
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa
File: 76DB2480090511EA8FFC6812C4F9AE02.roa (raw, json)
Hash identifier: +BPBYR1M3IpRWCz8iKJdYsyNMyw7jMfkzwh68F3jNCw=
Subject key identifier: 18:30:AD:98:42:8A:E6:B3:72:3C:54:60:2E:5E:59:0F:6A:90:1B:6C
Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
Certificate serial: 0D28
Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa
Signing time: Tue 18 Aug 2026 18:36:19 +0000
ROA not before: Tue 18 Aug 2026 18:36:19 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137987
IP address blocks: 103.119.94.0/23 maxlen: 23
103.119.94.0/24 maxlen: 24
103.119.95.0/24 maxlen: 24
2405:db40::/32 maxlen: 32
2405:db40::/48 maxlen: 48
2405:db40:1::/48 maxlen: 48
2405:db40:2::/48 maxlen: 48
2405:db40:3::/48 maxlen: 48
2405:db40:4::/48 maxlen: 48
2405:db40:5::/48 maxlen: 48
2405:db40:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl
rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
Validity
Not Before: Aug 18 18:36:19 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a84a623-d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:cf:96:eb:30:4c:cc:cf:c1:9f:df:eb:d9:
d7:79:0c:f1:31:8c:7f:0b:3d:c2:dc:83:18:7c:fb:
70:f8:ff:a4:92:17:6c:ac:44:e7:f8:b3:78:05:0b:
ce:07:0c:08:21:8b:78:71:b8:34:da:7c:88:9f:39:
ad:a3:58:38:f0:32:c6:e2:53:6b:72:f6:b8:f9:b5:
c5:de:3e:2b:2d:b4:b0:68:b2:2d:08:41:9a:ce:5d:
50:74:90:23:86:3b:d1:22:5b:90:7c:e3:58:4c:72:
07:a6:90:f8:b5:01:e8:47:62:4c:af:1e:1e:cd:e0:
c6:70:c7:a6:6d:25:8a:31:4a:71:6e:19:29:4f:5d:
34:a8:52:68:68:ea:6e:cb:a9:dd:92:c1:48:ef:5a:
9b:cd:f0:1f:f5:da:2a:75:c7:9b:aa:f9:63:74:76:
0c:14:68:37:bd:87:10:76:59:2d:dc:6d:3a:61:de:
b3:66:17:34:a8:8f:00:b2:db:3c:07:46:ef:91:cc:
cb:2c:b8:2f:d5:c4:6a:43:85:cd:86:42:97:ee:0a:
5c:64:5b:ab:fe:4f:34:8a:b7:9c:27:40:c4:7d:6f:
e6:6d:10:52:ff:8e:c5:fc:cc:8c:21:b2:30:77:50:
33:47:86:06:f2:8d:07:12:6a:26:42:a1:2b:b2:86:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:30:AD:98:42:8A:E6:B3:72:3C:54:60:2E:5E:59:0F:6A:90:1B:6C
X509v3 Authority Key Identifier:
keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.119.94.0/23
IPv6:
2405:db40::/32
Signature Algorithm: sha256WithRSAEncryption
36:40:ee:f4:26:0f:f2:dc:9c:84:f1:a9:21:d4:a0:f8:87:68:
28:d0:72:3c:96:92:17:6f:9b:8e:16:7c:1e:f4:aa:12:00:e2:
d2:42:4f:2a:15:df:24:11:a1:03:86:87:bf:3c:e1:2e:48:ad:
b0:a3:93:b0:ef:17:36:9b:1e:13:96:2c:8f:fc:b8:d3:0b:11:
98:40:c7:68:91:d0:72:4b:7c:49:84:e5:54:8c:e3:ca:90:31:
e8:29:12:d6:75:a4:ed:1f:ee:0b:0c:08:99:7b:f7:0f:e6:03:
9c:8f:05:fd:98:51:6f:fa:cb:cf:5d:33:de:51:36:03:eb:23:
a1:7b:7d:87:fd:2b:c6:af:94:b9:70:73:cf:2a:01:bb:03:50:
0a:ac:0b:4a:5c:08:cc:0c:e3:28:e9:03:31:78:42:ad:12:bc:
df:b8:21:79:4a:a0:5b:5a:a6:5b:0a:3f:b5:d1:00:93:fb:09:
02:8b:10:87:c7:78:79:0a:a3:42:f0:a6:00:99:99:99:55:5b:
e8:0e:91:a6:dc:b8:c3:09:89:40:0f:e6:e4:b3:15:a5:0e:53:
44:75:cd:fd:db:8e:ff:b7:0e:5c:ed:ee:bf:82:2d:99:cf:e2:
ad:e3:51:92:91:9d:e9:6c:70:57:5f:4c:99:47:8b:75:57:d5:
45:eb:21:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:34:17 2026 by rpki-client