
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/38DF2BD687FC11F1B0916B103C11F970.roa
File: 38DF2BD687FC11F1B0916B103C11F970.roa (raw, json)
Hash identifier: ip1X2/FTCxaSzI+j0d1dDsTrjfqFA/qkApNONDzS/MA=
Subject key identifier: E5:92:95:FC:98:8D:EB:74:6B:66:BE:A8:FC:38:EE:68:CB:84:F8:A3
Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial: 04A8
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/38DF2BD687FC11F1B0916B103C11F970.roa
Signing time: Sat 25 Jul 2026 07:41:18 +0000
ROA not before: Sat 25 Jul 2026 07:41:18 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 146943
IP address blocks: 103.176.84.0/24 maxlen: 24
103.176.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 07:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Validity
Not Before: Jul 25 07:41:18 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a64689e-dfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:05:a8:e0:e3:43:37:8c:f8:8f:8e:b0:58:
7b:16:dc:88:fe:b3:60:39:9c:fb:7b:23:43:c0:1d:
b8:a6:1a:5d:1d:5e:ee:3d:67:f9:4b:c6:05:36:f4:
15:a9:55:87:15:2a:b2:47:10:66:05:56:f6:ca:0b:
a1:52:ff:99:61:18:b6:9f:10:53:76:d4:4c:73:7d:
eb:c8:f7:e1:5f:de:03:bb:22:40:fd:60:89:79:ac:
2d:c3:87:e8:96:5a:e2:a2:b3:36:18:a0:67:8b:cf:
c9:b8:e1:ad:0a:b0:0a:e0:8f:88:ce:e2:1a:8d:d0:
20:e6:9a:6f:3b:d3:f9:db:3d:2e:66:01:8c:56:46:
6b:3f:5f:8c:a2:bb:fd:32:5e:45:53:55:81:9c:b1:
31:cb:b4:91:f3:f2:37:71:c5:4f:03:d5:81:cf:52:
9e:c9:c3:ff:16:77:ad:95:99:6e:ad:1c:2a:18:f3:
3b:92:f3:02:ea:3e:ec:8c:ee:96:6c:f0:41:8f:fd:
97:e8:02:dc:8e:8a:17:cd:f6:8d:08:77:eb:21:7b:
5b:8f:9d:40:60:f8:30:30:6b:27:63:1b:b3:a9:aa:
19:42:45:f7:ed:50:ae:6e:50:2e:2a:6b:91:88:d4:
4b:db:c3:82:78:e2:6a:67:48:00:05:2a:d1:9d:07:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:92:95:FC:98:8D:EB:74:6B:66:BE:A8:FC:38:EE:68:CB:84:F8:A3
X509v3 Authority Key Identifier:
keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/38DF2BD687FC11F1B0916B103C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.84.0/23
Signature Algorithm: sha256WithRSAEncryption
36:93:92:c2:3f:cc:8f:cb:c6:31:03:5f:72:62:1a:95:15:60:
d4:df:a5:a5:c2:27:8f:01:12:e9:87:48:9a:52:3d:8a:13:e4:
86:62:5c:5e:0b:6d:f4:17:8c:43:2e:24:1a:33:0a:31:ce:61:
5c:45:6a:18:2b:8d:6c:97:e7:18:12:f2:2e:cb:79:1a:fc:95:
99:4b:89:a3:cf:69:e4:ff:0f:b3:59:6b:60:9f:b0:ed:3f:78:
d8:b6:ac:66:11:a2:79:4d:75:ca:e7:1c:00:42:a6:6e:61:a8:
06:c6:04:b4:67:44:29:9f:46:25:bb:a9:61:8f:64:e2:96:b2:
cd:d3:ee:37:b1:f4:87:77:c1:5a:50:92:25:5b:e9:d2:8e:96:
3a:1c:26:8d:e5:62:5c:89:14:69:c0:1c:20:89:73:48:56:56:
9f:4c:df:c5:55:41:3e:49:84:bd:37:06:48:06:63:0c:d1:31:
31:4f:6f:6b:7b:7c:6e:1e:fb:0f:8b:86:80:6c:61:20:e9:77:
56:ab:d7:72:c9:91:b3:65:9c:be:a8:dd:f2:17:f7:6e:bb:fd:
db:23:42:6a:06:35:07:96:91:46:8d:da:5c:fb:d4:b8:47:e3:
ef:64:6a:24:70:39:cd:36:e8:c7:08:64:a6:87:46:95:a6:0e:
b3:c3:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:58:38 2026 by rpki-client