
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
File: B76A1A109B5411EF9756FD79C4F9AE02.roa (raw, json)
Hash identifier: tr7WXU9f6CtqcovZLq0HIZHw7MPhtACp8RCBWvYQ4w8=
Subject key identifier: 88:04:00:0B:69:F9:CA:A1:E0:C2:F6:EF:CD:02:CA:FA:C7:03:17:91
Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial: 023B
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
Signing time: Wed 17 Jun 2026 03:32:45 +0000
ROA not before: Wed 17 Jun 2026 03:32:45 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 142132
IP address blocks: 103.166.174.0/24 maxlen: 24
103.166.175.0/24 maxlen: 24
2401:b0e0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Validity
Not Before: Jun 17 03:32:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a32155d-040c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:ef:45:b6:58:08:77:db:ef:af:8c:9d:ef:
f2:2c:c5:8d:4f:b5:a9:60:63:ba:17:1d:b7:c3:20:
3a:46:ae:5b:69:5d:3c:65:b4:1e:a9:82:2c:b5:ee:
cf:91:05:f5:be:fc:50:e3:c2:cb:2a:9b:c4:42:1a:
8a:7b:de:83:8d:67:6d:be:09:6d:f8:a7:25:c4:cc:
4b:24:15:cf:a9:d2:19:e5:e5:5b:4e:8b:23:3d:3a:
47:84:c0:dc:3b:56:a9:62:8c:98:67:dd:a0:1e:8b:
13:b0:3c:17:63:fb:bd:11:3b:75:87:56:58:4f:84:
cb:a6:38:24:a1:b0:d7:66:9f:2f:90:20:62:66:90:
5a:2d:0f:95:f4:de:01:06:49:39:45:d0:a6:35:2c:
cf:ef:2a:0f:0b:13:0d:56:fb:a1:a1:4c:57:25:0b:
e4:78:47:48:d8:12:a7:ec:ea:47:fa:6a:cf:ae:c8:
75:dc:84:ab:e7:9f:b0:65:50:57:11:a4:fc:cd:eb:
19:6c:3d:cc:17:98:1a:9e:03:74:b0:fb:3c:1d:c7:
81:7d:de:bb:74:f3:49:d4:e2:d5:72:65:23:74:14:
84:0c:97:17:2d:89:bc:0f:11:d8:f8:59:09:8d:7e:
67:c4:72:34:0f:c8:11:b7:df:46:67:65:60:03:ff:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:04:00:0B:69:F9:CA:A1:E0:C2:F6:EF:CD:02:CA:FA:C7:03:17:91
X509v3 Authority Key Identifier:
keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.174.0/23
IPv6:
2401:b0e0::/40
Signature Algorithm: sha256WithRSAEncryption
10:01:0a:86:8b:70:79:15:a1:ae:ba:2b:05:a5:f9:5f:65:09:
c7:23:8f:07:4d:66:e0:eb:10:0b:9b:f7:d8:f9:77:53:4e:be:
a3:d6:83:db:59:16:9a:3a:5a:82:d8:44:b4:16:3d:b7:4e:a0:
b8:6b:a9:6c:c2:16:92:e4:84:12:13:d6:a9:c2:50:a5:bf:6a:
81:3c:38:1c:85:e1:b7:55:ae:41:7b:4f:cd:1e:4d:dc:14:60:
3b:33:a0:df:ac:71:ad:02:bf:b2:25:a5:6a:a1:d6:c8:68:30:
6f:6c:b1:d7:d6:51:6c:c5:fd:86:d6:05:c1:e8:ed:ff:4d:60:
aa:69:78:7d:d5:4f:e7:3e:5a:14:24:d2:d9:b9:85:1a:d9:1b:
51:09:82:f0:24:7d:49:88:d7:e2:e4:19:62:7e:ec:76:64:4d:
e3:60:da:ad:5f:73:4c:c6:5e:79:c2:05:0d:a3:22:bc:bb:12:
ae:90:62:37:2a:9d:0d:de:83:bb:c0:ac:0b:ba:aa:2c:ae:6a:
23:1b:37:44:58:0e:d7:63:b8:9c:b5:ec:11:01:e9:ee:68:bd:
5c:f9:24:7f:91:f2:83:f2:7f:ef:09:e2:09:0b:a9:51:78:ea:
57:e3:15:7e:dd:37:5b:ad:c5:6b:3d:10:a2:cc:de:dd:74:21:
cb:bf:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:01:21 2026 by rpki-client