
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/76DAAFAA251911F182F11CF1C0833773.roa
File: 76DAAFAA251911F182F11CF1C0833773.roa (raw, json)
Hash identifier: 6esaAykmvMcM9nd5KOv3yAwbdE8H9oSkUnwpS/MXy7Y=
Subject key identifier: D7:28:8B:CC:40:F2:5D:39:66:06:BD:B5:5A:F9:85:43:AD:31:75:B3
Certificate issuer: /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial: 61
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/76DAAFAA251911F182F11CF1C0833773.roa
Signing time: Wed 09 Sep 2026 08:58:31 +0000
ROA not before: Wed 09 Sep 2026 08:58:31 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133139
IP address blocks: 43.246.180.0/24 maxlen: 24
43.246.182.0/24 maxlen: 24
43.246.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Validity
Not Before: Sep 9 08:58:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa11fb7-a5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5d:78:f8:6f:b1:ed:c6:b3:50:d1:ca:2f:77:
48:5d:83:37:9d:e8:69:ea:74:cd:5d:5e:47:76:e0:
81:82:f6:23:02:80:e8:fd:e4:d9:0c:6f:b5:26:d9:
cf:f2:70:54:12:63:e3:76:85:7b:58:55:6b:e2:34:
41:4a:aa:6d:ae:93:35:87:42:a4:bd:74:08:fb:ee:
88:f0:e6:54:36:ac:25:94:c3:4b:0e:31:b1:60:b2:
c1:89:7b:23:b6:b5:34:d0:20:8e:af:fb:77:2c:eb:
62:76:ae:c9:b3:bf:84:cf:23:e5:c3:3b:57:36:81:
64:e6:0f:70:7a:35:c9:b9:4a:c2:22:50:a0:56:5b:
6a:22:89:25:77:6a:14:93:65:d9:5e:d6:e9:68:56:
fa:0a:71:33:25:66:6a:9f:91:b0:ac:4b:ed:aa:4a:
fc:b8:c8:8c:f7:81:d1:32:74:9b:f9:78:0e:d8:6e:
71:a4:fe:fc:db:b2:4d:af:5e:f3:02:51:40:91:e7:
32:10:af:29:05:bb:45:19:28:5a:4c:f2:fa:60:d7:
ad:6e:ab:81:a8:68:e2:fd:78:26:d0:a4:17:2d:8d:
21:b6:09:2d:6f:2d:80:56:e1:b9:a6:e9:ac:f5:72:
e7:e2:25:59:62:24:63:3d:69:59:7b:09:a5:12:ff:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:28:8B:CC:40:F2:5D:39:66:06:BD:B5:5A:F9:85:43:AD:31:75:B3
X509v3 Authority Key Identifier:
keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/76DAAFAA251911F182F11CF1C0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.246.180.0/24
43.246.182.0/23
Signature Algorithm: sha256WithRSAEncryption
21:f5:1e:0f:4a:97:09:8a:b1:65:ec:ed:62:b5:93:b5:3e:4e:
6e:10:07:a2:93:e8:bc:6a:75:91:44:2b:bf:eb:f8:26:2b:d9:
10:ec:c1:53:e4:48:3a:f9:42:c6:fc:e3:e2:8b:79:71:ce:15:
4e:db:8b:2f:24:4e:be:91:64:67:3e:d6:be:8e:53:c4:93:d0:
45:26:02:7f:76:54:3c:3a:42:59:7b:06:5f:24:2f:c2:7e:72:
ae:ad:8c:dc:21:d1:6e:62:59:ad:40:c8:3a:54:ce:41:0b:15:
57:4a:62:28:d7:ac:0b:fd:ba:2d:3e:0d:46:8b:66:95:9d:6c:
ba:ad:dc:86:f1:3e:29:1a:49:dd:a5:e2:df:e8:25:2c:29:dc:
a7:69:bc:48:4e:d8:e2:1f:32:1f:e9:ad:55:84:61:6d:f4:c1:
08:42:72:c4:f5:84:9b:a2:51:0b:38:9a:fa:9d:31:62:b5:39:
b6:8d:9c:af:03:bb:cc:63:05:97:ae:05:eb:54:08:a2:74:59:
10:bf:94:83:02:18:b4:95:24:49:2f:ac:2a:11:14:41:95:2a:
a5:ad:c6:2e:71:1d:42:da:b9:f0:de:96:49:79:8d:c4:ef:2a:
70:05:03:22:0b:d0:2a:8f:93:49:e8:55:f6:fc:6f:65:d5:c8:
b4:1d:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:03:32 2026 by rpki-client