
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/A0142C706B6611EF88C61580C4F9AE02.roa
File: A0142C706B6611EF88C61580C4F9AE02.roa (raw, json)
Hash identifier: n6rNTx4DosyE+NYmhaFLC8L4vDQdHdtdD/uLixXbDGc=
Subject key identifier: 98:7F:1C:97:A7:09:14:E8:EC:51:C9:DD:72:B6:F9:65:CD:6C:B5:6A
Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Certificate serial: 0122
Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/A0142C706B6611EF88C61580C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:51:51 +0000
ROA not before: Wed 03 Dec 2025 04:03:19 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55531
IP address blocks: 103.146.76.0/23 maxlen: 23
103.146.76.0/24 maxlen: 24
103.146.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Validity
Not Before: Dec 3 04:03:19 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a595f7-9d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:76:42:04:40:22:b7:72:8a:dd:1f:c9:0c:
b9:b6:ca:34:85:53:42:73:3c:7a:fa:52:e6:de:83:
f9:73:ae:64:a1:ff:5a:32:8c:a4:bd:f4:79:75:9e:
41:40:f9:35:30:da:eb:03:c5:e3:0d:c9:b1:0c:3f:
06:88:50:8e:1a:ce:1b:b1:75:af:26:fd:90:a0:65:
fb:de:d2:2f:5b:0d:67:21:8c:66:8c:1b:e5:6a:87:
94:99:fe:a2:11:f6:70:96:15:46:a4:a7:0e:86:e5:
8d:d6:00:0e:dd:9b:af:10:e7:99:3b:24:1d:c6:16:
e1:24:57:46:74:a5:5d:17:05:63:74:c1:16:bf:1e:
a2:d2:6b:11:90:3b:ac:d7:a6:f4:b6:f3:8b:b9:4a:
9e:f4:7a:19:8e:54:71:2c:95:0c:5b:5b:b3:54:4e:
df:1d:be:ba:59:fa:0b:42:23:b4:c1:fe:ae:e8:53:
c9:16:25:ef:a6:3a:1a:7a:37:08:a4:54:3f:ea:6b:
83:45:58:67:b8:5a:2b:f4:e6:56:29:70:95:cf:81:
2e:51:88:c3:e9:16:3c:69:99:45:b7:05:b3:b8:ad:
70:43:47:b0:0c:08:cd:7e:4c:f1:82:d9:77:72:af:
c8:85:9b:ff:86:c0:5b:0f:d1:f1:d9:9a:aa:2d:4b:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:1C:97:A7:09:14:E8:EC:51:C9:DD:72:B6:F9:65:CD:6C:B5:6A
X509v3 Authority Key Identifier:
keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/A0142C706B6611EF88C61580C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.76.0/23
Signature Algorithm: sha256WithRSAEncryption
23:95:0b:ea:5a:50:e6:dd:b5:a7:db:69:d3:7a:d5:73:e6:24:
ec:5a:45:d9:d9:2a:7e:23:19:3c:b4:92:9d:f8:9b:27:b0:e7:
44:f2:4b:51:d6:4d:21:c9:d5:b1:c8:0e:e9:e9:9a:30:13:04:
3c:cc:23:4f:94:e0:c2:ea:6f:75:c1:dd:d4:c4:11:fe:9c:1a:
4a:2e:a2:e9:a3:d4:6e:37:8c:73:2f:4c:27:f5:ef:d7:be:ac:
56:34:b6:bf:0b:a1:b2:b9:e5:3b:e8:b7:a5:fa:f9:a5:33:fc:
89:08:69:65:10:ba:86:96:d0:3a:74:6e:03:9b:6f:9c:ce:bc:
82:04:ce:75:9a:02:27:79:ab:7a:96:96:8b:ff:1c:f6:c5:69:
0f:6b:26:9a:9c:5e:72:99:6f:19:55:80:eb:f8:76:dc:13:da:
f4:0c:75:a4:44:cb:bb:21:ef:4e:a7:8c:f9:88:a2:b5:f7:1e:
a8:0f:5e:e5:22:74:69:79:ef:d0:21:67:b6:07:70:fe:a2:0b:
64:95:48:38:49:f1:e7:07:01:35:cb:13:37:56:98:61:96:fd:
16:93:44:bf:82:4e:2b:24:46:5a:b6:b2:75:0a:5a:d6:c1:37:
46:f9:ab:d3:51:fb:3d:15:db:3e:9f:04:c9:aa:5a:c8:8d:fd:
40:3e:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:42 2026 by rpki-client