
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa
File: 94817492A7AF11EE9ABC7953C4F9AE02.roa (raw, json)
Hash identifier: LUsnLsc6mXSjUFBFxwOYNILJN9HGLaB/AK0ldBYzkRI=
Subject key identifier: 15:05:99:1C:8B:00:43:8D:4C:15:E1:30:7A:E0:E5:A5:52:84:F7:92
Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Certificate serial: 0274
Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa
Signing time: Fri 01 May 2026 02:33:54 +0000
ROA not before: Fri 01 May 2026 02:33:54 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 150738
IP address blocks: 103.76.194.0/23 maxlen: 23
103.76.194.0/24 maxlen: 24
103.76.195.0/24 maxlen: 24
2001:df1:e1c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl
rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Validity
Not Before: May 1 02:33:54 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69f41112-0778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:d1:13:88:8d:3f:d8:c3:ad:da:c5:ac:b7:
f0:18:de:c0:92:8a:0e:31:fd:1e:98:b1:f8:c5:10:
6e:31:d7:df:5f:39:87:ad:b1:c9:00:ea:b5:0d:1e:
c0:72:63:b3:4b:fb:0a:f2:ed:b8:95:a2:d2:c2:f2:
8b:11:e5:6e:fc:e6:bb:c3:00:4f:dd:db:b8:1f:ff:
2e:6b:22:ce:ac:95:a6:f7:55:6f:3b:7a:85:70:26:
85:20:b5:92:1f:b3:2a:90:41:42:7a:f4:8d:01:dd:
5a:87:b7:4e:89:d6:9f:1e:f3:5d:c0:df:bc:86:0b:
6d:9c:33:22:fd:84:66:82:11:99:4c:28:72:27:a5:
a0:8c:fe:64:86:6e:5a:04:46:7f:8c:c0:8d:a0:1f:
84:a5:49:c8:84:81:08:55:8a:45:52:e2:76:b0:56:
2a:27:7c:93:29:98:61:2f:d7:cc:59:74:17:0a:9c:
dd:d0:e0:50:d6:f3:5a:65:10:ef:fa:b6:44:ea:26:
03:cd:8f:99:4a:8b:b9:b4:22:db:c0:f4:90:ec:62:
c0:e4:f8:a8:d4:92:6b:bd:5f:57:2f:e9:a0:2e:21:
df:4f:bc:6c:35:b7:a9:aa:e0:08:ac:17:59:4a:16:
d8:36:6f:98:a9:9a:1f:39:7c:03:08:93:74:c9:b1:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:05:99:1C:8B:00:43:8D:4C:15:E1:30:7A:E0:E5:A5:52:84:F7:92
X509v3 Authority Key Identifier:
keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.76.194.0/23
IPv6:
2001:df1:e1c0::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c6:05:7a:83:d2:fe:56:aa:8a:1a:b4:cf:d9:6b:c4:a9:7a:
bc:48:9a:46:50:17:fc:d0:39:4c:01:09:a3:c2:fb:15:17:58:
6d:92:df:34:b7:41:f0:e9:76:45:82:60:70:c6:ad:2d:30:12:
33:f1:a2:a4:70:0d:68:c3:5e:1e:c0:1b:b9:82:10:b2:cd:75:
5b:97:79:af:d8:32:50:b3:54:84:2b:d9:91:ef:62:14:c2:c3:
cd:66:2f:d9:5b:59:f4:8e:01:a7:aa:e8:1a:47:b3:76:17:78:
a6:de:5f:a8:a1:11:62:22:2d:51:25:f5:12:f5:79:97:b5:1d:
b4:63:e6:54:1b:e9:06:d2:c3:98:bc:ac:33:83:a1:82:b3:f0:
18:9d:38:aa:6c:72:72:a4:be:7c:3d:32:68:7f:8c:af:04:1e:
25:3e:7a:69:dc:bb:cf:59:92:a3:39:fb:ec:73:03:da:65:eb:
09:42:04:5c:47:69:c6:b9:a4:6b:2c:d3:0d:78:4c:83:ff:08:
57:4c:18:b3:a1:5a:d3:1e:53:a5:f1:a5:97:25:9e:ba:72:62:
f5:ee:0a:b9:f9:c9:44:88:0e:e8:e3:df:84:92:0a:5a:68:85:
38:5a:b9:5f:18:62:de:77:a7:21:79:42:9c:34:58:bf:52:38:
fd:50:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:24 2026 by rpki-client