
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76CF851A39F911EF81984965C4F9AE02.roa
File: 76CF851A39F911EF81984965C4F9AE02.roa (raw, json)
Hash identifier: GcHbAVFHwhHMNROyp0bXrNpswuITq1wwD9V/hjQmozs=
Subject key identifier: 69:65:6E:37:F3:FE:6C:5E:63:C4:61:04:78:97:34:2A:CD:FD:8A:7D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E471
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76CF851A39F911EF81984965C4F9AE02.roa
Signing time: Sun 31 May 2026 16:53:54 +0000
ROA not before: Sun 31 May 2026 16:53:54 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136294
IP address blocks: 103.91.72.0/22 maxlen: 22
103.91.72.0/23 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58481 (0xe471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:53:54 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c67a2-123b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:62:31:bd:c6:74:85:db:dc:d6:3e:29:7a:
90:01:90:ed:9f:ed:05:91:94:5a:4d:84:02:42:98:
b7:78:43:48:79:78:09:99:6f:cf:53:60:b7:26:12:
1c:0e:ad:b6:ea:6d:39:72:4a:d8:7d:3a:03:b2:f9:
9c:00:3a:da:49:5e:6e:47:59:32:60:4d:61:21:af:
4d:6f:f7:9d:64:36:1e:87:ba:d1:1d:a1:a2:48:a4:
8a:73:5c:02:48:da:54:44:cc:dd:c4:c7:9c:59:a0:
44:91:67:85:7a:6a:d8:92:2e:76:e5:ba:71:e6:96:
0a:5c:a1:d4:65:e5:27:af:2b:88:13:50:7b:75:05:
87:01:4e:ea:3a:8e:0b:c9:7b:02:39:72:2c:d0:d9:
c1:a2:cf:7d:51:b3:9e:f4:11:52:ca:72:ff:b5:ac:
22:b9:7d:94:de:27:2b:c2:34:4c:8f:64:39:bf:ce:
25:7b:b5:d7:99:e9:ba:70:60:57:94:e5:12:99:d5:
65:09:ac:48:80:dd:83:f9:46:c9:fc:3a:19:91:99:
a2:41:7f:5f:86:f3:e4:9b:4e:40:53:db:26:ae:15:
85:7a:62:3b:a3:d8:97:34:9a:fa:34:9a:1b:53:07:
ea:c5:c1:55:8b:b4:30:da:29:c3:b5:39:3d:a6:ff:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:6E:37:F3:FE:6C:5E:63:C4:61:04:78:97:34:2A:CD:FD:8A:7D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76CF851A39F911EF81984965C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.72.0/22
Signature Algorithm: sha256WithRSAEncryption
67:71:6f:76:37:3f:e6:0d:89:88:25:df:a7:ae:b6:f5:ea:63:
0c:59:17:84:76:34:a9:d5:72:a7:3c:65:9c:07:a6:ec:04:ee:
71:69:69:69:da:ba:d0:9d:19:b2:d0:ac:a7:03:1b:f6:32:1d:
ce:14:52:74:20:44:db:be:f8:52:77:63:f5:5f:2f:ff:ed:c7:
f9:2e:f3:09:75:30:ad:05:1a:30:18:13:cc:d8:6b:b6:17:56:
89:3d:19:01:be:b9:9f:e7:87:f3:ea:7a:eb:d5:3b:ed:83:9d:
e8:2d:3b:80:e2:c4:3d:01:6b:ad:f4:ab:37:a0:84:51:90:fa:
3b:a9:7d:1c:f6:a4:1b:dc:c7:ef:7e:41:3b:18:4e:3e:27:0d:
f1:d3:75:d7:92:b2:27:d1:2f:b7:ad:11:8c:8e:68:0c:98:76:
9a:f6:ec:d7:b9:af:3b:4b:63:47:b4:db:5a:5d:35:b3:91:7f:
c1:82:f2:24:38:81:24:c1:3d:ca:98:ef:b9:78:61:a0:81:a3:
6a:a5:ac:18:77:a3:f4:9f:7a:fd:11:64:90:b2:50:66:c2:f5:
6f:b0:47:d4:5b:27:cf:4c:9d:09:77:06:f5:77:4e:01:a9:be:
d5:d7:51:3c:8a:8e:5e:79:7c:87:7b:bb:c0:51:99:e0:da:6b:
5d:cb:c8:fe
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAORxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTM1NFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY3YTItMTIzYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIZYjG9xnSF29zWPil6kAGQ7Z/tBZGUWk2EAkKYt3hDSHl4CZlvz1NgtyYS
HA6ttuptOXJK2H06A7L5nAA62klebkdZMmBNYSGvTW/3nWQ2Hoe60R2hokikinNc
AkjaVETM3cTHnFmgRJFnhXpq2JIuduW6ceaWClyh1GXlJ68riBNQe3UFhwFO6jqO
C8l7AjlyLNDZwaLPfVGznvQRUspy/7WsIrl9lN4nK8I0TI9kOb/OJXu115npunBg
V5TlEpnVZQmsSIDdg/lGyfw6GZGZokF/X4bz5JtOQFPbJq4VhXpiO6PYlzSa+jSa
G1MH6sXBVYu0MNopw7U5Pab/XAMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRpZW43
8/5sXmPEYQR4lzQqzf2KfTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc2Q0Y4NTFB
MzlGOTExRUY4MTk4NDk2NUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdbSDANBgkqhkiG9w0BAQsFAAOCAQEAZ3Fvdjc/5g2JiCXfp662
9epjDFkXhHY0qdVypzxlnAem7ATucWlpadq60J0ZstCspwMb9jIdzhRSdCBE2774
Undj9V8v/+3H+S7zCXUwrQUaMBgTzNhrthdWiT0ZAb65n+eH8+p669U77YOd6C07
gOLEPQFrrfSrN6CEUZD6O6l9HPakG9zH735BOxhOPicN8dN115KyJ9Evt60RjI5o
DJh2mvbs17mvO0tjR7TbWl01s5F/wYLyJDiBJME9ypjvuXhhoIGjaqWsGHej9J96
/RFkkLJQZsL1b7BH1Fsnz0ydCXcG9XdOAam+1ddRPIqOXnl8h3u7wFGZ4NprXcvI
/g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:54 2026 by rpki-client