
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/66EFC4305B7211EF8C1A8E4EC4F9AE02.roa
File: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (raw, json)
Hash identifier: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=
Subject key identifier: FC:47:F8:73:A2:6B:D7:46:E8:A6:8E:25:CA:D3:DD:92:28:54:07:89
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 35B0
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/66EFC4305B7211EF8C1A8E4EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:40:44 +0000
ROA not before: Fri 04 Jul 2025 14:50:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 16509
IP address blocks: 160.30.106.0/24 maxlen: 24
160.30.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13744 (0x35b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Jul 4 14:50:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4882c-16f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:83:02:5c:1e:c8:2e:c1:72:46:b7:c4:b4:
c3:17:24:f3:02:49:ba:f7:99:24:06:9c:e5:0a:de:
c3:bd:b9:c2:67:a7:6c:2d:ad:c3:8a:5f:b3:ea:2f:
89:e6:1b:00:a6:c3:2a:31:f1:c5:38:ed:16:8b:fc:
24:a7:83:31:f6:6d:b5:50:a7:dd:58:9c:07:2c:e9:
63:87:fc:f5:b1:09:7d:cd:33:49:ed:bf:0d:90:93:
6e:d1:17:65:6b:b4:8e:cd:1c:8a:b3:b8:97:6d:92:
50:7b:31:dc:02:8c:b6:27:89:5d:fd:39:61:ec:9e:
1d:a7:23:53:b4:82:1a:3b:28:cd:71:75:3e:dc:c8:
67:99:3d:a0:04:55:c7:7c:e6:f0:cc:1a:52:c8:e9:
6f:73:be:25:50:de:84:ce:84:a5:73:6f:4b:ae:3a:
85:d4:ac:ad:02:b5:95:98:3e:d1:92:ef:07:3f:4d:
ff:db:19:9f:09:d8:1e:45:a1:fe:46:d7:b0:be:3a:
94:be:37:8e:a0:f0:fe:d9:da:68:0c:86:77:23:d4:
87:da:9a:73:78:f6:07:b9:0f:19:7f:03:56:cc:3a:
99:34:36:6f:f6:f3:76:54:1e:d1:7a:af:7f:c3:01:
02:a9:a4:96:0f:3d:68:b7:5a:66:88:ba:b3:31:3f:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:F8:73:A2:6B:D7:46:E8:A6:8E:25:CA:D3:DD:92:28:54:07:89
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/66EFC4305B7211EF8C1A8E4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.106.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:cd:81:25:52:7f:4e:4b:cb:f9:6b:2d:32:ba:ec:e1:32:93:
9b:0b:f4:66:28:69:02:76:61:6a:d8:41:cc:d0:1d:c2:2a:7d:
1a:6e:52:87:1a:97:83:f6:85:d4:bc:03:32:69:34:e6:f4:05:
7d:6a:2f:ef:d6:aa:1f:be:55:57:ed:eb:12:56:47:da:f2:3e:
b3:60:a1:b8:f1:65:d7:b7:45:52:4a:3f:b7:2a:ba:1a:3b:1a:
f3:17:22:a8:5a:01:08:dc:e9:b0:8b:e4:b7:5e:fc:aa:bf:1e:
c2:e5:8b:60:5f:3c:5d:df:c1:cc:06:8c:90:98:0e:02:b7:b3:
8f:21:de:b8:f5:5c:67:48:21:a7:2c:0f:cc:c3:63:60:d5:53:
7f:ef:98:50:e7:d1:29:07:42:c0:e8:bd:1d:bb:4f:92:71:1b:
ef:c5:d9:e3:a4:35:7d:5c:a6:71:4a:b8:3b:a4:0b:06:f3:f6:
c5:49:7d:b6:24:1a:8a:e2:9b:ba:7c:1e:5f:de:a8:7d:c2:42:
b6:a2:f7:93:09:1e:0a:e8:64:8d:02:e0:2b:a1:8e:3d:3f:78:
54:5e:d4:cc:a5:34:b0:48:38:62:c8:51:17:4c:aa:b5:1d:b1:
d4:67:0a:51:e2:20:cf:4e:a6:e3:7b:f9:55:f3:78:17:77:1d:
49:86:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:14 2026 by rpki-client