
$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
File: 8144C55412E611E98A4A6A35C4F9AE02.roa (raw, json)
Hash identifier: liMT6OAzfvJnsspgI1FzQ6ZwFHNyDq37HvK43oMb2f8=
Subject key identifier: 8C:BC:DB:2B:47:58:C2:C2:15:F6:2B:DD:AE:8A:9D:D1:DC:83:9E:DF
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1EB1
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:58:55 +0000
ROA not before: Tue 18 Nov 2025 16:04:12 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133749
IP address blocks: 103.76.40.0/22 maxlen: 22
103.76.42.0/24 maxlen: 24
2407:6180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7857 (0x1eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Validity
Not Before: Nov 18 16:04:12 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4704f-a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:3e:96:ad:73:77:04:3c:e2:cf:46:38:4e:
2d:a4:78:12:68:83:14:86:fe:73:66:4d:68:bb:15:
1d:35:48:ad:b6:7b:d1:c0:92:40:8a:8d:da:cb:f0:
18:81:cb:6f:36:b0:2c:e4:d3:e2:09:c1:0f:80:5c:
26:6a:f6:08:6a:c7:c2:1b:8f:e6:e6:e7:bb:29:77:
a1:bb:24:55:ac:5c:c0:93:93:71:9d:9b:d3:9e:c0:
51:8f:16:f7:1b:d5:7e:6c:4e:70:92:9d:a1:6b:d4:
ea:69:6f:63:c0:1d:c7:d4:ae:4e:85:aa:ef:67:10:
97:af:68:72:68:ef:a0:f2:5c:41:1b:f5:a6:44:d7:
d5:f6:a2:14:62:da:55:ee:0b:e3:7d:32:c9:76:18:
54:a4:da:df:f0:d6:05:99:18:a4:e7:52:10:d3:21:
4f:40:fe:1f:0a:1a:2e:b0:5b:21:6c:a4:3c:c7:97:
c1:aa:35:04:4c:9b:7a:49:fe:82:78:82:92:ff:e0:
c8:36:c3:9e:70:c3:a6:94:14:64:fd:23:77:58:4d:
e4:fe:a2:a7:e4:68:ab:d3:81:e2:c6:b9:27:1a:9b:
49:97:f4:57:df:4d:76:ac:b2:0b:a4:0a:93:22:09:
19:96:07:d2:2b:a5:05:b1:af:3a:5e:8d:2b:ad:83:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BC:DB:2B:47:58:C2:C2:15:F6:2B:DD:AE:8A:9D:D1:DC:83:9E:DF
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.76.40.0/22
IPv6:
2407:6180::/32
Signature Algorithm: sha256WithRSAEncryption
50:a4:04:55:53:2e:6d:06:4e:48:0d:58:7b:8f:f7:b5:b3:3e:
ef:1b:ca:01:b4:55:88:36:7b:5b:1a:a0:a5:d5:5b:c5:c7:f6:
5d:e1:c3:36:fe:55:10:a1:67:8b:db:77:c6:38:06:62:8a:26:
75:fc:3f:16:75:97:73:b3:94:2d:01:7e:cc:f3:99:ac:98:cc:
0c:a3:a2:a9:40:80:2e:f2:d6:7d:96:37:56:a8:1e:33:2d:20:
d8:fa:1b:2f:d4:43:40:30:fd:56:8c:ae:85:51:2c:22:0a:72:
42:2a:7c:9f:24:8f:7e:12:a3:9d:ff:44:aa:04:a5:e0:e2:54:
8e:c1:be:91:98:30:5a:c0:b1:ff:a6:d5:a4:69:8e:d8:d2:44:
bb:12:27:3b:99:25:50:3a:c7:cd:64:ea:c1:fa:7d:18:03:6e:
43:eb:7f:b7:67:f3:95:0a:3d:86:ad:a1:b9:07:fa:68:ec:97:
96:ad:d6:6e:c1:2a:e3:45:30:ba:ec:b7:94:e5:d9:1e:89:ac:
c1:4e:50:08:4f:ea:ec:03:3f:cb:a6:86:ef:50:dc:ca:c2:d3:
2d:3a:55:26:21:7b:7c:fe:1e:91:65:12:0b:f0:30:3d:23:7c:
3d:e8:62:57:02:2f:f9:26:2a:e8:42:1a:2b:e5:97:0d:07:6a:
e5:ac:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:50 2026 by rpki-client