
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/76F5B630701311EB9C85DF1FC4F9AE02.roa
File: 76F5B630701311EB9C85DF1FC4F9AE02.roa (raw, json)
Hash identifier: naUTdPx2hWErxJkYpY1OleALKvTnovAGDRuMLpDEDq0=
Subject key identifier: 52:72:CB:3F:4C:C4:34:8B:DD:39:7B:76:C2:E3:3B:3D:85:F4:7A:BF
Certificate issuer: /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
Certificate serial: 0726
Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/76F5B630701311EB9C85DF1FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:12:52 +0000
ROA not before: Wed 28 Jan 2026 21:18:38 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141707
IP address blocks: 103.162.110.0/23 maxlen: 23
103.162.110.0/24 maxlen: 24
103.162.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl
rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
Validity
Not Before: Jan 28 21:18:38 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44964-e894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:36:53:e4:e0:91:a0:12:ac:01:fd:20:ea:
65:74:94:31:5e:f6:a6:d3:6c:2c:48:8e:d4:6f:82:
aa:2c:80:6a:65:d8:4f:fa:cc:13:d4:d0:bf:3a:3b:
7d:e5:9c:08:8f:0b:7a:3f:93:2b:cb:96:89:3e:75:
97:b9:af:12:ac:dc:a6:99:66:e5:d1:f6:f1:af:23:
84:80:d8:02:f1:bd:48:ed:90:45:5b:3e:bb:72:95:
d2:1c:fb:e0:f8:49:8c:1b:ad:35:38:78:04:90:46:
0d:a3:a4:c7:62:5a:c3:86:9c:ba:e4:f8:3a:b6:6b:
80:11:93:10:a1:aa:e4:01:df:b4:16:7a:8c:47:44:
e3:91:71:c2:79:0a:5c:ad:13:f2:68:de:9b:59:db:
5c:1d:3c:ec:56:de:43:ba:61:90:b3:e3:97:84:e4:
d8:28:12:31:71:ed:4e:31:01:e1:f3:a3:76:39:6e:
b6:f1:65:e5:91:3f:c5:7e:f0:70:0f:be:39:6c:a1:
41:2a:d2:2f:0f:35:05:f4:86:c2:dd:11:e4:9e:f8:
dd:c1:ad:bc:7a:b6:03:db:14:aa:02:c6:b3:e6:de:
12:03:06:18:6a:d4:01:2a:b0:e2:87:ca:6c:3d:1f:
f1:3e:4d:10:05:45:55:8f:df:70:c1:b1:6c:30:85:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:72:CB:3F:4C:C4:34:8B:DD:39:7B:76:C2:E3:3B:3D:85:F4:7A:BF
X509v3 Authority Key Identifier:
keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/76F5B630701311EB9C85DF1FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.110.0/23
Signature Algorithm: sha256WithRSAEncryption
85:74:f2:9f:b3:9e:da:e4:10:18:f3:1e:9d:bd:4b:ab:19:0f:
77:56:d1:39:80:09:f8:9f:dc:35:48:0d:6e:be:33:73:c1:3e:
1f:47:00:0c:02:fa:bb:76:ed:85:e3:06:20:04:22:12:74:16:
31:3e:1e:24:3e:65:63:7f:93:7c:93:74:df:39:ac:9e:74:3c:
6f:85:1f:92:3e:c3:6c:a4:c8:ee:fa:b3:d5:a3:94:b5:f9:a1:
f4:6e:68:03:82:8c:94:4b:99:66:0d:dc:95:22:0d:58:93:e8:
0b:7d:4e:0b:60:be:8b:5d:e1:89:30:f3:f2:5a:4f:72:6b:2f:
53:fe:c0:b1:18:f1:65:60:d5:c0:68:78:0b:07:7f:29:f8:16:
6e:57:84:3a:0d:67:1a:d2:15:b5:4a:7e:bc:0b:6e:2a:09:d3:
16:0a:15:c0:47:6d:35:98:08:54:2d:15:68:57:5f:92:5d:ea:
ab:dc:0f:73:76:a4:e0:15:f1:fb:98:8a:e9:a7:7a:48:f8:ea:
77:22:80:69:6c:b3:8b:34:7c:48:9b:65:34:0f:01:c2:78:64:
59:8b:9a:d9:76:cb:82:1f:86:94:bc:02:96:cd:ca:72:a6:f1:
81:28:9e:4b:57:60:fe:3d:7b:fa:ba:ed:9b:3e:bc:cd:37:3f:
00:06:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:57 2026 by rpki-client