
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
File: 5E46267A46B111E98B793856C4F9AE02.roa (raw, json)
Hash identifier: alpoJ/dJyOOayO88hPVQWa6n17xwZWeFLTeDr+7hL4c=
Subject key identifier: C5:1C:E4:9E:C9:56:70:B3:18:6E:45:D1:B3:89:83:FA:FE:27:5C:2C
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 10E1
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:26:50 +0000
ROA not before: Fri 02 May 2025 17:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136518
IP address blocks: 147.76.54.0/24 maxlen: 24
147.76.55.0/24 maxlen: 24
147.76.60.0/24 maxlen: 24
147.76.62.0/24 maxlen: 24
147.76.63.0/24 maxlen: 24
147.76.64.0/24 maxlen: 24
147.76.65.0/24 maxlen: 24
147.76.66.0/24 maxlen: 24
147.76.99.0/24 maxlen: 24
147.76.100.0/24 maxlen: 24
147.76.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4321 (0x10e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: May 2 17:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a468ca-0e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:78:63:0b:b0:aa:28:33:bf:fb:c8:ce:36:
82:cb:68:9b:91:63:da:d0:57:5d:e2:b4:67:1d:76:
90:cb:fd:29:55:2c:2d:45:68:75:09:a6:09:e6:3c:
c1:cb:37:e9:8a:6c:ba:af:75:87:31:12:57:1e:58:
bf:f6:5a:d2:8b:a2:61:07:b2:60:74:70:de:10:ef:
b1:9f:63:04:17:c6:e2:30:2a:74:88:53:f0:a5:d7:
bc:0a:51:0c:aa:d8:fd:d0:62:38:46:f9:1a:e5:e0:
96:a4:d6:07:1e:84:1f:d4:e5:e4:e4:44:c8:34:7b:
1b:0b:b6:cb:9a:9d:d6:c1:5c:fc:00:54:12:dc:d1:
b0:67:7f:da:d2:9f:f1:ca:2b:ad:a5:ea:d1:9d:c6:
ba:75:8b:35:20:de:bb:a5:2d:60:1b:1f:7d:78:1a:
90:fd:e7:dc:eb:a3:96:1a:2a:20:fe:f5:2c:2d:0e:
ad:2b:26:01:02:bc:26:c7:64:a7:ef:7e:76:c8:92:
31:fe:37:a2:c4:99:cb:15:fe:c3:41:07:80:6b:8c:
11:66:32:a0:b2:da:70:90:34:4f:58:6f:21:b2:7b:
b2:f8:cb:bc:57:be:92:70:61:56:1e:21:10:34:e8:
0e:be:89:67:d1:0c:08:b1:d5:d2:62:c7:0e:40:e5:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:E4:9E:C9:56:70:B3:18:6E:45:D1:B3:89:83:FA:FE:27:5C:2C
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
147.76.54.0/23
147.76.60.0/24
147.76.62.0-147.76.66.255
147.76.99.0-147.76.101.255
Signature Algorithm: sha256WithRSAEncryption
3c:7a:73:a8:06:09:1d:40:5a:5b:80:0b:84:a5:7c:ba:36:68:
96:cd:b1:bc:76:a3:c3:8a:da:10:a1:10:6e:f9:f3:9d:3d:74:
f4:5b:b1:bd:95:96:bb:7c:69:d2:61:c0:0a:aa:d5:e7:83:79:
77:ae:a7:17:99:eb:a4:f1:a9:c0:77:b6:d5:cf:b5:47:0a:9e:
c6:27:68:5f:9a:ab:63:3a:9f:12:ad:60:36:87:35:e2:0b:d3:
7d:c9:3e:96:c3:43:da:95:3d:4d:11:68:51:83:04:13:45:8e:
74:7a:4a:3d:77:fe:06:dd:20:e2:3b:64:b2:4f:be:9f:56:cf:
86:9e:08:0e:cc:bc:15:38:41:57:ca:a6:e2:a0:d4:e3:ba:ff:
40:51:d5:5e:82:91:c0:bc:d3:a4:4e:bf:8d:e2:04:37:51:f0:
70:7c:97:70:c3:01:73:b9:ad:2f:8b:df:c7:67:08:40:fe:84:
28:41:53:76:8d:89:35:70:27:11:b4:aa:2d:4a:cb:43:ae:0d:
52:a0:60:9d:46:ff:db:ac:a4:94:58:68:c4:c1:84:91:35:42:
b6:3a:b9:93:15:8f:39:7e:b7:13:f0:73:b3:9e:ed:a4:c3:45:
83:31:97:65:73:b7:e4:b7:a0:95:c1:37:37:59:4c:30:66:60:
fc:d9:58:0b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgICEOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG
NzkzRjQ3MDgwHhcNMjUwNTAyMTc1NzExWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjhjYS0wZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQR4Ywuwqigzv/vIzjaCy2ibkWPa0Fdd4rRnHXaQy/0pVSwtRWh1CaYJ5jzB
yzfpimy6r3WHMRJXHli/9lrSi6JhB7JgdHDeEO+xn2MEF8biMCp0iFPwpde8ClEM
qtj90GI4Rvka5eCWpNYHHoQf1OXk5ETINHsbC7bLmp3WwVz8AFQS3NGwZ3/a0p/x
yiutperRnca6dYs1IN67pS1gGx99eBqQ/efc66OWGiog/vUsLQ6tKyYBArwmx2Sn
7352yJIx/jeixJnLFf7DQQeAa4wRZjKgstpwkDRPWG8hsnuy+Mu8V76ScGFWHiEQ
NOgOvoln0QwIsdXSYscOQOVo9QIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFMUc5J7J
VnCzGG5F0bOJg/r+J1wsMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2
QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvNUU0NjI2N0E0
NkIxMTFFOThCNzkzODU2QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu
BAIAATAoAwQBk0w2AwQAk0w8MAwDBAGTTD4DBACTTEIwDAMEAJNMYwMEAZNMZDAN
BgkqhkiG9w0BAQsFAAOCAQEAPHpzqAYJHUBaW4ALhKV8ujZols2xvHajw4raEKEQ
bvnznT109FuxvZWWu3xp0mHACqrV54N5d66nF5nrpPGpwHe21c+1RwqexidoX5qr
YzqfEq1gNoc14gvTfck+lsND2pU9TRFoUYMEE0WOdHpKPXf+Bt0g4jtksk++n1bP
hp4IDsy8FThBV8qm4qDU47r/QFHVXoKRwLzTpE6/jeIEN1HwcHyXcMMBc7mtL4vf
x2cIQP6EKEFTdo2JNXAnEbSqLUrLQ64NUqBgnUb/26yklFhoxMGEkTVCtjq5kxWP
OX63E/Bzs57tpMNFgzGXZXO35LeglcE3N1lMMGZg/NlYCw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:25:55 2026 by rpki-client