c:1f:f6:32:38:a2:2f:59:32:9f:7f:55:
aa:50:c6:02:2f:81:54:b6:fd:f9:6f:82:e9:f4:3e:
a0:60:f3:a3:30:75:66:d4:c1:14:3d:a5:23:b3:bf:
2a:8b:8e:e6:e3:94:c8:f1:09:44:c5:4b:ed:6f:36:
e1:6b:8d:f3:9f:86:07:67:13:78:7f:d8:7a:4a:26:
91:06:69:0c:45:76:f9:d4:e7:42:4e:af:1c:84:2b:
23:59:93:5f:b8:0d:0d:cb:7a:6c:8e:8c:b6:1c:08:
ab:59:0c:96:f4:62:9c:73:22:d6:52:47:de:08:1e:
23:69:f5:f3:0b:aa:0c:b3:d3:92:e2:08:f8:11:a2:
60:98:bb:8d:ba:fc:05:ff:c4:8c:3c:35:ca:7b:84:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:F8:F3:7C:2D:21:C6:60:2B:4E:C4:1C:E4:F0:D2:88:5A:2E:46
X509v3 Authority Key Identifier:
keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.233.8.0/22
Signature Algorithm: sha256WithRSAEncryption
04:7d:84:84:a4:d1:73:cc:00:2a:8e:77:f9:af:24:05:a9:bd:
f7:58:d9:2f:28:4e:1d:2e:e1:c7:86:4a:1b:b7:45:f6:f3:d4:
f1:e2:3a:dd:6a:ea:a6:34:5d:1d:37:6f:77:4f:27:f2:ce:8b:
8d:4a:cc:27:d6:05:6c:ce:a1:9d:c9:1e:c8:32:fb:76:3b:ff:
f2:ca:c5:e9:a8:63:6e:d5:b6:21:14:a3:ee:75:27:09:69:50:
29:2c:c9:db:8d:30:70:5c:94:bd:8f:fc:43:05:c2:91:65:10:
3d:a0:db:d1:81:21:4b:00:df:6e:cb:c6:8b:ea:31:8f:3f:f8:
34:1d:44:2e:da:cf:1e:2b:f9:a5:96:b6:83:f7:0e:e8:98:ef:
aa:88:be:5c:61:dc:03:46:25:af:bb:ff:f9:d2:bc:4f:5c:d1:
f4:87:a9:53:90:59:2e:4e:17:1d:84:1d:3c:59:d1:36:2c:9c:
ad:d0:33:43:40:47:62:be:a8:ab:44:65:b6:bc:ab:1e:62:d7:
0c:d4:76:2b:9e:5d:9c:7c:7e:a1:2a:5b:26:9a:bc:cd:48:1e:
cf:3a:80:b8:9c:91:bd:8b:0b:b8:df:b7:57:8e:2c:ce:f1:0f:
b4:c0:6f:0c:c5:20:9f:55:87:25:55:36:8b:64:3e:86:b5:1e:
30:dc:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:50:15 2026 by rpki-client