
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/5A76CDC2989511EC821F343DC4F9AE02.roa
File: 5A76CDC2989511EC821F343DC4F9AE02.roa (raw, json)
Hash identifier: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=
Subject key identifier: EC:23:36:40:77:A9:1E:DF:16:9A:C7:7D:E6:C8:DC:29:EA:61:AA:38
Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial: 045D
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/5A76CDC2989511EC821F343DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:39:16 +0000
ROA not before: Sun 21 Dec 2025 00:20:39 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4755
IP address blocks: 103.82.176.0/24 maxlen: 24
103.82.177.0/24 maxlen: 24
103.82.178.0/24 maxlen: 24
103.82.179.0/24 maxlen: 24
2400:8740:1000::/48 maxlen: 48
2400:8740:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Validity
Not Before: Dec 21 00:20:39 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46bb4-2f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:85:e4:e6:d8:c1:c5:1c:4b:5a:8f:c4:52:
c6:5a:55:ab:70:9e:87:43:c0:2a:08:42:68:fa:74:
12:78:c5:37:2e:c2:af:f8:47:53:c5:5d:05:3c:db:
e1:e4:f8:17:94:34:3a:95:22:d3:0c:f3:4d:5c:7d:
c5:8e:70:78:98:3c:a6:1a:04:53:e3:a7:6d:3e:b5:
7e:f0:09:dc:f4:58:9a:69:0d:25:4d:21:08:f1:66:
7d:35:a4:c7:b3:19:52:1d:f7:2c:f4:19:3b:f8:9b:
ba:08:3e:b8:1e:f9:27:24:e9:07:a7:2d:10:8f:49:
1b:02:d6:c6:ea:c3:c7:b3:22:18:89:03:a4:09:7a:
e2:2a:00:26:7d:97:87:e5:7b:4e:c3:c9:b0:3c:5c:
98:c1:0b:05:e1:35:3f:98:ac:c1:fd:57:b1:a7:51:
82:e7:f8:8e:e2:be:29:98:1d:30:36:d5:30:4f:d5:
0d:cc:c8:b6:35:eb:10:f1:4b:66:0d:77:8a:c0:4f:
0e:6b:0b:5e:94:46:4f:d9:28:ad:e8:00:6d:3c:92:
83:6d:80:79:04:e6:a3:af:b2:39:8b:b2:15:0b:35:
9d:b0:b5:af:19:75:74:36:0c:6a:33:3c:44:6d:b1:
b6:e2:bf:59:53:b6:f4:b2:4b:9e:5b:2a:ab:e4:fd:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:36:40:77:A9:1E:DF:16:9A:C7:7D:E6:C8:DC:29:EA:61:AA:38
X509v3 Authority Key Identifier:
keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/5A76CDC2989511EC821F343DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.82.176.0/22
IPv6:
2400:8740:1000::/48
2400:8740:2000::/48
Signature Algorithm: sha256WithRSAEncryption
35:7c:8c:c5:41:0e:36:89:99:33:f0:c4:46:ca:81:44:a7:d8:
7e:b7:22:28:1b:2a:4c:fe:5f:6c:43:d3:44:12:4a:dc:31:4b:
48:cc:ff:b6:52:d5:6f:4e:a4:81:32:51:b1:74:dc:06:66:5b:
da:26:59:23:db:1d:ab:8e:a3:06:d8:a8:4b:2a:3c:ad:c8:7f:
e2:05:86:e4:4c:f6:bd:5c:ba:97:bd:8f:a5:b6:fe:c1:e6:07:
41:1b:c8:cc:34:f7:64:67:51:4e:a5:cc:12:16:bb:85:f1:ae:
d0:b9:e6:e9:bc:99:13:76:2f:ab:09:05:35:c5:4b:ee:b3:34:
f7:44:c6:01:7d:6e:50:88:c3:26:e4:4b:26:cd:8b:62:62:17:
97:76:4c:27:70:99:76:65:62:a8:70:63:7f:3d:3f:27:8d:d8:
94:6c:cb:3e:72:98:55:e1:12:64:d3:30:82:d9:bb:80:50:a4:
16:5a:29:41:90:60:3a:d0:ef:8c:1c:2f:7c:e5:2d:b3:c9:d5:
a1:2d:9c:c0:3b:b1:a9:5b:7c:45:58:a1:6b:a0:1f:79:66:2f:
b4:a4:d9:15:be:48:b0:4e:5f:b6:f4:9d:f3:96:73:54:f1:c3:
d7:60:2b:0b:e4:36:1b:bd:16:93:5e:66:7f:a4:28:df:6a:a2:
b1:71:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:22:20 2026 by rpki-client