
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/76D38708D64611EE98C44371C4F9AE02.roa
File: 76D38708D64611EE98C44371C4F9AE02.roa (raw, json)
Hash identifier: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=
Subject key identifier: 4E:5E:9C:97:B7:89:2F:E9:F2:D7:FA:D6:0B:43:6F:57:69:AB:C0:C1
Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial: 0B64
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/76D38708D64611EE98C44371C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:38:18 +0000
ROA not before: Fri 22 Aug 2025 19:59:11 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135341
IP address blocks: 103.120.44.0/24 maxlen: 24
103.120.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2916 (0xb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Validity
Not Before: Aug 22 19:59:11 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a45d6a-19b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:45:ad:45:11:3b:29:3f:0e:6e:c7:1b:ab:
84:b6:52:9f:b5:34:a2:62:3d:5f:8c:dd:4e:5b:ff:
d3:ab:eb:1b:af:45:1c:7b:a7:f6:42:6f:c6:51:80:
a8:70:76:7a:6c:53:2c:03:3a:0c:70:89:c6:26:eb:
de:85:0c:11:f9:7a:5a:5b:6d:ed:48:9a:4e:70:7e:
3f:d5:54:39:5f:85:53:e9:d7:0b:b9:ac:89:22:3d:
0d:0d:69:d4:75:5e:7b:3e:50:8d:26:1c:ed:13:cc:
7e:96:c2:89:56:eb:f8:3b:b6:92:70:6f:94:e3:a7:
d9:90:0a:78:64:7e:b9:66:6a:af:0a:60:36:17:38:
40:68:8e:bb:7b:c7:8f:e1:1e:d2:5e:47:d7:1b:f9:
24:46:3e:f9:c4:55:f7:a0:b3:64:ee:d7:b2:08:31:
c0:fc:dc:3c:95:72:0d:fd:a7:71:5e:1c:ee:59:82:
3c:01:24:2c:aa:34:92:8b:ff:6a:53:dc:6f:34:e1:
6b:82:4a:63:85:9c:46:d5:d7:b0:c9:31:0c:e9:a2:
78:e9:c7:a1:cf:18:2e:9b:93:3c:48:e9:21:1c:60:
31:98:8f:8e:69:c4:32:3b:ea:21:ed:5d:5e:a8:34:
b2:97:4b:b3:6b:d5:24:f7:62:86:17:46:50:9e:56:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5E:9C:97:B7:89:2F:E9:F2:D7:FA:D6:0B:43:6F:57:69:AB:C0:C1
X509v3 Authority Key Identifier:
keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/76D38708D64611EE98C44371C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.44.0/23
Signature Algorithm: sha256WithRSAEncryption
15:16:ff:36:35:73:28:c7:ae:4d:e0:12:3d:ef:25:7f:0e:0e:
35:33:6f:6a:11:73:72:66:ac:1a:da:21:8c:f5:ec:f4:08:97:
b9:82:5d:4b:3e:76:9e:7e:46:f6:88:ae:96:dc:64:1b:04:c7:
15:ac:8e:08:f7:50:fa:1d:90:8f:5b:09:b5:5d:f1:6d:77:eb:
57:1b:0d:44:17:be:13:0c:91:7d:02:38:02:c7:5f:86:ea:66:
95:17:2b:0b:8c:95:9a:48:a5:29:4d:39:1c:29:15:38:e5:f0:
86:2f:87:4e:80:bf:55:a3:7b:cd:f1:65:59:e6:d7:d9:90:81:
b8:26:2f:af:e1:d3:aa:99:ec:af:bc:d6:a1:3f:d5:a0:dd:5b:
e3:75:79:f2:39:be:59:6e:c3:2c:30:e7:1f:08:b3:d5:ab:f2:
56:83:82:ae:d7:c4:54:f8:4b:ca:99:fe:b2:cc:69:9d:f9:d0:
00:fb:be:25:3a:8e:20:43:ed:9a:14:6b:92:c4:91:dd:b8:d2:
f1:10:83:4c:69:36:8b:df:07:8e:cc:a5:e0:0f:46:59:bc:94:
d6:83:7c:6b:c1:14:e1:eb:52:5a:d6:29:1e:3d:0c:50:c9:16:
81:18:d7:c1:aa:66:72:60:77:1e:d6:6a:4e:d7:ce:b6:9b:ad:
80:19:bb:e8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz
OTBGQjEzMzEwHhcNMjUwODIyMTk1OTExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWQ2YS0xOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBdFrUUROyk/Dm7HG6uEtlKftTSiYj1fjN1OW//Tq+sbr0Uce6f2Qm/GUYCo
cHZ6bFMsAzoMcInGJuvehQwR+XpaW23tSJpOcH4/1VQ5X4VT6dcLuayJIj0NDWnU
dV57PlCNJhztE8x+lsKJVuv4O7aScG+U46fZkAp4ZH65ZmqvCmA2FzhAaI67e8eP
4R7SXkfXG/kkRj75xFX3oLNk7teyCDHA/Nw8lXIN/adxXhzuWYI8ASQsqjSSi/9q
U9xvNOFrgkpjhZxG1dewyTEM6aJ46cehzxgum5M8SOkhHGAxmI+OacQyO+oh7V1e
qDSyl0uza9Uk92KGF0ZQnlbGCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE5enJe3
iS/p8tf61gtDb1dpq8DBMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2
QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc4RDUvNjAxMzIxNjA1NkM4MTFFQUI2NjU3QTQwQzRGOUFFMDIvNzZEMzg3MDhE
NjQ2MTFFRTk4QzQ0MzcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ3gsMA0GCSqGSIb3DQEBCwUAA4IBAQAVFv82NXMox65N4BI97yV/
Dg41M29qEXNyZqwa2iGM9ez0CJe5gl1LPnaefkb2iK6W3GQbBMcVrI4I91D6HZCP
Wwm1XfFtd+tXGw1EF74TDJF9AjgCx1+G6maVFysLjJWaSKUpTTkcKRU45fCGL4dO
gL9Vo3vN8WVZ5tfZkIG4Ji+v4dOqmeyvvNahP9Wg3VvjdXnyOb5ZbsMsMOcfCLPV
q/JWg4Ku18RU+EvKmf6yzGmd+dAA+74lOo4gQ+2aFGuSxJHduNLxEINMaTaL3weO
zKXgD0ZZvJTWg3xrwRTh61Ja1ikePQxQyRaBGNfBqmZyYHce1mpO1862m62AGbvo
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:14 2026 by rpki-client