
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa
File: 40C76F3ACC1611EC80603209C4F9AE02.roa (raw, json)
Hash identifier: hZYrCpklqd9PCFPEadJ7jkWv+ryJ31eleAk679Pe1vI=
Subject key identifier: F2:34:2F:C2:B0:50:B3:69:D5:53:FB:01:4C:C2:00:90:5D:93:69:CF
Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial: 0428
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa
Signing time: Sun 27 Sep 2026 00:49:43 +0000
ROA not before: Sun 27 Sep 2026 00:49:43 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 38549
IP address blocks: 103.196.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Validity
Not Before: Sep 27 00:49:43 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab86827-dd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:f6:3a:fe:7a:28:5d:59:d0:97:15:35:5b:
7c:2d:5d:28:da:2f:a6:34:a6:5f:7d:03:8b:3f:02:
dc:5b:12:52:b4:0b:e4:a5:07:49:bb:91:aa:38:2a:
7f:8a:4e:ac:9d:e8:32:28:82:f3:fb:10:66:7b:79:
b8:3c:cd:a0:c6:df:b3:31:f1:d5:bc:72:bd:82:42:
54:0e:c5:aa:1e:9f:a8:9c:2b:1c:fa:6a:c1:66:f9:
e0:aa:2c:42:a5:5a:98:ec:b2:6f:ad:b4:1d:53:fd:
e1:62:ed:7f:0a:5f:20:e1:21:43:f9:58:4f:05:ad:
b1:0e:ca:20:9f:4f:15:a7:4e:a0:81:2b:f9:b8:21:
d8:5d:6f:24:31:07:89:af:e3:c5:ba:94:d5:49:ca:
7d:35:9f:4e:f7:7f:47:17:2b:34:2b:29:3e:d4:7c:
52:bb:af:46:6c:bb:c0:e9:e9:f0:d6:66:46:6b:60:
d7:aa:33:e2:33:d5:fd:00:5e:21:45:0c:d1:af:39:
c1:8c:af:0a:d9:45:a7:12:2f:92:9f:27:ef:3d:50:
35:b2:02:62:37:d5:6f:0e:36:f6:03:e4:db:99:e8:
93:6d:9b:ee:f5:e5:9e:ed:20:56:d4:02:94:a6:a6:
1e:77:fa:e7:6c:78:52:95:b6:14:9a:8b:e5:69:67:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:2F:C2:B0:50:B3:69:D5:53:FB:01:4C:C2:00:90:5D:93:69:CF
X509v3 Authority Key Identifier:
keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/40C76F3ACC1611EC80603209C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.196.68.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c1:21:d5:c8:79:ab:9e:d7:39:9e:46:a3:c8:1a:38:5d:18:
1e:f7:59:80:6d:42:a7:1d:39:83:11:b6:ad:a7:74:67:69:34:
4c:0c:a8:fb:56:82:c2:65:c1:10:fe:e4:8a:b8:d9:1c:64:79:
ed:83:e0:4c:9b:70:79:ed:1b:85:c4:f6:bb:c6:30:a8:1c:fd:
f5:68:06:4a:cf:9c:a3:ec:62:db:27:2b:b4:ea:88:74:11:3b:
77:a2:65:6a:9c:8c:53:7a:85:c3:bf:af:0a:d8:0f:f3:fc:50:
d5:33:26:bf:04:4b:ce:1a:b7:34:ac:1b:fe:64:aa:f2:ed:04:
b5:4d:e8:28:58:11:46:12:71:30:a6:47:a4:ed:19:33:18:52:
29:1a:05:c9:94:b5:2f:7d:63:96:2c:90:ca:98:5c:e5:5b:9b:
65:25:64:26:c4:83:db:ef:3f:db:3e:08:a5:96:e8:ba:1e:e4:
d3:d5:2e:ce:52:7f:7f:7b:bd:db:fa:ad:f3:27:ee:52:7f:1e:
ee:71:69:e1:3b:4d:d8:ef:fb:43:34:37:41:aa:59:c4:8c:53:
72:11:71:73:6c:10:c3:d2:58:4a:b5:a2:48:6c:aa:e7:41:62:
d0:a2:44:6f:03:50:43:7f:cc:6a:3b:76:f7:a3:91:f8:92:23:
bf:11:20:65
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF
ODg1RTQ4OUQwHhcNMjYwOTI3MDA0OTQzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI4NjgyNy1kZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZ32Ov56KF1Z0JcVNVt8LV0o2i+mNKZffQOLPwLcWxJStAvkpQdJu5GqOCp/
ik6snegyKILz+xBme3m4PM2gxt+zMfHVvHK9gkJUDsWqHp+onCsc+mrBZvngqixC
pVqY7LJvrbQdU/3hYu1/Cl8g4SFD+VhPBa2xDsogn08Vp06ggSv5uCHYXW8kMQeJ
r+PFupTVScp9NZ9O939HFys0Kyk+1HxSu69GbLvA6enw1mZGa2DXqjPiM9X9AF4h
RQzRrznBjK8K2UWnEi+SnyfvPVA1sgJiN9VvDjb2A+TbmeiTbZvu9eWe7SBW1AKU
pqYed/rnbHhSlbYUmovlaWfllwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPI0L8Kw
ULNp1VP7AUzCAJBdk2nPMB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND
MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzg5RjkvRkQ4MDZCQTJDQzEzMTFFQzgyN0EyNjg3QzRGOUFFMDIvNDBDNzZGM0FD
QzE2MTFFQzgwNjAzMjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ8REMA0GCSqGSIb3DQEBCwUAA4IBAQAUwSHVyHmrntc5nkajyBo4
XRge91mAbUKnHTmDEbatp3RnaTRMDKj7VoLCZcEQ/uSKuNkcZHntg+BMm3B57RuF
xPa7xjCoHP31aAZKz5yj7GLbJyu06oh0ETt3omVqnIxTeoXDv68K2A/z/FDVMya/
BEvOGrc0rBv+ZKry7QS1TegoWBFGEnEwpkek7RkzGFIpGgXJlLUvfWOWLJDKmFzl
W5tlJWQmxIPb7z/bPgillui6HuTT1S7OUn9/e73b+q3zJ+5Sfx7ucWnhO03Y7/tD
NDdBqlnEjFNyEXFzbBDD0lhKtaJIbKrnQWLQokRvA1BDf8xqO3b3o5H4kiO/ESBl
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:53:09 2026 by rpki-client