
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
File: B76A1A109B5411EF9756FD79C4F9AE02.roa (raw, json)
Hash identifier: gcy8Fq5tVijcJKVaFyBlkLcenhJ0nLFXzBAhm0P+3TU=
Subject key identifier: EE:96:C9:03:BF:19:44:F8:1A:BA:5F:8C:A1:C4:1B:32:B9:21:3E:FD
Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial: 0202
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:22:12 +0000
ROA not before: Wed 24 Dec 2025 09:24:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142132
IP address blocks: 103.166.174.0/24 maxlen: 24
103.166.175.0/24 maxlen: 24
2401:b0e0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Validity
Not Before: Dec 24 09:24:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a51e84-9946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:98:58:c1:75:43:51:bf:8b:b7:d7:7f:6c:
68:35:35:4c:49:64:87:93:51:b6:f6:42:1f:9d:46:
02:7f:12:7d:e0:30:00:40:ed:d4:76:58:c3:53:08:
d4:2f:68:cb:5a:cd:bc:75:30:bf:c1:2b:94:d9:ed:
29:f9:76:ed:25:cb:9d:8b:be:80:3f:74:e6:69:a7:
db:cb:d3:72:27:61:29:66:63:2f:6d:6a:e6:cd:48:
b8:cf:25:4a:de:90:60:64:63:a9:07:d0:ea:48:0c:
9d:ed:3a:4e:75:22:70:35:71:48:76:0a:5e:88:3a:
0f:2f:bc:e9:87:7a:07:4c:9a:ec:e2:ec:98:a2:ef:
1f:1d:15:b0:41:f2:88:85:32:bf:13:08:82:ed:6f:
f4:4c:13:23:4a:43:51:56:bb:6d:66:ca:d0:a6:bb:
dc:92:69:dd:fa:b9:49:d8:a0:6e:88:a6:da:20:70:
1e:9e:3d:f6:03:e4:f4:14:97:95:49:fa:09:c0:63:
e6:ef:29:7d:ea:9f:c7:de:cc:16:5c:21:96:8a:1b:
94:c2:ae:d8:0c:e0:22:d1:a0:4c:32:f3:3b:64:f7:
3b:d4:49:ec:34:f6:95:e5:a8:0b:63:2e:23:4b:1c:
1f:3e:58:f8:15:f8:90:7c:b4:8a:bf:08:b3:91:e3:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:C9:03:BF:19:44:F8:1A:BA:5F:8C:A1:C4:1B:32:B9:21:3E:FD
X509v3 Authority Key Identifier:
keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.174.0/23
IPv6:
2401:b0e0::/40
Signature Algorithm: sha256WithRSAEncryption
c8:72:b9:fd:1b:4b:02:e3:69:1c:37:93:45:83:1c:7d:ee:3e:
98:f9:76:2a:91:02:53:11:4d:d2:2b:54:f9:ef:30:b2:94:7c:
30:a1:7e:c4:8f:6c:86:5c:aa:e4:66:bb:70:a8:ff:1f:ad:bb:
c7:9c:ad:27:da:ed:03:f1:21:1d:06:6a:1d:93:07:6f:b1:8d:
7c:38:05:a5:bb:d9:5e:65:88:14:d4:82:83:ee:ee:5e:7d:43:
59:ad:e0:ca:af:62:45:7a:58:b0:4d:ec:b5:24:60:fc:ed:1b:
d7:70:c3:f8:5e:61:e4:6a:61:12:20:11:b7:99:15:a4:34:f4:
80:3d:c8:c1:12:29:75:15:58:35:f5:d9:23:71:d2:df:91:4f:
0e:a5:2a:09:21:db:c6:15:e4:62:f4:20:46:dd:a3:49:b3:06:
ef:aa:2e:a4:ef:b6:74:ce:b0:2d:6a:a0:8c:8d:eb:84:3e:b6:
f5:ad:40:6e:25:fd:d9:85:ac:97:ae:8e:83:ba:3c:62:fb:be:
d9:ab:0c:9c:a3:13:bd:7b:a4:a7:25:62:04:ae:70:67:f1:84:
84:1b:31:ae:fb:6a:5e:7b:c0:d5:b6:e1:9a:09:a9:57:1d:17:
14:d7:ce:67:22:9b:98:8a:e4:d7:f9:db:64:21:f5:f6:4e:7a:
32:a0:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:43 2026 by rpki-client