
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa
File: 76C782CC836811E9B8830935C4F9AE02.roa (raw, json)
Hash identifier: QWXLnX5JVRbK1O6GJ1E6zIJRQka/yQDbO3hc7/6u/70=
Subject key identifier: 46:8B:C4:4C:E8:1D:31:A2:B9:17:EE:BA:56:D9:24:6E:05:6E:C9:73
Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial: 0F89
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa
Signing time: Thu 29 Jan 2026 00:12:38 +0000
ROA not before: Thu 29 Jan 2026 00:12:38 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 64073
IP address blocks: 14.102.98.0/23 maxlen: 24
103.9.40.0/23 maxlen: 24
103.85.28.0/22 maxlen: 24
103.139.184.0/23 maxlen: 24
103.250.88.0/22 maxlen: 24
118.67.192.0/21 maxlen: 24
163.47.128.0/22 maxlen: 24
202.179.140.0/22 maxlen: 24
2404:e940::/32 maxlen: 32
2407:8b00::/32 maxlen: 32
2407:8b00::/36 maxlen: 36
2407:8b00:1::/48 maxlen: 48
2407:8b00:1000::/36 maxlen: 36
2407:8b00:1160::/43 maxlen: 43
2407:8b00:1162::/48 maxlen: 48
2407:8b00:2000::/36 maxlen: 36
2407:8b00:3000::/36 maxlen: 36
2407:8b00:9000::/36 maxlen: 36
2407:8b00:c003::/48 maxlen: 48
2407:8b00:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3977 (0xf89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Validity
Not Before: Jan 29 00:12:38 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=697aa5f6-99be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:66:dd:de:2b:7d:f3:2f:78:df:8e:0e:f4:
59:a2:a8:b7:ac:25:c3:ea:42:1a:ba:23:a0:fa:1d:
ff:94:17:62:98:af:a6:2b:97:e1:b0:bb:3f:f3:4e:
86:b7:04:7f:22:77:10:65:b3:0a:47:d1:70:bc:f0:
9c:54:3f:c6:a2:13:aa:f6:af:2a:90:31:66:e2:30:
0e:da:fc:31:0b:74:1b:dd:12:8d:48:7e:4e:df:a6:
e3:ee:d5:90:23:27:f2:fb:2c:7a:b7:eb:98:51:a4:
ed:7d:50:f0:37:42:b1:eb:ba:61:e2:f9:3a:1f:aa:
aa:80:1b:ea:3a:7b:d6:9b:a7:1f:93:21:6d:4e:83:
4f:f0:90:3a:8a:0c:a4:c6:1f:2b:5b:a2:fb:b1:b1:
73:08:f3:be:aa:58:75:11:c7:51:87:b3:d8:c7:ba:
64:b2:38:c1:8c:a8:b8:6e:bb:72:28:4e:26:ec:9e:
b6:0f:a3:b0:2d:6f:a2:6c:8f:7d:62:97:64:35:68:
d0:6d:a0:37:70:6c:8d:82:c0:98:f0:7f:ed:b8:92:
67:6c:a0:93:59:ba:d1:f2:12:dd:55:71:c6:3f:6d:
37:3e:7c:33:8c:d5:7a:5c:d2:88:da:60:27:4f:a2:
97:ab:98:6b:9c:2a:c8:c1:aa:22:1b:84:54:c7:d8:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8B:C4:4C:E8:1D:31:A2:B9:17:EE:BA:56:D9:24:6E:05:6E:C9:73
X509v3 Authority Key Identifier:
keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.98.0/23
103.9.40.0/23
103.85.28.0/22
103.139.184.0/23
103.250.88.0/22
118.67.192.0/21
163.47.128.0/22
202.179.140.0/22
IPv6:
2404:e940::/32
2407:8b00::/32
Signature Algorithm: sha256WithRSAEncryption
cb:f6:62:aa:17:67:c2:be:db:a5:22:ff:87:d9:ea:7b:38:3b:
91:88:cc:0c:56:74:1e:98:b6:64:70:b2:6c:16:fd:39:f2:91:
e6:7a:90:5c:d7:30:9e:dc:6a:e4:74:0a:fb:78:e4:a6:36:4c:
70:22:3c:d7:88:bc:ae:d8:56:fc:3d:28:74:cf:b8:47:91:e4:
8c:d2:bd:6e:33:df:3b:94:03:d4:4c:be:8e:65:3c:a4:5e:70:
be:73:68:f5:b2:2d:22:e3:8b:9e:18:58:1b:a0:be:c0:14:0f:
fd:0c:d4:7d:3e:49:84:c2:28:f8:79:88:8d:02:33:89:4f:81:
0c:cc:79:4b:4b:69:7c:38:98:60:b7:79:af:94:5d:5e:3d:1e:
3b:fc:12:23:b5:3c:42:30:17:58:e3:58:21:13:c0:93:25:b4:
db:7c:fd:ec:3d:96:12:8c:6a:4e:c9:f5:40:0f:31:d2:63:f6:
4b:e4:9f:91:0b:37:34:46:b4:70:c5:d5:cf:9f:ab:7d:de:bc:
63:e7:64:e3:76:21:1f:ba:99:3b:12:c1:f6:5d:2b:cc:4c:28:
04:64:bd:96:dc:49:fa:5c:b8:77:09:fe:68:f0:2f:f8:04:13:
f7:8f:94:c9:83:41:46:68:b4:04:e8:1e:fc:ad:3b:53:e4:83:
1c:5a:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:10 2026 by rpki-client