
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa
File: 2017BFC2B07211EF83629B37C4F9AE02.roa (raw, json)
Hash identifier: nm2UCTkclazTr/7WzMfdVFXL3WRseCw/Hw2jR9nACPY=
Subject key identifier: 51:5D:75:68:08:E8:6D:1D:A1:E7:1A:BE:F8:F8:14:E3:5C:64:9A:39
Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial: F3
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:35:56 +0000
ROA not before: Sun 31 Aug 2025 04:21:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151637
IP address blocks: 160.250.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Validity
Not Before: Aug 31 04:21:53 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3ec5c-4e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:62:f5:3d:0a:fd:00:c4:ea:1e:ae:a2:44:
76:09:94:9e:7f:7d:d4:b3:c8:8e:2e:c1:5a:3f:c7:
fd:42:48:cb:87:23:f6:c6:2b:21:00:b7:78:54:9d:
25:a9:25:6d:fc:12:01:1f:c9:5e:fe:ce:f3:76:66:
8a:af:64:e5:51:20:e8:80:fb:aa:96:7e:ae:e8:7a:
f0:72:7b:f3:6f:2a:d0:5d:d4:d6:fc:d1:e4:45:b5:
e2:7f:ab:6d:37:5b:1f:29:15:3b:b1:90:5a:b0:e5:
9a:f9:41:23:74:50:f7:c6:96:cf:3a:a7:1d:65:bf:
e1:74:65:a3:d5:04:b2:2a:50:aa:13:c6:fb:7e:db:
2d:b5:0a:c7:30:00:4c:d8:10:b2:10:3b:61:47:d9:
f5:60:57:44:c7:03:7c:81:5f:71:49:c4:04:b3:7c:
07:25:90:59:2a:54:fd:a3:62:35:b8:66:1d:3f:01:
df:d7:76:ca:ee:16:b5:85:62:34:49:52:ed:06:bd:
53:8e:e1:00:b6:e4:46:bd:15:19:9b:cc:54:07:8a:
99:0d:3e:87:b4:45:dc:52:b2:8a:5e:65:93:77:67:
1d:7b:3a:d8:14:e7:22:db:0e:6e:11:ff:e6:5b:fe:
7f:b7:cb:56:fe:1f:e5:7c:ba:96:50:74:a9:9c:30:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5D:75:68:08:E8:6D:1D:A1:E7:1A:BE:F8:F8:14:E3:5C:64:9A:39
X509v3 Authority Key Identifier:
keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.66.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1f:82:11:04:56:36:ac:ee:85:44:fa:5c:f2:56:c6:69:6b:
65:6b:18:45:ce:1b:a8:26:dd:8f:43:d5:0d:1e:26:9b:f5:b2:
cd:74:be:1b:43:73:af:ae:4b:d4:77:0b:82:71:be:e4:7c:3c:
1e:b2:4a:cf:92:01:ef:c4:22:d8:b4:20:55:09:9c:57:b2:8a:
13:c6:83:42:82:6f:f4:11:e8:7e:f3:94:a3:4c:6a:89:57:07:
bf:1e:17:18:c2:0a:49:eb:35:f1:1c:bd:27:e8:e2:72:45:68:
bd:55:0e:b2:c3:d4:8c:91:65:8d:11:ad:24:30:d3:c3:df:a8:
25:1e:20:55:78:c4:08:9f:9c:e0:78:a3:11:a2:77:97:81:7a:
77:9a:fe:fc:ed:af:0f:45:1e:53:2c:0b:91:8f:02:65:07:21:
57:b1:7a:21:30:61:af:75:1e:3c:1e:e6:c3:c5:46:fd:42:44:
9e:df:e7:27:4e:95:0f:a2:dc:79:41:a4:6e:8e:8b:72:c9:b0:
c8:00:b6:a3:a6:a7:43:8a:a4:15:32:f2:48:b1:c3:43:a1:4d:
80:45:1a:2a:53:b6:80:46:97:e2:49:07:05:fb:99:f8:d6:73:
54:19:6e:6d:10:91:9f:87:96:cd:be:9b:f4:ee:e5:22:94:24:
2f:1d:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:58 2026 by rpki-client