
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/D6373CB80CD211EFB50E0B5EC4F9AE02.roa
File: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (raw, json)
Hash identifier: zGD9lcUTmqWV8Ub5PXm3WZs7NlAXgc4Pjs1NPpumIiQ=
Subject key identifier: CA:FE:B1:67:21:A1:6A:B8:62:51:3D:06:35:91:C7:24:04:52:A1:F9
Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial: 082D
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/D6373CB80CD211EFB50E0B5EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:38:04 +0000
ROA not before: Mon 28 Apr 2025 22:01:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55720
IP address blocks: 45.116.176.0/24 maxlen: 24
45.116.177.0/24 maxlen: 24
45.116.179.0/24 maxlen: 24
103.228.52.0/24 maxlen: 24
103.228.53.0/24 maxlen: 24
103.228.54.0/24 maxlen: 24
103.228.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093 (0x82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Validity
Not Before: Apr 28 22:01:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a408fc-1f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:da:59:ef:7a:00:aa:62:c3:83:38:95:b6:
4e:45:d8:66:c1:68:34:c7:e8:a6:6f:7f:1f:70:8c:
ee:3f:49:3f:06:20:67:91:17:a4:1d:b8:70:f3:2d:
ff:75:59:78:17:a5:80:b9:c5:40:07:71:10:d5:a3:
04:d3:f9:1d:75:f3:e8:c9:1e:a6:0a:b2:be:a4:b6:
9f:8e:7b:ba:17:b3:6a:8a:3b:66:a3:81:c6:94:7e:
ba:7e:c8:d2:3e:95:e7:68:89:c6:b2:dd:6a:64:bb:
eb:4c:cf:d6:19:c6:83:23:31:ed:2f:1a:fe:f5:94:
29:06:2f:24:13:a1:4b:00:67:02:2e:df:73:d3:6e:
bd:a0:30:11:9a:35:64:17:fb:65:be:73:c0:20:7a:
7d:70:6c:9c:46:36:8f:2c:08:50:7e:a5:a2:db:b7:
4b:e4:b2:0a:c3:fa:d6:78:c8:67:17:00:50:c0:b6:
b6:96:93:40:9e:10:f3:6d:ba:8a:d5:5a:03:5b:ee:
26:2b:34:53:fb:98:1c:9f:ab:3a:28:9a:8f:1c:64:
22:9c:89:42:90:64:89:cd:8c:b7:9d:bb:6d:e1:a2:
1c:29:2f:9e:54:98:0c:09:57:62:76:e7:ea:70:94:
14:cf:58:d3:ec:cf:e1:47:d6:65:7f:56:1e:21:3b:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FE:B1:67:21:A1:6A:B8:62:51:3D:06:35:91:C7:24:04:52:A1:F9
X509v3 Authority Key Identifier:
keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/D6373CB80CD211EFB50E0B5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.116.176.0/23
45.116.179.0/24
103.228.52.0/22
Signature Algorithm: sha256WithRSAEncryption
80:91:e0:8e:12:12:ce:e4:f1:73:d4:cf:66:8a:6c:08:ee:00:
a2:57:e7:63:6b:0a:d5:ef:2f:be:e6:2e:b5:6b:a9:dd:d1:52:
0b:d1:cb:8b:44:f3:e4:6f:de:fb:12:98:99:16:22:14:ca:a8:
d8:37:fb:42:77:df:7a:b8:ee:9a:27:45:f4:95:41:3e:d9:45:
4b:16:c0:01:87:8e:ba:98:64:8c:e1:85:a8:0e:95:8c:ee:aa:
44:6d:b3:c0:e2:11:6d:75:4b:2e:be:fa:b6:38:13:54:3a:fa:
e2:06:65:3f:b8:d2:61:b1:42:74:92:d4:65:01:96:90:cb:d1:
46:a6:f7:87:e0:e5:14:85:98:92:3f:ce:19:9c:38:9a:a1:e0:
21:d7:67:06:62:ec:a7:67:96:18:a9:be:b3:b5:2b:27:06:00:
8d:fe:75:75:d1:3c:6f:17:21:0c:83:49:a5:0b:ce:5c:99:3d:
b5:21:49:e9:8d:08:46:85:22:60:f0:b5:50:c8:6f:c4:40:89:
07:49:bf:10:93:df:f2:82:25:76:6b:65:74:d8:c5:45:34:c3:
94:a3:e1:79:f3:e9:68:79:46:88:77:00:5b:0c:10:36:ae:8c:
e6:c9:1d:35:87:9e:d0:9d:89:a8:33:7a:cc:48:1f:33:68:f3:
24:71:df:99
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz
QUE5MTEyRTYwHhcNMjUwNDI4MjIwMTMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDhmYy0xZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6w7aWe96AKpiw4M4lbZORdhmwWg0x+imb38fcIzuP0k/BiBnkRekHbhw8y3/
dVl4F6WAucVAB3EQ1aME0/kddfPoyR6mCrK+pLafjnu6F7Nqijtmo4HGlH66fsjS
PpXnaInGst1qZLvrTM/WGcaDIzHtLxr+9ZQpBi8kE6FLAGcCLt9z0269oDARmjVk
F/tlvnPAIHp9cGycRjaPLAhQfqWi27dL5LIKw/rWeMhnFwBQwLa2lpNAnhDzbbqK
1VoDW+4mKzRT+5gcn6s6KJqPHGQinIlCkGSJzYy3nbtt4aIcKS+eVJgMCVdidufq
cJQUz1jT7M/hR9Zlf1YeITvpeQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMr+sWch
oWq4YlE9BjWRxyQEUqH5MB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5
RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZCNzYvNkNBMzM2OUMwOUQ2MTFFQkIzQzNDNjg1QzRGOUFFMDIvRDYzNzNDQjgw
Q0QyMTFFRkI1MEUwQjVFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQBLXSwAwQALXSzAwQCZ+Q0MA0GCSqGSIb3DQEBCwUAA4IBAQCAkeCO
EhLO5PFz1M9mimwI7gCiV+djawrV7y++5i61a6nd0VIL0cuLRPPkb977EpiZFiIU
yqjYN/tCd996uO6aJ0X0lUE+2UVLFsABh466mGSM4YWoDpWM7qpEbbPA4hFtdUsu
vvq2OBNUOvriBmU/uNJhsUJ0ktRlAZaQy9FGpveH4OUUhZiSP84ZnDiaoeAh12cG
YuynZ5YYqb6ztSsnBgCN/nV10TxvFyEMg0mlC85cmT21IUnpjQhGhSJg8LVQyG/E
QIkHSb8Qk9/ygiV2a2V02MVFNMOUo+F58+loeUaIdwBbDBA2rozmyR01h57QnYmo
M3rMSB8zaPMkcd+Z
-----END CERTIFICATE-----
Generated at Wed Mar 4 13:15:57 2026 by rpki-client