
$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/7A7B776A1F0E11EA92AA6824C4F9AE02.roa
File: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (raw, json)
Hash identifier: gxk+S+SUlMn2ngV82PSC9JOZzFOOnOePusJT8k4+nyo=
Subject key identifier: 79:52:DA:B7:85:0C:76:90:05:9F:9F:AC:D4:7B:7E:C0:75:A7:41:97
Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial: 0C7C
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/7A7B776A1F0E11EA92AA6824C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:02:18 +0000
ROA not before: Wed 18 Dec 2024 19:17:26 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 139849
IP address blocks: 103.146.66.0/23 maxlen: 23
103.146.66.0/24 maxlen: 24
103.146.67.0/24 maxlen: 24
2001:df2:4e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Validity
Not Before: Dec 18 19:17:26 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69a4630a-9893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:25:cf:f1:a2:e2:13:b5:04:f4:6e:67:3d:
b4:8e:8d:fb:fb:80:f2:e0:2f:7a:5e:50:12:10:24:
af:5b:79:11:8d:dc:1d:56:74:4e:e0:d6:ae:76:91:
99:ee:f0:70:9d:08:db:83:1b:bf:c6:a4:cf:88:73:
eb:f6:2e:93:f8:63:d3:91:38:8f:26:e9:f0:cf:26:
e1:3d:d2:56:89:90:e0:2d:a1:2a:7d:9d:ff:46:6a:
f4:37:2e:83:18:65:d0:70:fa:13:88:cf:82:2e:d1:
c1:9e:a5:52:41:c2:9a:13:81:4c:a8:8b:03:70:d1:
3c:f3:3d:5b:36:7b:a4:51:28:d8:f7:d3:7e:91:95:
28:a6:37:f3:dc:d5:19:a7:cc:42:b7:85:27:1d:4e:
00:4a:36:3f:e4:99:13:67:9d:6c:98:aa:04:d6:6f:
eb:05:78:32:d5:32:44:a5:a5:a8:d4:6c:3a:57:9d:
07:87:da:99:52:4e:8f:5d:98:d5:6c:36:9a:c9:f3:
2f:f5:64:ba:c7:6f:00:01:16:72:22:35:b5:97:56:
7a:49:e5:63:97:a1:20:ac:81:3d:4c:b2:98:aa:ca:
7c:8d:22:0a:64:b0:a3:05:45:c3:b9:72:58:e1:6f:
10:02:43:f3:0e:a4:bf:13:95:d8:d6:09:63:31:9e:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:DA:B7:85:0C:76:90:05:9F:9F:AC:D4:7B:7E:C0:75:A7:41:97
X509v3 Authority Key Identifier:
keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/7A7B776A1F0E11EA92AA6824C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.66.0/23
IPv6:
2001:df2:4e80::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b0:f3:64:5d:dd:4f:37:85:a4:64:9b:49:f4:d3:33:8e:4f:
bc:c6:93:0f:71:df:c0:97:69:3d:0c:84:1e:88:dd:56:c8:3e:
bd:95:e1:48:c8:35:7e:d6:7f:44:c3:f2:61:ef:12:ae:41:cd:
f1:df:f5:63:61:7d:aa:b4:00:c7:97:10:20:d8:7c:ce:f7:3c:
d7:ef:ff:88:0d:fe:14:66:40:d0:2a:69:5c:de:2f:88:6f:9a:
f0:2f:e8:91:e1:6e:4f:b1:6a:5b:e2:55:ef:a2:f2:e4:5d:e0:
ba:77:82:bb:bc:05:1e:53:0d:45:01:42:c8:40:dd:b8:1a:b3:
4a:82:bd:7b:bf:17:dd:4c:a5:00:81:82:56:ab:86:67:41:77:
a8:34:d0:8c:9e:22:0d:ae:0c:e3:5f:88:2b:f8:11:a5:06:ef:
52:52:bc:9e:bd:db:f3:85:be:a6:e7:5c:3f:64:e9:c9:cc:2a:
d3:5a:6a:28:30:e3:61:5f:14:b6:9f:85:63:75:68:f0:86:b9:
a3:ee:92:b0:79:75:d8:7b:a2:1d:b0:89:e7:68:cc:80:fe:f7:
7c:b9:ba:b9:1f:8d:23:f4:2c:09:14:ff:ae:32:ec:dc:36:c7:
8d:1e:ea:88:53:cc:3f:3c:03:c1:f6:8a:0b:20:00:2b:ac:c7:
26:12:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:07 2026 by rpki-client