
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/76EBCD3E8C9911ECB051A327C4F9AE02.roa
File: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (raw, json)
Hash identifier: OGqOgm3nQncPcQUxx+QCyB0KfEtllMtvhNbnJdM5GOE=
Subject key identifier: 8E:40:3C:80:27:D9:7A:1B:0E:66:BE:59:B0:6E:C1:9F:F1:C8:E9:44
Certificate issuer: /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial: 04C5
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/76EBCD3E8C9911ECB051A327C4F9AE02.roa
Signing time: Wed 09 Sep 2026 00:49:37 +0000
ROA not before: Wed 09 Sep 2026 00:49:37 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 139652
IP address blocks: 103.143.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Validity
Not Before: Sep 9 00:49:37 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa0ad21-eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:a7:67:19:c3:32:4b:aa:de:df:d8:ef:f4:
5b:17:d9:d9:14:84:cd:79:98:32:d2:2a:36:53:b8:
62:ed:75:47:07:44:c3:0c:dd:0a:27:ee:dd:51:39:
a7:d8:d2:02:9e:33:fc:01:8f:26:27:ee:f5:a1:5c:
f4:89:bb:58:6d:3a:f4:b8:60:bd:68:84:23:36:f2:
7c:0c:5d:36:4a:3e:08:08:10:be:fa:9d:bb:82:22:
a4:5f:67:15:d5:73:3b:5e:a7:44:77:19:67:ee:30:
ed:bc:5f:92:33:4c:84:9a:8e:14:1d:aa:43:61:ab:
97:8d:d1:ba:80:80:87:06:46:06:1d:eb:87:42:1b:
3e:4d:ce:a6:48:f0:93:f4:cc:28:71:1f:87:7d:6a:
f0:a6:4f:70:37:65:98:cd:20:b7:7a:ce:92:bc:72:
c0:be:12:26:34:40:37:0e:c9:e1:e0:86:e0:d2:69:
1d:48:ce:ec:dd:4a:62:20:ba:63:50:bc:c5:66:52:
3c:5d:ca:05:86:0e:e7:0b:18:9e:ca:d0:7c:e0:7d:
6a:26:72:2c:2b:06:fe:46:76:31:ea:ac:0f:54:d3:
aa:63:16:12:b9:b9:75:a4:15:ad:d8:16:44:f2:9d:
fa:9a:0f:e3:56:cf:c9:8c:f7:a6:5a:fd:c3:89:8f:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:3C:80:27:D9:7A:1B:0E:66:BE:59:B0:6E:C1:9F:F1:C8:E9:44
X509v3 Authority Key Identifier:
keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/76EBCD3E8C9911ECB051A327C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.42.0/23
Signature Algorithm: sha256WithRSAEncryption
64:a9:94:b4:ae:28:77:e7:61:f4:31:01:8c:0d:d4:bd:22:fd:
e6:04:1c:4e:be:78:8a:cf:0a:0b:d8:8a:30:25:9a:d7:a0:9e:
b9:44:af:b7:80:48:f1:98:0e:1c:db:aa:a5:32:cd:3a:85:28:
8e:01:e7:b8:a6:35:7d:80:2c:3c:22:89:5b:07:50:3a:d1:e1:
20:70:61:de:00:53:82:26:9c:09:70:bf:39:86:b7:66:99:a7:
c1:bf:6f:fc:8c:7c:a9:3b:ee:fc:9e:4b:56:ee:69:06:8d:40:
eb:10:ea:c7:15:c1:bc:11:4e:37:72:ec:fa:83:19:95:ed:ad:
bc:be:52:b6:c4:18:d0:83:4c:bb:e5:12:03:1f:6b:e4:31:80:
af:25:32:18:86:97:0f:38:be:87:45:cd:78:bd:07:e6:f0:6b:
2c:3a:fb:08:16:00:04:f6:49:d6:2d:aa:2e:5e:b0:49:99:ef:
72:39:e5:75:ad:ef:10:38:f2:d5:c0:2d:bc:7b:82:be:1e:ab:
a2:a8:14:96:eb:83:bc:f8:22:be:56:3d:5b:83:9b:5a:24:35:
24:06:1f:8d:31:56:e7:56:7f:d1:94:9f:e0:a3:3e:01:00:18:
c2:e9:f6:3c:16:cf:02:c4:ac:e9:65:87:dc:c5:99:e7:2f:41:
45:3f:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:54:47 2026 by rpki-client