
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
File: 7C76E4F6928611EE9B72027FC4F9AE02.roa (raw, json)
Hash identifier: YMhcpDTPJA2DPU9fu/BIg3xJ4TvxjpEOcB1pf1tlj+k=
Subject key identifier: 56:C0:DB:EA:D3:2E:61:D5:60:91:B0:42:F6:57:9D:1A:12:01:08:47
Certificate issuer: /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial: 01BA
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:19:50 +0000
ROA not before: Tue 23 Dec 2025 03:23:50 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 7474
IP address blocks: 103.126.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Validity
Not Before: Dec 23 03:23:50 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45916-ce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:41:e4:b9:20:25:b3:74:bb:5a:1a:5b:7e:
41:bc:8a:c6:54:dc:1a:61:db:74:0a:e0:49:32:d8:
29:06:6a:19:f5:17:04:2d:9b:d1:3f:db:b8:4b:89:
5e:83:f2:c7:e9:c0:08:4e:61:01:45:36:82:67:1a:
eb:1e:ef:f6:a9:8b:49:11:81:99:e0:9b:7b:5b:f0:
3d:5a:ac:4b:ed:b0:7d:60:68:5e:18:32:68:ad:5c:
92:3a:82:61:93:64:a7:96:8c:2c:63:9a:0f:ce:0f:
4b:5a:49:6f:37:29:b2:01:ee:11:63:8c:b7:5f:84:
2d:eb:9c:46:f9:a9:04:98:5a:d3:03:32:2a:f8:f8:
b2:21:33:62:66:c5:fb:19:39:2a:49:5c:e4:95:9a:
78:11:cb:b9:e9:56:01:34:6e:2c:74:d1:74:65:ce:
f5:22:26:87:0e:e8:f9:f2:86:88:a8:fc:cc:a7:3a:
7a:7b:11:6c:7a:76:24:14:79:fb:ec:a5:2b:8a:7a:
3d:d3:01:ca:49:91:61:89:2f:72:01:a3:d2:52:e4:
42:13:93:cd:00:c6:9f:1f:b2:df:04:cb:1a:a1:bc:
25:20:17:b6:77:06:30:9f:98:76:41:bd:18:d2:ae:
03:ac:bc:5e:9e:cb:f1:96:06:e4:0c:19:f7:c0:ee:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:DB:EA:D3:2E:61:D5:60:91:B0:42:F6:57:9D:1A:12:01:08:47
X509v3 Authority Key Identifier:
keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:76:6a:ae:46:68:ed:4c:c9:94:39:be:35:d5:1b:95:7b:9b:
bb:ac:df:b0:50:2e:89:93:4a:5f:8b:8b:14:ec:b7:98:90:87:
eb:bb:ce:0e:aa:06:fe:b9:1a:12:0b:71:d8:8c:13:19:f7:eb:
36:5c:21:a1:73:33:fc:c5:84:83:97:bb:b8:8b:2c:a2:2a:5f:
fe:ae:d8:bc:c3:6e:a1:d1:49:d7:c0:61:88:69:3e:cf:0d:df:
c6:0b:10:4a:15:e9:37:dd:f0:17:17:1c:5e:39:71:25:2c:23:
f2:02:e0:ca:79:8b:19:40:f6:7c:8b:3c:97:bb:a6:0f:0f:35:
60:76:29:d5:b0:ca:d8:07:3d:de:6d:97:bd:67:c2:dd:0b:88:
13:bd:46:17:53:aa:df:26:04:54:bb:86:10:23:64:9a:b5:39:
4d:85:5f:f0:9c:b0:33:a4:c8:8f:0b:6a:05:4d:1f:24:5e:f1:
0f:b1:4d:bd:a2:b1:4d:61:f1:0c:19:74:1a:f3:4f:e5:5a:ef:
57:f0:31:ea:9b:f4:02:cd:02:84:ec:27:0f:70:8a:30:a8:5b:
a1:10:ba:fb:8c:6b:8d:b9:4c:6e:56:7e:22:14:e7:19:25:bf:
4c:2f:e9:8e:b1:d4:56:03:7d:1c:cc:f6:c9:57:66:22:71:2d:
0c:0e:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:46 2026 by rpki-client