
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/622B3AEAD91411EF9940471AC4F9AE02.roa
File: 622B3AEAD91411EF9940471AC4F9AE02.roa (raw, json)
Hash identifier: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=
Subject key identifier: 21:B7:23:82:5E:3D:48:9D:56:F4:C0:A5:AD:86:F4:F3:30:05:37:28
Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial: 045B
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/622B3AEAD91411EF9940471AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:49:24 +0000
ROA not before: Sat 03 Jan 2026 00:19:43 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149013
IP address blocks: 103.176.84.0/24 maxlen: 24
2001:df0:bc0::/48 maxlen: 48
2001:df0:bc0:84::/64 maxlen: 64
2001:df0:bc0:85::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Validity
Not Before: Jan 3 00:19:43 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46004-2f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:a8:4f:0a:c2:0e:48:b6:56:e4:33:71:88:
73:e1:07:a8:3c:27:47:b4:bc:47:fd:13:0a:8f:79:
c9:4f:08:07:5e:d9:89:39:6d:a8:07:42:ce:7c:93:
56:fe:7c:d1:a1:50:41:6b:9c:7c:eb:1b:b5:81:5a:
1b:d1:5f:e9:73:d2:4b:a9:69:38:6e:45:26:f8:36:
48:6d:d9:d1:3b:94:28:89:55:e7:4b:5c:4d:8e:81:
ef:8b:78:32:2a:1f:4b:18:1b:de:58:f6:11:c4:b4:
b4:89:08:6f:6c:f4:4b:7d:0e:64:53:2d:93:74:a4:
ad:da:87:90:49:c5:79:55:dd:76:2e:3e:2a:e2:ee:
a6:06:be:53:aa:a5:dd:94:07:90:9a:14:3e:67:2b:
6b:dd:ae:6f:49:83:60:c7:ba:d3:0e:db:c4:83:5f:
fa:fb:6c:d0:4a:2c:a2:41:51:47:72:d0:77:de:4d:
2a:3e:8f:fb:6e:44:aa:0b:14:ec:19:8c:f5:6f:cc:
7f:d6:66:4f:fc:3b:cf:31:2a:cd:3d:27:16:18:46:
d5:fe:21:a5:14:10:a0:20:91:26:0d:dd:d3:a0:ec:
90:d4:51:1b:02:e4:fd:48:b9:2e:d5:8e:84:03:1b:
3e:49:85:c9:d8:5c:03:6a:6d:1e:ce:0e:6e:e4:10:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:23:82:5E:3D:48:9D:56:F4:C0:A5:AD:86:F4:F3:30:05:37:28
X509v3 Authority Key Identifier:
keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/622B3AEAD91411EF9940471AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.84.0/24
IPv6:
2001:df0:bc0::/48
Signature Algorithm: sha256WithRSAEncryption
28:28:a7:c7:e0:51:e1:53:6e:74:4c:59:1c:9b:65:1e:9e:a7:
2d:52:8e:9b:71:75:c2:ae:bd:dd:5b:86:9f:69:21:ec:4d:5f:
e6:f0:d3:bd:5d:84:20:96:ca:22:5c:f9:f9:e3:0f:39:60:55:
23:98:fa:bc:08:f6:bd:f5:7b:c3:70:51:a6:b1:65:be:d6:05:
de:e2:f2:fe:e9:0f:0a:25:ad:48:0c:76:c6:3c:f3:92:bc:ab:
14:59:06:63:47:63:2d:68:b7:02:ce:31:3f:d7:80:e7:b0:75:
b5:99:ff:58:35:92:52:c8:94:da:b3:cb:09:b4:f9:02:30:80:
ce:fc:4f:9b:9e:cd:fb:89:57:e8:65:0c:10:52:e0:62:79:04:
7f:91:74:5d:92:f5:16:f4:d5:05:26:7f:c1:22:50:51:d3:b5:
dd:eb:60:eb:ed:93:df:63:a0:c9:7b:50:5d:55:78:88:54:3e:
54:be:6f:03:fc:a7:0c:82:45:62:11:20:f5:ca:53:e8:2d:df:
9f:1d:0c:55:61:d8:2e:84:c8:6d:15:04:27:df:d8:99:5b:8c:
74:43:c3:de:d7:e2:ab:b4:88:c8:7a:d6:e8:15:f2:74:8a:3e:
2f:93:fe:07:fd:9c:63:0e:88:06:f5:55:e9:91:42:1e:e4:8e:
b9:92:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:38 2026 by rpki-client