
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa
File: 76601C1C23E611EF92A9097CC4F9AE02.roa (raw, json)
Hash identifier: IV5neT5fvrEfaGYFt5jPMxG9PaLe4Tnwc926KjM/xSo=
Subject key identifier: 08:FB:D8:21:C5:9F:6A:44:E5:A0:53:AA:B7:07:42:3E:5C:B6:6D:65
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: 0196
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa
Signing time: Thu 11 Jun 2026 07:34:28 +0000
ROA not before: Thu 11 Jun 2026 07:34:28 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152705
IP address blocks: 103.23.148.0/23 maxlen: 23
103.23.148.0/24 maxlen: 24
103.23.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 07:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Validity
Not Before: Jun 11 07:34:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2a6503-1d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0e:21:93:f9:0f:2c:1f:e7:e4:ef:ca:d6:54:
d9:6e:ee:48:e5:1c:6f:eb:04:b6:74:a1:0a:10:57:
06:04:33:56:b7:6d:4b:55:69:3f:98:69:98:d3:6b:
7c:e4:c5:2b:f1:52:98:86:3a:46:71:11:3e:83:ec:
cf:48:53:43:82:cd:40:b8:35:0a:d5:7e:a6:4a:ca:
b5:f4:73:46:34:d9:6a:73:83:ce:47:9c:e6:72:3e:
88:31:57:aa:f4:b2:ac:6b:d1:69:4c:af:33:80:18:
89:bb:6f:47:9f:f9:11:f0:d5:34:7f:a1:cd:8a:cd:
f7:62:ea:c5:54:ad:2c:3d:63:05:2f:73:14:72:51:
7f:50:8e:68:d1:b7:5a:f6:95:ca:79:d9:e7:a4:48:
fd:fe:49:17:f6:19:e9:5c:98:d5:65:19:86:bb:f4:
0d:94:83:db:12:72:9a:0c:bf:07:62:03:1b:0b:f9:
11:50:34:ff:03:00:eb:9e:fe:f3:b3:fd:68:42:91:
af:d7:7e:a3:9b:d8:cf:a4:16:9d:a5:a4:59:06:4b:
a7:24:c5:c5:5a:40:a8:4e:20:9e:21:83:e0:45:79:
b3:1b:2b:25:45:87:4c:3b:be:b8:f3:ef:52:3d:4a:
e9:d1:3f:1e:94:d5:71:15:0f:cd:45:49:98:d0:55:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:D8:21:C5:9F:6A:44:E5:A0:53:AA:B7:07:42:3E:5C:B6:6D:65
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.148.0/23
Signature Algorithm: sha256WithRSAEncryption
21:cc:75:2e:86:d5:0d:ef:01:8f:51:c8:06:27:3a:3b:78:c2:
a1:ed:19:77:6d:98:87:21:94:64:fb:6c:f5:c5:11:23:c8:82:
b2:e6:e2:45:6a:a5:d5:c8:c8:c1:2e:8f:f0:b0:35:c1:94:b3:
de:b8:eb:21:e2:b8:76:e3:ad:ee:84:3e:2a:e7:12:b1:5d:02:
6c:9d:2c:46:2f:5e:ba:19:a8:f8:37:60:21:11:78:f9:bb:49:
b5:4a:83:6d:ba:86:de:d9:5a:70:ec:5e:c6:ef:68:92:eb:b0:
b2:52:a4:29:ab:64:00:7e:b0:d5:bd:10:af:92:72:8f:d4:11:
91:97:95:58:77:cc:6c:4f:5b:62:13:ab:08:21:02:e2:64:9c:
7c:2f:a9:5c:b4:75:d6:3d:ca:b9:5e:66:ae:68:09:df:e1:ae:
43:e6:b1:91:69:6c:d2:58:ff:d8:c5:43:95:4a:d2:cc:c5:e8:
f2:05:64:33:54:8d:60:80:46:40:3b:aa:c8:92:81:21:c3:49:
00:2b:dd:e1:20:b0:86:80:3b:5b:98:13:8f:85:64:8d:a0:98:
77:fd:0d:26:ba:d9:65:65:c3:87:0e:cf:2e:83:81:56:fa:5f:
58:2c:ab:aa:6f:b2:1c:d5:25:c8:4f:07:31:a2:66:4b:cf:a8:
5b:fb:59:cd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2
NTQ0MDY3NzMwHhcNMjYwNjExMDczNDI4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJhNjUwMy0xZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Q4hk/kPLB/n5O/K1lTZbu5I5Rxv6wS2dKEKEFcGBDNWt21LVWk/mGmY02t8
5MUr8VKYhjpGcRE+g+zPSFNDgs1AuDUK1X6mSsq19HNGNNlqc4POR5zmcj6IMVeq
9LKsa9FpTK8zgBiJu29Hn/kR8NU0f6HNis33YurFVK0sPWMFL3MUclF/UI5o0bda
9pXKednnpEj9/kkX9hnpXJjVZRmGu/QNlIPbEnKaDL8HYgMbC/kRUDT/AwDrnv7z
s/1oQpGv136jm9jPpBadpaRZBkunJMXFWkCoTiCeIYPgRXmzGyslRYdMO7648+9S
PUrp0T8elNVxFQ/NRUmY0FUkFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAj72CHF
n2pE5aBTqrcHQj5ctm1lMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG
REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTZGMTQvM0YxMjg4NjIxRkRCMTFFRkE3NTFGNzQ3QzRGOUFFMDIvNzY2MDFDMUMy
M0U2MTFFRjkyQTkwOTdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZxeUMA0GCSqGSIb3DQEBCwUAA4IBAQAhzHUuhtUN7wGPUcgGJzo7
eMKh7Rl3bZiHIZRk+2z1xREjyIKy5uJFaqXVyMjBLo/wsDXBlLPeuOsh4rh2463u
hD4q5xKxXQJsnSxGL166Gaj4N2AhEXj5u0m1SoNtuobe2Vpw7F7G72iS67CyUqQp
q2QAfrDVvRCvknKP1BGRl5VYd8xsT1tiE6sIIQLiZJx8L6lctHXWPcq5XmauaAnf
4a5D5rGRaWzSWP/YxUOVStLMxejyBWQzVI1ggEZAO6rIkoEhw0kAK93hILCGgDtb
mBOPhWSNoJh3/Q0mutllZcOHDs8ug4FW+l9YLKuqb7Ic1SXITwcxomZLz6hb+1nN
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:13:19 2026 by rpki-client