
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/76C3F7C645B711EFA2F0C732C4F9AE02.roa
File: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (raw, json)
Hash identifier: aCVP0X/9Z8ofCrDnxKwhn3zCeNoQ7d2oYMrk7SMurU8=
Subject key identifier: F9:6C:D4:41:AA:F0:83:CF:79:E8:B4:96:C9:E3:BB:37:2E:C8:59:ED
Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial: 011B
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/76C3F7C645B711EFA2F0C732C4F9AE02.roa
Signing time: Tue 13 Jan 2026 04:24:02 +0000
ROA not before: Tue 13 Jan 2026 04:24:02 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152317
IP address blocks: 157.10.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Validity
Not Before: Jan 13 04:24:02 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6965c8e2-97d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:e4:13:a1:f2:f9:fe:0c:f0:50:c0:4f:1a:
5d:c6:b0:a0:48:db:61:0c:e6:db:83:97:9b:be:59:
8d:80:2c:68:17:06:13:3b:24:83:06:15:57:ee:e8:
1f:ba:d8:4c:90:84:6e:b1:a8:30:ed:4f:a4:8c:fb:
e4:6f:e9:e2:d4:c6:ac:f2:1f:f1:17:2d:3c:8b:20:
4a:10:08:34:13:bf:a7:ba:1a:37:6e:bb:07:1e:20:
2a:4e:4d:3d:2f:d5:37:0c:f6:f6:35:53:8f:05:b4:
85:db:60:42:a9:9a:a4:1c:a7:06:f4:72:1f:51:6a:
0f:5f:0b:c5:88:bc:43:9e:17:f5:74:e9:67:e9:24:
0b:70:cb:42:0f:4d:4f:42:26:41:90:06:67:f4:91:
5b:73:6e:c3:73:14:95:0f:28:dc:3d:cf:42:86:55:
1e:5a:f5:16:97:4f:d3:4d:71:61:5a:ea:5b:c1:98:
ee:de:aa:60:d3:9a:b1:28:2f:0e:5c:fb:b7:84:93:
9e:17:34:9e:d9:cd:60:7a:6f:25:ff:21:bb:6d:89:
09:af:a5:e5:73:55:a7:7a:24:a9:92:fb:1b:df:79:
17:e2:16:ce:33:82:23:96:55:4d:71:2a:36:97:3e:
0a:00:43:9c:e5:bf:55:e6:3d:f4:3c:52:de:34:28:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6C:D4:41:AA:F0:83:CF:79:E8:B4:96:C9:E3:BB:37:2E:C8:59:ED
X509v3 Authority Key Identifier:
keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/76C3F7C645B711EFA2F0C732C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.138.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:ad:f8:66:98:0e:26:22:2a:eb:58:ca:5c:e8:53:03:13:29:
47:11:0a:60:29:72:45:36:c1:7b:3d:7f:f2:5d:1b:e5:dd:8a:
4b:5c:4c:20:92:3b:85:d5:71:96:59:5d:40:88:54:7b:b5:10:
24:0a:dd:47:9e:fa:14:3d:a2:f9:1b:08:12:a1:5b:31:b2:3f:
0e:79:cb:c6:8e:28:ab:96:16:58:3d:00:a7:9a:e9:04:96:9a:
3a:44:ad:47:13:75:f4:40:af:3a:76:e3:7a:13:2d:f6:47:9b:
8e:50:05:a1:03:2a:4c:ad:d8:48:56:eb:a1:4d:63:2c:71:64:
eb:e9:14:2a:81:6c:00:a6:93:80:fe:53:fa:3c:dd:b9:3f:2c:
d7:5e:e4:ad:c3:56:63:c9:d1:fb:c8:ce:6e:25:43:e7:76:57:
9a:d0:e3:c4:79:02:97:97:0f:ac:cc:4e:0e:8b:5d:87:16:d5:
04:32:c9:39:a7:2a:c4:7b:52:5b:11:6c:a4:d9:83:fb:3e:b5:
4d:25:e9:9c:06:e7:64:bb:0f:f8:fa:9c:8c:fa:cd:d0:8f:12:
aa:28:21:91:bb:b7:12:01:ba:b7:a4:ad:da:e8:73:9d:70:9f:
39:aa:29:07:cf:9f:45:af:b3:af:79:43:84:16:0d:e2:73:63:
c4:6b:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:00:42 2026 by rpki-client