
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/746DFE7C37CE11F0A4C19C85C4F9AE02.roa
File: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (raw, json)
Hash identifier: mxO7b7RvGtlPB9HynwXd3uHeWp2ebdT0RMpPUyZ35Zw=
Subject key identifier: 10:8E:B0:00:5F:A3:6E:DA:91:3A:FA:A5:6E:4F:D8:3B:F9:5F:67:93
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 08D6
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/746DFE7C37CE11F0A4C19C85C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:43:14 +0000
ROA not before: Thu 04 Sep 2025 21:31:56 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142591
IP address blocks: 103.253.108.0/24 maxlen: 24
103.253.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Sep 4 21:31:56 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a488c2-125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:57:e2:0b:e9:29:62:e9:a3:ea:ed:a1:15:0c:
80:50:47:3d:14:26:1a:9c:56:23:1e:dc:a0:35:ad:
41:03:5a:79:45:89:63:65:3f:b4:af:5a:76:da:00:
c9:5b:28:19:92:77:51:43:54:56:40:89:8c:72:d6:
9d:8a:66:a5:66:7e:76:d4:75:b4:73:b9:64:59:1d:
30:46:a1:d0:1e:d8:8f:f0:2a:61:e2:ae:c4:4b:f9:
83:dd:da:1c:e8:67:6d:81:13:fb:82:c2:9c:c6:80:
e7:58:d9:b0:4a:fe:09:1b:ce:71:c9:3b:94:d8:7d:
11:c4:a8:06:2a:db:99:c5:ba:49:a6:88:ca:90:84:
d4:74:3a:88:09:73:b9:66:ce:c1:01:e7:f5:ed:7c:
58:cc:43:ed:f3:e8:51:2f:3e:8b:a4:18:2f:0f:9e:
e4:01:8b:03:ab:9e:4b:7d:d8:62:0a:d5:81:fc:5c:
dd:f3:ce:31:16:c8:5e:b2:fa:5d:7e:cd:3c:ea:97:
ac:ef:7a:a2:10:d8:77:0e:81:e5:3d:92:c3:77:bb:
29:98:e1:7a:0d:cc:2d:ef:88:00:c3:22:d8:3b:a7:
33:7b:8c:6c:2e:a2:bd:94:49:ed:7b:14:f7:43:1d:
d7:31:d6:36:c1:93:be:60:fd:17:df:a5:3b:6f:18:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:B0:00:5F:A3:6E:DA:91:3A:FA:A5:6E:4F:D8:3B:F9:5F:67:93
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/746DFE7C37CE11F0A4C19C85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.253.108.0/23
Signature Algorithm: sha256WithRSAEncryption
24:69:5b:04:15:29:1e:fe:90:27:f2:a9:50:b5:84:51:c8:09:
26:8c:1e:c7:08:68:e5:ce:1e:77:66:c9:4d:3d:1b:a1:d2:96:
33:4e:d3:39:a4:1b:23:cb:55:b4:78:0b:80:62:d4:66:ac:65:
bc:24:ae:68:30:f8:15:3c:e0:e3:dc:19:d6:8a:4d:e0:8e:15:
5f:a0:03:6e:7a:bc:c3:bb:99:00:6c:b8:2b:e1:d9:13:e0:a6:
10:65:45:a8:a7:39:db:cd:7b:a1:b4:f0:a6:e3:1c:53:16:2e:
2f:a4:5c:b9:52:35:89:0d:30:ac:d7:87:69:63:31:77:00:6e:
95:38:9f:e1:ed:ab:d2:16:4c:7a:c9:f0:4e:6d:16:cc:2d:d9:
c1:ff:06:58:5c:83:fd:8d:05:26:19:6f:6b:cf:dc:72:b0:65:
ba:95:50:47:96:7e:0e:46:a0:e0:be:5d:0c:91:7d:8a:42:83:
ce:9a:8b:0e:24:e2:f4:6d:93:da:79:2a:6f:2d:18:d5:39:94:
e0:d3:fb:c1:a7:5c:44:0a:23:77:6c:3a:eb:49:1d:3b:51:89:
b9:63:cc:a2:fe:7a:a2:f2:1e:3b:cb:31:f1:2e:74:d8:5d:93:
9d:d5:58:ed:16:f7:bd:35:14:2b:c6:a9:5f:ce:f2:72:36:35:
e9:25:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:28 2026 by rpki-client