
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa
File: 173CA1AABCA011ED914D176DC4F9AE02.roa (raw, json)
Hash identifier: ghmOaGCrb/OX+5yX9CBJq9IeHxvJJfC1A1g9slJd8aU=
Subject key identifier: 35:32:CA:DD:D5:E9:29:14:72:8B:BE:17:4F:7D:92:7D:FD:83:9B:39
Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Certificate serial: 2170
Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa
Signing time: Sat 14 Feb 2026 16:13:31 +0000
ROA not before: Sat 14 Feb 2026 16:13:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 64072
IP address blocks: 103.25.120.0/22 maxlen: 24
2404:bc80::/32 maxlen: 32
2404:bc80::/48 maxlen: 48
2404:bc80:1::/48 maxlen: 48
2404:bc80:2::/48 maxlen: 48
2404:bc80:3::/48 maxlen: 48
2404:bc80:4::/48 maxlen: 48
2404:bc80:5::/48 maxlen: 48
2404:bc80:6::/48 maxlen: 48
2404:bc80:7::/48 maxlen: 48
2404:bc80:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl
rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8560 (0x2170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Validity
Not Before: Feb 14 16:13:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69909f2b-77eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:43:0f:bb:12:7c:68:84:07:26:1d:0e:a0:
0a:75:c2:f4:a2:b7:d0:2f:1f:17:9b:e4:a9:7e:7a:
06:3f:42:75:00:54:6b:12:2a:f8:33:45:d3:40:0e:
90:d5:96:73:ff:7a:1a:4f:56:d4:c9:bd:ec:db:33:
b6:f1:e1:0c:27:8f:05:6a:3d:b7:e7:b4:a4:f3:7e:
d3:6e:d4:0f:a7:da:dd:37:c9:3e:5c:83:e9:60:eb:
3c:29:ba:99:f3:f5:b8:f7:46:de:14:d8:87:14:17:
bf:77:9e:89:32:8e:08:5d:b9:d1:d8:c9:3b:fc:23:
38:4d:b5:9e:52:de:eb:8e:b1:81:99:6c:65:85:bc:
32:00:d8:9f:21:fa:01:b3:95:9a:b4:db:b7:41:ac:
8c:e4:ba:22:23:c1:77:57:1b:dd:41:23:9e:1e:e5:
9a:17:f9:a7:56:31:be:ed:e8:2a:7e:5a:61:cd:55:
e5:4d:21:de:64:a3:e7:59:01:dd:37:3c:05:91:f2:
e0:bb:12:cb:9f:3b:8c:a3:bb:43:bd:8f:80:43:b1:
34:97:b9:d8:c3:17:01:7b:fa:b1:0a:7c:4c:da:46:
15:95:18:65:f0:37:5f:39:f5:75:5b:92:d0:0b:d3:
a5:65:de:61:28:33:ed:6a:93:f3:63:5d:1d:0a:b3:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:32:CA:DD:D5:E9:29:14:72:8B:BE:17:4F:7D:92:7D:FD:83:9B:39
X509v3 Authority Key Identifier:
keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.120.0/22
IPv6:
2404:bc80::/32
Signature Algorithm: sha256WithRSAEncryption
72:b3:f3:8e:e5:82:03:e5:59:3b:74:e0:c6:00:fe:11:50:f3:
83:82:bb:59:cb:61:ea:36:9a:ab:12:5b:8b:f2:96:9a:7f:2e:
31:41:37:63:39:9c:42:36:cb:4c:be:07:a3:da:29:1a:35:2a:
6a:cc:72:07:73:56:eb:16:42:c9:c8:f4:a5:9f:99:e1:a4:f0:
0c:0a:f9:ff:67:1e:f1:c5:cc:a3:ed:6e:4b:a4:2f:89:35:04:
f7:cd:6e:af:b8:fc:4f:6f:3a:be:d8:3d:9b:89:5b:1e:4d:f0:
14:39:00:17:de:97:e4:e5:d3:eb:38:1c:13:2d:a4:f7:9d:34:
7d:47:7a:5c:44:01:ce:77:a4:8a:9b:2a:aa:b1:03:78:2a:cc:
30:87:0e:a3:ca:55:21:5c:09:a8:ae:28:a6:bd:41:07:26:94:
24:78:57:05:2c:36:7b:fd:3b:0a:6d:8b:c5:29:91:fc:4e:69:
cf:5f:d9:bc:57:23:d5:18:0b:bf:12:b8:a6:2c:c1:48:1d:0f:
c7:c9:50:28:8e:1b:4b:dd:50:43:7f:1d:f9:87:6b:6f:ee:5e:
d8:2f:0f:de:ee:7a:79:7c:b5:0a:dd:45:68:25:be:00:f6:e3:
67:1d:3b:d1:c7:39:79:de:c0:37:76:e3:81:8f:95:a9:55:cd:
a4:f8:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:47 2026 by rpki-client