
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa
File: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (raw, json)
Hash identifier: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=
Subject key identifier: 4E:E7:D6:26:00:BA:10:4F:D6:CF:2A:D7:23:75:DA:28:69:A7:35:98
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 35AE
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:40:42 +0000
ROA not before: Fri 04 Jul 2025 14:50:16 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 14618
IP address blocks: 160.30.106.0/24 maxlen: 24
160.30.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13742 (0x35ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Jul 4 14:50:16 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4882a-a2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:38:50:61:f7:53:83:25:0d:ff:ec:00:20:
9d:20:96:15:4d:7c:a6:44:d9:8e:71:55:b3:07:57:
33:97:30:80:82:d4:35:7f:fe:02:63:d5:86:f7:31:
b3:6a:33:b3:81:d5:45:1e:ff:37:19:ac:69:c6:fa:
28:0e:1f:4f:af:01:82:25:9e:a0:2b:83:6f:26:93:
b2:ea:d2:b8:be:a2:61:20:2b:a3:4d:19:3f:a4:14:
d8:31:fa:8f:28:c8:47:a1:90:1d:12:6a:70:60:ea:
16:83:59:9a:f1:8e:b4:73:d6:f2:ab:54:97:74:1e:
63:e0:da:25:52:7c:20:72:68:d9:f0:c2:72:fa:b6:
7b:33:ab:73:e2:26:20:10:d3:fa:36:6e:6f:ff:be:
68:b1:66:4a:68:4c:04:b9:a0:cc:0d:dc:a0:56:34:
c5:5b:be:fe:0f:4d:ff:59:30:f9:ee:cd:d9:00:7f:
2f:b1:ff:cd:47:35:3a:74:b2:48:36:21:89:a8:7d:
bb:d1:85:18:a4:44:d7:85:5f:75:bb:37:b8:56:69:
d0:ef:95:91:db:28:5d:44:30:4c:a6:a3:fb:58:e6:
41:f0:76:ca:7a:7f:82:3e:9d:6a:cf:72:3e:93:90:
00:26:c4:32:84:7f:30:00:a1:d2:c6:ea:af:f3:6a:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E7:D6:26:00:BA:10:4F:D6:CF:2A:D7:23:75:DA:28:69:A7:35:98
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.106.0/23
Signature Algorithm: sha256WithRSAEncryption
79:b4:13:ab:3e:2a:7c:b1:75:49:f1:c9:4b:bf:22:5a:31:e9:
5b:bf:b2:c3:6d:ba:44:37:09:98:35:b7:b6:4c:69:ca:73:76:
35:03:ec:92:5f:c1:44:bc:74:80:47:79:b6:73:9e:4c:9c:bd:
e4:b6:d3:38:5f:c2:6c:07:4d:ed:da:2d:40:f8:61:50:51:9e:
78:e6:34:1f:90:dc:f2:46:8f:7d:46:03:8f:8e:8c:cf:c3:86:
2e:73:3d:72:f8:09:dd:a6:52:e3:d5:35:c4:8d:ca:e4:90:eb:
b8:ab:46:7f:f5:e5:d1:4f:f3:80:58:50:c3:b6:17:8f:95:d6:
7c:1e:0f:cd:99:6e:a4:07:38:59:ee:97:da:39:56:69:8a:0e:
e3:af:70:50:bd:b6:b2:1c:ab:72:ad:af:6b:fa:02:72:0d:48:
5a:94:cd:5b:fd:63:24:ed:f0:a5:b6:1a:c6:d6:9d:d6:0c:4e:
c5:a0:5a:13:d7:2a:da:e9:33:8e:cc:1d:a2:0c:1b:38:f4:1f:
06:db:25:df:45:15:0f:ab:13:7c:c3:b5:04:35:3f:81:28:75:
5d:2f:f7:05:65:ed:b6:d5:e3:51:17:92:14:b6:a5:bc:c6:44:
fe:0f:78:4c:c9:81:2f:46:99:9d:75:c2:11:bb:d1:4a:0c:e6:
42:01:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:12 2026 by rpki-client