
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/76391AA6995311EC8EAA8C59C4F9AE02.roa
File: 76391AA6995311EC8EAA8C59C4F9AE02.roa (raw, json)
Hash identifier: /DFzhLMwMBBos/KXMPwemxU7fne2fqyoQbKIJm0faRo=
Subject key identifier: 41:E6:3E:AE:18:95:FE:66:E3:62:4A:67:18:28:07:AF:8E:21:DA:BC
Certificate issuer: /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial: 046E
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/76391AA6995311EC8EAA8C59C4F9AE02.roa
Signing time: Mon 27 Apr 2026 00:32:35 +0000
ROA not before: Mon 27 Apr 2026 00:32:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140539
IP address blocks: 103.150.40.0/23 maxlen: 23
103.150.40.0/24 maxlen: 24
103.150.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Validity
Not Before: Apr 27 00:32:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69eeaea3-c2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:f8:20:96:0c:12:b2:d8:4c:1d:d0:a2:b4:
d7:38:ad:6d:ca:0b:da:af:6d:58:94:a9:cc:99:c0:
73:96:ab:77:5a:2c:d3:ca:7a:2b:e2:b7:b9:a6:4f:
0b:9d:3d:33:a3:11:fd:8d:6d:bb:f9:48:ac:e1:c9:
36:31:bb:e3:d4:c9:76:06:c0:06:0c:cc:fc:5d:4b:
59:0c:ad:3f:95:6e:5a:80:85:ea:93:9e:16:78:91:
b3:fc:80:ba:9a:77:92:2f:6e:4a:19:02:e4:72:a1:
4c:b0:3f:f3:84:5c:d6:e7:2b:fd:e9:6c:e3:95:51:
a0:a3:e6:02:44:b1:76:09:52:65:ec:e2:42:b0:56:
3d:b8:bd:97:69:bb:3d:df:76:a5:0b:39:d0:45:20:
b5:8a:ce:bb:79:b6:25:78:17:e7:ca:b6:90:17:29:
a8:2e:78:41:a6:b4:b5:e8:ff:b0:23:ce:1a:94:f8:
d8:40:ff:eb:fe:14:fc:37:4b:47:2b:86:ec:20:62:
48:be:2a:cd:e3:99:0f:7f:28:2c:29:61:f7:94:19:
3b:9d:92:0c:9c:57:47:b4:3f:ad:6f:96:e3:e9:d9:
dc:ae:7c:69:b3:f4:84:7e:4a:ea:4d:8f:02:7f:cd:
e3:3e:57:51:3c:b3:e2:15:39:75:89:e5:92:76:ab:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:3E:AE:18:95:FE:66:E3:62:4A:67:18:28:07:AF:8E:21:DA:BC
X509v3 Authority Key Identifier:
keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/76391AA6995311EC8EAA8C59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.40.0/23
Signature Algorithm: sha256WithRSAEncryption
88:be:9b:6f:85:5a:06:54:7a:db:87:bc:f2:c0:e9:74:54:15:
76:ca:8f:b6:da:09:d0:76:91:3f:dd:c5:d1:b3:c9:56:74:0c:
b6:b0:86:dd:b9:a8:ee:19:3f:3c:36:26:22:c0:20:4e:63:9c:
47:74:99:c6:62:d7:4a:fc:13:f2:13:aa:e5:a8:dd:25:a7:43:
61:e4:a3:d1:40:57:16:00:ce:ba:07:70:3a:e4:3a:d5:27:ba:
3e:c8:1f:b2:4a:a1:4e:6a:c3:c9:ba:40:2c:55:71:ba:18:44:
6a:1c:f2:ff:41:79:29:cd:28:80:3b:e0:ce:c7:cb:d5:e7:0e:
08:41:88:ca:3e:11:f7:45:6e:8f:25:f1:e3:f5:91:28:78:4d:
05:52:0e:c2:6f:f7:bc:04:bc:96:b9:d8:c9:78:fb:37:e0:e6:
fa:e6:8f:3f:ee:55:66:49:46:7a:26:b6:c8:1f:9c:32:04:41:
03:89:a6:37:63:84:27:16:10:3c:7e:bb:d2:e4:d0:24:d7:0e:
6f:f4:39:ba:39:dd:e0:7a:4f:8a:d6:37:c4:b6:b0:19:77:d2:
69:7d:80:09:d5:bf:fd:f7:f4:0b:8c:9a:de:e0:76:da:1d:81:
04:70:db:1f:e6:49:00:e1:ca:d0:0a:bd:24:8f:51:0b:b7:cc:
06:b0:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:54 2026 by rpki-client