
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
File: 5E46267A46B111E98B793856C4F9AE02.roa (raw, json)
Hash identifier: yafBMp78riSiWb8JqSgc7NkxFhPTbJnZekh2LK68//c=
Subject key identifier: 03:DD:8C:F8:40:4B:AA:09:59:CA:5B:21:B2:D5:85:EB:9E:48:41:97
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 1108
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
Signing time: Thu 30 Apr 2026 17:21:30 +0000
ROA not before: Thu 30 Apr 2026 17:21:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136518
IP address blocks: 147.76.54.0/24 maxlen: 24
147.76.55.0/24 maxlen: 24
147.76.60.0/24 maxlen: 24
147.76.62.0/24 maxlen: 24
147.76.63.0/24 maxlen: 24
147.76.64.0/24 maxlen: 24
147.76.65.0/24 maxlen: 24
147.76.66.0/24 maxlen: 24
147.76.99.0/24 maxlen: 24
147.76.100.0/24 maxlen: 24
147.76.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4360 (0x1108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Apr 30 17:21:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f38f9a-c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:ab:55:01:3e:10:94:f1:67:7a:72:d1:15:
fe:f8:fd:8d:bb:14:80:b5:97:53:f4:aa:b1:78:00:
71:74:0c:5d:e0:24:e3:f9:a0:55:7a:91:3c:86:7c:
79:cb:ec:56:c8:34:13:60:c0:2d:b7:5f:86:38:57:
6c:34:08:8b:1a:b6:a5:96:d3:a0:dd:c0:45:8e:97:
21:1a:2d:1d:e3:94:ca:f0:c6:bb:ff:67:dd:f5:0b:
46:71:d1:e6:50:8e:1e:3a:98:96:b9:e1:01:01:7a:
50:ca:a3:1d:21:08:ca:92:89:e8:8d:3d:f5:e9:0e:
0c:79:b7:6c:b9:1d:c1:de:78:e4:21:82:80:c9:4a:
8f:70:9d:75:5f:d9:60:d9:75:49:39:3e:8d:87:79:
f9:da:bf:bc:8e:2d:a2:5a:3e:74:be:99:23:71:52:
a0:80:ae:56:f2:5f:fe:21:00:b8:d9:a5:b9:51:a4:
c4:80:6b:da:2e:b3:fc:6b:80:e2:9a:b0:05:48:ed:
30:43:67:b6:ef:32:95:c1:29:d6:02:e3:11:45:ff:
04:b4:a0:69:34:70:30:9b:b8:50:ab:e8:10:b2:5b:
fb:bd:b4:5d:ee:9e:b4:8d:74:69:18:6b:e3:d9:0c:
24:1b:33:52:d3:b1:3c:2a:0c:3f:03:30:90:18:01:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:8C:F8:40:4B:AA:09:59:CA:5B:21:B2:D5:85:EB:9E:48:41:97
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
147.76.54.0/23
147.76.60.0/24
147.76.62.0-147.76.66.255
147.76.99.0-147.76.101.255
Signature Algorithm: sha256WithRSAEncryption
53:60:66:8b:a5:75:63:00:13:19:7b:74:7e:38:e9:e7:6d:50:
2c:16:33:fb:6b:fc:ad:4e:e5:c2:3d:02:c7:17:43:4b:d7:75:
9e:8b:9e:ac:85:7a:6f:b5:cc:8a:06:ee:10:fd:b3:c8:32:a0:
1b:09:e6:55:15:95:1a:6c:f2:d2:cd:43:eb:34:fc:0f:24:0c:
7f:78:18:29:2d:c8:e4:be:20:ca:c6:db:54:69:d7:9a:84:3e:
ea:4b:2f:ec:bd:37:22:85:67:5e:af:81:90:13:49:d0:cb:af:
9a:9d:4d:cc:4a:a0:83:2c:0f:b7:a7:65:d9:5a:67:ac:94:9f:
c4:71:dd:55:ac:97:ee:88:df:8e:5f:1e:d0:f0:8e:0e:7c:20:
4e:d8:34:14:1b:a2:84:46:fc:98:8f:a3:33:5e:0f:87:24:95:
f0:d7:01:80:51:cc:1d:16:3c:18:94:74:84:c0:13:b4:10:44:
b4:61:58:de:9e:b2:f8:9f:ce:0a:14:8b:79:10:81:69:c3:36:
a2:16:37:d6:de:d9:9b:0a:a7:25:46:64:c4:0c:88:6e:fd:f4:
c7:d9:60:31:c4:44:75:3c:d3:ef:31:0d:4d:79:3d:c0:60:d0:
69:04:af:be:a3:b2:8f:13:1e:0d:e9:a8:fa:db:e5:1f:73:4a:
6e:a8:8b:ba
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgICEQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG
NzkzRjQ3MDgwHhcNMjYwNDMwMTcyMTMwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYzOGY5YS1jM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2n+rVQE+EJTxZ3py0RX++P2NuxSAtZdT9KqxeABxdAxd4CTj+aBVepE8hnx5
y+xWyDQTYMAtt1+GOFdsNAiLGralltOg3cBFjpchGi0d45TK8Ma7/2fd9QtGcdHm
UI4eOpiWueEBAXpQyqMdIQjKkonojT316Q4MebdsuR3B3njkIYKAyUqPcJ11X9lg
2XVJOT6Nh3n52r+8ji2iWj50vpkjcVKggK5W8l/+IQC42aW5UaTEgGvaLrP8a4Di
mrAFSO0wQ2e27zKVwSnWAuMRRf8EtKBpNHAwm7hQq+gQslv7vbRd7p60jXRpGGvj
2QwkGzNS07E8Kgw/AzCQGAGMUQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFAPdjPhA
S6oJWcpbIbLVheueSEGXMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2
QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvNUU0NjI2N0E0
NkIxMTFFOThCNzkzODU2QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu
BAIAATAoAwQBk0w2AwQAk0w8MAwDBAGTTD4DBACTTEIwDAMEAJNMYwMEAZNMZDAN
BgkqhkiG9w0BAQsFAAOCAQEAU2Bmi6V1YwATGXt0fjjp521QLBYz+2v8rU7lwj0C
xxdDS9d1nouerIV6b7XMigbuEP2zyDKgGwnmVRWVGmzy0s1D6zT8DyQMf3gYKS3I
5L4gysbbVGnXmoQ+6ksv7L03IoVnXq+BkBNJ0Muvmp1NzEqggywPt6dl2VpnrJSf
xHHdVayX7ojfjl8e0PCODnwgTtg0FBuihEb8mI+jM14PhySV8NcBgFHMHRY8GJR0
hMATtBBEtGFY3p6y+J/OChSLeRCBacM2ohY31t7ZmwqnJUZkxAyIbv30x9lgMcRE
dTzT7zENTXk9wGDQaQSvvqOyjxMeDemo+tvlH3NKbqiLug==
-----END CERTIFICATE-----
Generated at Wed May 13 09:02:44 2026 by rpki-client