
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa
File: 47772F946C2011EAA5965B3CC4F9AE02.roa (raw, json)
Hash identifier: V9h//kX9bm3FcnRnBpWWd7+JfT/Z/sJHWRFvOyrgJiY=
Subject key identifier: 05:1D:4B:2E:A9:F8:95:8B:C3:34:F1:88:48:94:D3:A3:30:61:BB:F7
Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Certificate serial: 0ABE
Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa
Signing time: Wed 04 Feb 2026 19:16:27 +0000
ROA not before: Wed 04 Feb 2026 19:16:27 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133932
IP address blocks: 103.44.223.0/24 maxlen: 24
103.76.3.0/24 maxlen: 24
103.76.28.0/23 maxlen: 24
116.206.84.0/22 maxlen: 22
116.206.84.0/24 maxlen: 24
116.206.85.0/24 maxlen: 24
116.206.86.0/24 maxlen: 24
116.206.87.0/24 maxlen: 24
2402:1040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750 (0xabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Validity
Not Before: Feb 4 19:16:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69839b0b-1079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2f:b8:67:8e:3d:91:57:39:27:2f:b6:51:17:
7c:56:d7:34:11:12:d8:42:97:d0:f1:52:2b:62:fa:
04:53:58:66:33:1f:51:60:d7:74:5c:98:af:90:33:
8c:91:ed:2c:89:72:1c:65:a0:9f:c9:0d:9e:c9:eb:
c6:2c:91:f4:48:17:94:a6:79:43:54:41:1b:1c:a3:
fd:10:64:62:46:b6:fd:3c:2b:5e:e2:0e:36:eb:f2:
1a:6c:bc:da:4e:5b:dc:4f:ff:1e:74:04:54:39:7b:
c6:39:09:51:36:e1:4f:66:a5:ec:9a:73:44:95:1f:
71:81:33:f9:e2:f7:ec:c8:55:e2:4b:b3:d1:64:bb:
65:3a:26:67:98:a7:dc:b2:43:a4:23:cf:f4:ad:63:
38:05:bc:d9:41:aa:35:02:9a:91:50:9b:cd:37:0a:
c6:56:dc:eb:09:95:ba:73:61:33:00:35:31:71:ce:
32:f7:99:fd:63:12:94:4b:63:3c:b8:45:e8:a8:96:
c6:ee:b1:12:a0:65:ac:65:ca:36:09:9b:15:cc:7d:
73:94:9b:84:26:1d:21:64:fc:84:34:99:b5:02:1f:
4a:08:c4:d4:b9:83:6d:5c:64:65:97:99:62:0d:97:
7f:39:42:bf:00:54:66:64:fd:30:ef:a3:05:a2:86:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1D:4B:2E:A9:F8:95:8B:C3:34:F1:88:48:94:D3:A3:30:61:BB:F7
X509v3 Authority Key Identifier:
keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.223.0/24
103.76.3.0/24
103.76.28.0/23
116.206.84.0/22
IPv6:
2402:1040::/32
Signature Algorithm: sha256WithRSAEncryption
0f:1f:28:fa:92:3f:f6:b7:7c:f2:cc:95:fd:a2:59:2d:26:08:
4a:7d:bb:8f:5f:7a:f1:cc:3d:64:82:5b:18:13:ad:72:cc:19:
7d:79:7b:ad:84:98:27:e3:1c:c4:4e:45:c5:f1:06:1a:61:25:
e4:89:3c:d4:48:c4:ea:1e:34:20:e2:59:d9:54:74:94:a6:a6:
39:64:94:56:fd:a0:8b:3a:f3:31:6a:50:0c:99:39:1b:da:f2:
a4:7b:fd:b3:fe:1f:74:20:f2:d6:3b:1f:e1:35:81:41:64:b0:
1a:28:e4:35:a1:81:c2:e6:f8:42:bf:61:6a:7e:87:b8:3b:18:
4e:40:95:ac:bf:75:96:61:64:ad:74:f6:94:c2:59:3f:86:98:
99:59:5a:7a:35:21:64:ad:b4:64:9d:ed:f4:36:69:46:7e:28:
0a:59:05:ae:49:6b:a8:6b:31:f3:16:57:fa:8c:56:82:eb:3e:
0f:75:32:c2:a9:98:20:1b:47:04:68:9b:d5:36:fe:f4:f5:57:
d6:ca:2e:1c:51:46:b9:da:97:f9:b0:9e:e1:45:78:0c:29:91:
61:a6:c1:7d:a3:ef:b1:c8:68:59:91:65:65:f2:54:8f:45:60:
cf:60:80:c7:2f:c4:3c:f0:74:8d:ee:17:8b:e8:34:f7:70:57:
f1:eb:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:53 2026 by rpki-client