
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/76B542B0A84011F194FA91243A11F970.roa
File: 76B542B0A84011F194FA91243A11F970.roa (raw, json)
Hash identifier: Ikz0D3kqkyqo0E9vWshLiMP6ATZdwtVz365rPjNjhYQ=
Subject key identifier: 10:7B:68:51:80:C7:13:1A:4D:57:3F:54:F2:30:D4:DF:D6:A3:A4:B9
Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Certificate serial: E1
Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/76B542B0A84011F194FA91243A11F970.roa
Signing time: Fri 04 Sep 2026 09:20:32 +0000
ROA not before: Fri 04 Sep 2026 09:20:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136167
IP address blocks: 103.143.92.0/23 maxlen: 23
103.143.92.0/24 maxlen: 24
103.143.93.0/24 maxlen: 24
202.75.248.0/22 maxlen: 22
202.75.248.0/23 maxlen: 23
202.75.250.0/24 maxlen: 24
202.75.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 07:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Validity
Not Before: Sep 4 09:20:32 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a9a8d5f-5d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:b9:78:c2:e8:5e:91:bc:55:1d:b9:11:be:
cd:a6:9d:b7:dd:33:c2:0f:64:c4:05:b9:a5:27:88:
29:ee:59:c1:30:0e:08:55:12:0c:11:0a:8a:21:ea:
eb:05:1d:19:e4:be:7d:38:77:fa:ce:0a:f3:cb:d7:
a6:ad:8b:81:28:e8:bd:47:74:f4:b4:23:5d:11:e8:
34:ed:29:6c:f7:8c:59:9f:85:8c:85:e8:be:5b:d2:
43:26:a9:e1:c2:aa:75:e9:6e:cc:85:b8:ef:be:8b:
be:ba:24:f6:58:19:0f:8d:59:c1:a3:42:18:93:f4:
a6:07:c9:85:d0:96:8e:34:ea:03:a9:9a:bc:d7:df:
8b:57:3d:b9:10:c4:cb:05:0f:a5:87:75:83:44:fd:
98:ed:35:df:3a:1e:f5:bf:9f:7b:5f:74:8f:cd:c3:
c9:d7:6d:59:33:54:40:a9:45:67:5e:f6:c7:f0:42:
c2:5f:1d:33:24:9f:1a:30:99:f4:2e:3e:11:4e:99:
1d:cd:9b:f2:1c:82:9e:7a:ad:f4:9c:a6:38:20:4b:
9d:f2:19:f7:3c:26:fa:0e:2c:67:79:15:6c:8b:b7:
be:e1:f4:bf:c7:a0:fe:b5:72:64:74:c0:22:6a:05:
d1:75:79:86:2b:61:96:a0:3f:a6:31:f1:88:7b:5c:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:68:51:80:C7:13:1A:4D:57:3F:54:F2:30:D4:DF:D6:A3:A4:B9
X509v3 Authority Key Identifier:
keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/76B542B0A84011F194FA91243A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.92.0/23
202.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:6c:a0:a8:80:76:9c:ac:ea:a0:c8:62:b2:4e:7c:05:73:0f:
43:b1:e1:16:5d:14:d0:7d:9b:bd:75:4a:ed:5c:96:c7:2d:eb:
74:51:6b:45:52:d4:70:fe:b4:38:12:71:de:45:60:4a:b4:aa:
31:ce:d6:7a:96:13:94:52:c1:89:8f:78:04:ea:f5:07:9d:56:
79:04:de:62:e7:6b:4c:f3:a2:da:e0:75:1c:06:ea:e1:7c:2f:
4b:ef:95:cb:03:5b:75:e8:03:20:5d:f7:cd:41:da:48:10:fb:
6d:b4:10:f3:53:d2:76:ff:2b:eb:87:9b:be:a1:95:67:14:56:
38:e2:d8:4b:23:8b:d8:7a:9a:77:78:5a:3f:ed:c9:f5:e5:74:
65:43:19:9b:65:8f:0b:8c:82:bf:de:eb:4a:13:20:4e:e6:5c:
38:52:37:bc:bd:0e:30:f1:a4:30:e1:5d:9d:9c:cd:67:6b:92:
23:1b:26:9d:df:66:65:81:0e:9c:3d:79:26:22:85:ad:68:01:
ed:50:c1:8c:a2:16:bd:2e:92:b0:64:98:25:55:8c:e0:54:f9:
71:cd:a4:89:e5:2f:e4:c0:96:3e:fa:e8:5a:7a:8a:46:5b:5e:
94:0a:b4:a4:d5:f9:7e:ce:87:f5:e1:b4:b6:67:b9:8d:89:45:
85:b0:cc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:26 2026 by rpki-client