
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa
File: B2DE2498C4FD11ED909F2770C4F9AE02.roa (raw, json)
Hash identifier: p3BZrAbeWqMjZ2aI8pjyproPV6v0Pqri6zDsxpn6tJw=
Subject key identifier: DB:15:D5:C7:23:A3:69:F4:55:C2:69:6A:BF:66:E7:F6:29:4A:EB:16
Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Certificate serial: 022B
Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa
Signing time: Wed 11 Feb 2026 02:22:21 +0000
ROA not before: Wed 11 Feb 2026 02:22:21 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 38016
IP address blocks: 2406:c800::/32 maxlen: 32
2406:c800:a1ca::/48 maxlen: 48
2406:c800:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Validity
Not Before: Feb 11 02:22:21 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698be7dc-2bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:58:9c:bd:60:d3:3e:c6:b2:ba:05:81:5f:
9c:9a:62:1f:87:d2:db:cd:93:73:de:05:8d:48:55:
8b:a4:ff:81:79:1d:32:06:20:9b:a0:6f:26:60:38:
a9:c5:86:bc:ad:b4:cf:a9:13:26:06:7e:73:17:69:
99:3d:f2:fa:c4:3d:b6:f8:1d:aa:74:2b:e9:e1:40:
6c:28:7d:39:e6:a4:9f:db:2b:e7:ba:af:5c:5c:79:
1a:b0:28:ff:cd:ef:1d:8b:15:7c:91:c0:93:a4:dd:
25:65:6c:78:2c:48:3a:bd:8d:af:22:0e:84:c2:7d:
db:bc:2d:e4:8c:45:38:ea:ca:4d:29:56:01:69:1f:
7a:cb:1c:1a:27:92:94:cd:5b:2d:66:da:b3:d8:9c:
03:e8:ae:e6:af:d2:e0:c8:a8:ab:c2:5c:7c:01:b2:
58:b7:f2:45:d2:1d:fa:00:94:9e:4e:9d:eb:57:12:
cf:0c:d2:6e:f5:4a:c7:8f:38:40:2f:e2:32:98:49:
09:5c:f6:9a:13:8c:51:77:62:1b:8e:2b:6e:bf:ef:
8a:00:c3:08:10:91:dd:80:53:fc:bb:12:89:40:63:
94:65:11:44:f7:06:08:3f:f1:35:a4:30:9e:05:c3:
b0:5d:cb:8a:f6:d2:2b:5d:8d:be:e4:7c:48:f5:33:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:15:D5:C7:23:A3:69:F4:55:C2:69:6A:BF:66:E7:F6:29:4A:EB:16
X509v3 Authority Key Identifier:
keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:c800::/32
Signature Algorithm: sha256WithRSAEncryption
60:cf:d6:f7:ca:b2:9e:62:c2:3f:de:5f:a5:b7:dd:98:2d:36:
10:4d:1a:60:49:0a:f0:95:71:2e:95:46:49:de:71:de:74:a4:
68:1d:60:22:cc:ad:47:fd:84:e5:c2:21:9c:b8:86:d1:c8:d1:
5b:b7:39:95:71:38:d2:a9:f3:a0:ac:43:59:53:38:c1:b2:a5:
db:f9:22:a5:90:2a:87:e8:9c:b3:c7:1d:f6:0c:36:51:de:90:
a8:2d:5f:bc:b9:19:db:62:ab:ed:97:26:c0:2d:73:a8:50:e5:
4d:1e:3c:ff:f5:66:19:06:62:87:3b:a3:c8:8b:53:3f:7c:f7:
58:61:e2:a9:4c:50:ce:b3:00:6d:58:f0:99:a4:80:05:8f:7e:
9c:5b:0a:3d:66:55:5e:0e:ce:dd:ff:4c:98:cb:8c:c5:de:3b:
a5:20:3d:9a:fb:bf:12:af:b2:98:91:a9:78:fd:f2:cd:e2:18:
27:eb:7c:48:3d:cb:06:0d:01:fa:7a:fa:1b:3e:59:80:2c:48:
20:00:4d:af:b9:3d:df:1e:15:95:d5:48:43:ba:3b:f9:18:2c:
c0:07:00:2c:70:26:70:42:83:26:95:47:65:03:41:1f:e1:f8:
92:f9:8d:71:5b:01:7c:5e:40:31:50:a4:e9:3c:3d:82:d1:ec:
8d:3b:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:47 2026 by rpki-client