
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/EEC42F86232311EFAF815012C4F9AE02.roa
File: EEC42F86232311EFAF815012C4F9AE02.roa (raw, json)
Hash identifier: o8afSdgZmX58QcVUZe75xNDu09+q2TPxGPAeyh/MOEM=
Subject key identifier: 77:C9:29:CC:CC:8C:B4:26:21:3C:A9:3A:64:13:1B:33:50:58:33:8E
Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial: 019E
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/EEC42F86232311EFAF815012C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:21:02 +0000
ROA not before: Wed 11 Feb 2026 04:24:21 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149172
IP address blocks: 103.177.196.0/23 maxlen: 23
103.177.196.0/23 maxlen: 24
2400:3d20::/36 maxlen: 36
2400:3d20:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Validity
Not Before: Feb 11 04:24:21 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4595e-26e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:9d:4a:c1:9a:97:d9:69:a8:2f:3d:c8:59:
cc:40:9e:de:50:9e:90:aa:9c:29:d2:bf:91:06:84:
31:39:df:14:5e:6c:5f:17:2e:9d:ab:47:39:5d:c4:
c4:f4:21:aa:6d:51:e8:91:5e:31:91:73:7f:de:76:
53:06:7f:71:97:3e:e5:a0:80:d8:ec:9d:09:3e:ef:
58:0c:13:df:e8:4e:c2:48:0e:50:9f:f5:fa:f4:8f:
59:ea:5a:d8:a4:2c:17:e3:47:90:f6:9e:c6:75:8e:
dc:a6:90:2f:66:84:7e:d3:72:a9:6e:ff:8f:ca:68:
1d:6f:06:16:fe:68:13:9e:68:91:ae:58:46:99:b8:
27:a7:ce:c9:9a:e6:93:c2:a0:4c:c5:5a:f1:1b:cc:
da:e0:ba:65:d0:ac:bc:4b:7b:0c:e2:50:bd:19:e8:
35:d4:47:fb:bf:03:0d:a2:68:ba:bc:32:18:8a:c2:
ac:6c:18:f4:15:28:50:dc:8e:15:ce:2c:93:9f:5e:
fd:1f:48:f2:6d:94:28:fe:21:06:6f:b5:57:90:cb:
02:79:78:9e:9a:8d:95:aa:19:1c:1b:07:3a:b1:16:
eb:52:16:cd:b2:a3:bc:b0:bc:57:3c:76:0c:8e:74:
ba:b5:1c:78:5d:0a:52:0a:18:e0:92:7c:b4:b3:0b:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C9:29:CC:CC:8C:B4:26:21:3C:A9:3A:64:13:1B:33:50:58:33:8E
X509v3 Authority Key Identifier:
keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/EEC42F86232311EFAF815012C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.196.0/23
IPv6:
2400:3d20::-2400:3d20:10ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ae:d9:2b:2f:9f:24:d3:9c:64:57:c8:dd:62:56:a5:8a:ba:f9:
9c:35:9f:30:0e:e8:43:19:53:5e:88:97:04:95:ba:68:8d:6b:
d6:01:21:61:ed:d3:8d:a9:20:79:b0:4d:24:6f:f8:a5:c0:4b:
6c:49:ab:57:b2:ce:df:ea:a6:d2:ed:c3:af:2f:18:48:e5:eb:
0c:71:d0:bc:3c:50:45:9a:e9:29:b3:de:8d:7e:4d:78:aa:b7:
dc:37:2e:10:2f:d8:09:7f:67:1e:ac:af:58:4e:16:8e:42:66:
9b:5e:bc:48:29:0b:45:62:fc:cd:02:99:a5:bd:a4:63:fb:4d:
c5:a6:dd:aa:3a:e7:ea:cf:b5:0e:f2:03:53:d5:5c:c3:65:5f:
c9:fa:18:1e:72:11:e8:b8:3c:be:a2:2b:3d:8c:73:40:a3:90:
61:b3:e1:4f:49:4d:50:a4:2c:59:e7:27:2d:ba:64:bb:09:63:
c3:5c:03:cb:42:9f:13:c0:d9:56:ff:80:ae:80:fe:cf:f1:28:
a6:7f:bd:f0:8b:ef:47:79:ba:85:e9:eb:2a:cd:ec:53:8f:1a:
5e:19:b3:bb:fb:36:62:8c:07:2a:60:a5:eb:57:6d:c1:73:01:
44:09:34:7d:a6:cd:f7:2a:98:5b:97:54:bf:c1:d5:83:8f:46:
94:9c:d8:e3
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0
QkVDMERFNzMwHhcNMjYwMjExMDQyNDIxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTk1ZS0yNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn32dSsGal9lpqC89yFnMQJ7eUJ6Qqpwp0r+RBoQxOd8UXmxfFy6dq0c5XcTE
9CGqbVHokV4xkXN/3nZTBn9xlz7loIDY7J0JPu9YDBPf6E7CSA5Qn/X69I9Z6lrY
pCwX40eQ9p7GdY7cppAvZoR+03Kpbv+PymgdbwYW/mgTnmiRrlhGmbgnp87JmuaT
wqBMxVrxG8za4Lpl0Ky8S3sM4lC9Geg11Ef7vwMNomi6vDIYisKsbBj0FShQ3I4V
ziyTn179H0jybZQo/iEGb7VXkMsCeXiemo2VqhkcGwc6sRbrUhbNsqO8sLxXPHYM
jnS6tRx4XQpSChjgkny0swvQLwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFHfJKczM
jLQmITypOmQTGzNQWDOOMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5
QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez
bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjRGQjAvMDU4Q0VDMTQxOUJEMTFFRkJEMzNFMDgyQzRGOUFFMDIvRUVDNDJGODYy
MzIzMTFFRkFGODE1MDEyQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAM
BAIAATAGAwQBZ7HEMBcEAgACMBEwDwMFBSQAPSADBgAkAD0gEDANBgkqhkiG9w0B
AQsFAAOCAQEArtkrL58k05xkV8jdYlalirr5nDWfMA7oQxlTXoiXBJW6aI1r1gEh
Ye3TjakgebBNJG/4pcBLbEmrV7LO3+qm0u3Dry8YSOXrDHHQvDxQRZrpKbPejX5N
eKq33DcuEC/YCX9nHqyvWE4WjkJmm168SCkLRWL8zQKZpb2kY/tNxabdqjrn6s+1
DvIDU9Vcw2VfyfoYHnIR6Lg8vqIrPYxzQKOQYbPhT0lNUKQsWecnLbpkuwljw1wD
y0KfE8DZVv+AroD+z/Eopn+98IvvR3m6henrKs3sU48aXhmzu/s2YowHKmCl61dt
wXMBRAk0fabN9yqYW5dUv8HVg49GlJzY4w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:59 2026 by rpki-client