
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa
File: BF811486DC1E11EBB2C72F52C4F9AE02.roa (raw, json)
Hash identifier: Bz3Iq9k4u/cSFdMYB99jjcN0b1O7fjys9rSqwKOvUDc=
Subject key identifier: 5D:44:49:37:78:2B:AE:D5:06:55:91:92:EC:CE:86:8D:B5:87:53:BB
Certificate issuer: /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Certificate serial: 060F
Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:49:46 +0000
ROA not before: Tue 01 Jul 2025 00:03:22 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142136
IP address blocks: 103.166.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167C9C, serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Validity
Not Before: Jul 1 00:03:22 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3fda9-8f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:28:1c:ef:06:4f:2c:4d:48:04:1a:95:ae:
d1:78:d1:86:b5:d6:ae:25:be:2b:4c:bb:9b:02:d6:
0a:32:95:ff:9c:9f:6e:00:34:0c:1a:76:81:0f:d5:
c0:31:2c:2c:5b:5a:8a:3b:74:b7:23:03:79:59:0a:
50:1c:4e:d5:2b:88:64:92:5b:17:52:49:bf:6f:db:
3a:73:ae:70:81:93:b4:21:c4:62:a1:30:e3:be:73:
2d:49:d5:bb:13:31:f5:4d:7a:a7:0f:40:47:52:e4:
69:b1:a4:86:4c:fb:ff:04:25:b6:ef:a5:a8:94:c2:
f9:82:41:b4:e8:21:a5:72:18:40:3d:ef:45:40:86:
41:76:70:e7:83:0b:c9:cc:9f:4b:7f:b4:a6:63:c6:
aa:02:24:f0:d2:39:31:2a:89:2e:62:20:aa:d4:9e:
99:b3:9e:5d:8a:d7:93:80:de:bf:8b:d9:14:30:94:
ba:be:1c:75:2a:68:0a:7a:6b:7d:f4:c9:3c:7b:71:
7c:1a:1a:a6:05:dc:3f:45:e6:8f:72:bb:f2:21:93:
a5:51:23:3c:e3:e9:1c:95:3c:b6:de:e0:5a:a9:1d:
95:12:10:f4:38:f1:be:74:f2:91:f9:14:db:77:e4:
bf:ea:4b:8e:cf:0b:3d:13:27:7e:95:ed:63:34:b7:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:49:37:78:2B:AE:D5:06:55:91:92:EC:CE:86:8D:B5:87:53:BB
X509v3 Authority Key Identifier:
keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.193.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d8:72:cb:b5:e4:91:61:91:9b:a7:a2:ca:94:c2:56:9d:32:
b4:1c:51:d9:a4:62:6f:ba:46:52:1e:04:c0:1c:02:a3:3c:96:
6d:1f:a1:6d:15:01:74:29:eb:fe:a0:b1:f4:ca:47:aa:c6:39:
13:9c:6d:5f:34:d0:81:f9:85:e7:11:b3:ae:8f:da:c4:2c:2a:
4f:e3:d8:f0:b8:da:00:e7:ac:5e:1c:26:5e:7f:3a:96:37:db:
33:17:85:3a:a5:dd:e9:70:5d:49:b9:54:8f:88:20:ac:77:5c:
d4:a1:7b:03:57:72:6e:68:89:f6:46:4c:5a:00:5c:a2:c4:df:
2c:ca:5a:1f:66:f8:0b:b4:d9:3d:88:02:cc:c1:b9:ed:df:67:
f1:88:40:5d:14:5a:79:9b:89:06:57:88:5f:07:50:65:be:b3:
31:d4:4a:5b:03:2a:cc:db:54:43:69:70:79:8d:ad:60:5c:25:
bc:13:99:cc:ec:f7:5c:75:83:c0:37:8d:38:0d:9f:2d:f1:02:
5f:76:12:02:d9:e3:65:d1:00:45:51:d1:5d:2f:5f:71:32:78:
26:ea:1a:3d:61:1d:c2:4d:50:4d:12:8f:bf:9f:50:26:f7:29:
76:5e:6d:6e:1e:90:f3:87:48:c2:ac:a0:2f:77:7e:a5:4f:2d:
5f:78:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:19 2026 by rpki-client