
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/76987158273511ECB7FB443DC4F9AE02.roa
File: 76987158273511ECB7FB443DC4F9AE02.roa (raw, json)
Hash identifier: u28XQ2Td7hojEBJzqFeuazgfLz/F072ZW0Ranfc1ZZM=
Subject key identifier: EA:31:F7:30:9F:2F:07:AF:50:8E:B3:C3:BB:42:E0:EC:F0:13:46:0F
Certificate issuer: /CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
Certificate serial: 0558
Authority key identifier: A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/76987158273511ECB7FB443DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:43:05 +0000
ROA not before: Mon 24 Nov 2025 22:44:21 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147184
IP address blocks: 103.174.68.0/23 maxlen: 23
103.174.68.0/24 maxlen: 24
103.174.69.0/24 maxlen: 24
2407:fe40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl
rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B9F, serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
Validity
Not Before: Nov 24 22:44:21 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43459-8ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:e7:bc:27:36:f3:9c:df:d0:38:85:ae:e1:
9e:87:5f:6e:c8:46:e1:b0:39:e7:0b:8a:06:9c:ad:
b1:e8:be:b5:70:9b:0c:cf:28:44:7a:64:31:ba:53:
3e:84:7e:2a:77:76:40:1d:72:b6:e1:fa:6a:36:29:
74:26:ee:4a:d4:26:50:3b:41:cc:ce:c2:ad:92:e9:
6d:b2:01:4a:a0:49:5b:9e:06:db:6e:24:9e:f0:a0:
41:ff:28:6f:55:60:42:d2:51:96:ac:02:32:ed:53:
2c:9c:b2:63:94:5b:4c:b0:3d:6a:41:6f:02:96:df:
74:39:67:93:ff:a2:bb:07:f6:08:8a:66:08:eb:55:
84:55:b8:85:66:de:f7:c7:8b:d8:8c:49:f4:4f:07:
e8:b8:4a:cb:78:2e:fe:84:33:b3:6d:f9:62:c4:e0:
7e:e4:94:6f:5e:37:77:fd:6e:5c:9a:a3:1b:58:22:
bd:b2:15:6b:50:39:35:f9:06:7a:da:53:36:55:73:
dd:c8:24:8e:6c:c2:e8:3b:c4:69:26:da:db:f1:57:
47:25:93:c9:de:5a:1f:24:dc:49:e1:11:4b:74:6c:
a1:94:eb:5c:fe:d1:35:4a:28:ed:fa:74:1d:98:de:
56:c0:54:8e:d1:2e:80:14:3e:f6:f9:2a:7b:78:ec:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:31:F7:30:9F:2F:07:AF:50:8E:B3:C3:BB:42:E0:EC:F0:13:46:0F
X509v3 Authority Key Identifier:
keyid:A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/76987158273511ECB7FB443DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.68.0/23
IPv6:
2407:fe40::/32
Signature Algorithm: sha256WithRSAEncryption
74:4f:ca:4f:b0:a9:cc:64:ae:78:34:f5:8b:3f:c6:09:70:b0:
7a:e2:8a:9c:a6:ef:1e:9c:25:27:52:b7:07:ee:61:bb:9c:51:
a5:98:54:37:56:2e:0c:3b:24:32:04:44:ff:4d:d4:29:8c:d1:
5b:25:d6:55:06:9c:0a:7c:81:71:c7:47:a1:56:77:38:13:a3:
9d:21:a5:b5:9e:77:c9:48:df:9d:22:08:27:a5:1c:dd:0d:45:
09:19:c3:a7:f2:9c:0d:77:d8:ff:c5:45:e7:83:de:b8:8f:2b:
bb:7c:79:b5:2c:c0:9c:e8:b0:6b:8c:0b:c8:11:ad:a7:ff:e6:
f2:91:ad:a5:dc:bb:7c:21:be:44:ff:a0:bb:52:19:40:bf:79:
21:49:ac:eb:82:af:b6:0a:c5:35:da:ab:2b:4e:4f:5f:79:d8:
30:7f:96:cb:dd:2a:33:12:a9:8f:3a:b3:db:be:c7:c9:01:fb:
a7:7c:df:9c:b9:cb:25:ac:bf:1a:1a:9c:a5:e4:38:fb:82:dc:
aa:03:b6:73:57:6e:67:44:50:0a:36:71:45:17:9d:f1:4b:67:
f1:15:94:19:b1:a9:a3:56:62:73:66:0c:1d:9d:81:a0:b3:ae:
e5:24:38:47:6e:06:93:03:6c:46:87:6b:8a:f7:20:2b:9a:a8:
51:2d:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:47 2026 by rpki-client