
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa
File: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (raw, json)
Hash identifier: ICK3NKayjlVlRgTm/6KSTdOxybG9EontTf1e6pl2fIU=
Subject key identifier: F3:B0:E4:C6:37:72:DA:DC:D5:CD:15:66:6A:16:39:E4:CA:BE:07:1C
Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Certificate serial: 032A
Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa
Signing time: Thu 11 Jun 2026 03:30:37 +0000
ROA not before: Thu 11 Jun 2026 03:30:37 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 56294
IP address blocks: 103.166.16.0/24 maxlen: 24
103.166.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Validity
Not Before: Jun 11 03:30:37 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2a2bdd-98aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:2f:33:ed:d1:c6:09:c5:ff:3f:f4:0e:d6:
59:aa:eb:14:14:3f:97:55:38:e7:44:72:ca:f8:4a:
89:54:d4:e2:3d:c6:4a:71:b3:32:ec:ab:c3:6e:9b:
bd:91:63:c8:83:3e:45:83:62:b5:00:49:5c:f5:f5:
96:b4:64:d5:e9:fe:14:7e:c1:3b:6e:b8:ed:e3:30:
3b:98:a4:1d:a2:0d:f1:2b:b7:01:89:d7:e4:4e:ea:
62:e2:57:44:01:1e:b7:08:03:dc:6d:94:50:aa:a6:
4f:df:0c:37:63:cf:c5:24:8c:50:59:59:7e:3c:14:
9b:67:f3:26:cc:f6:63:e4:b6:9a:24:5d:5b:3d:e4:
00:70:4b:aa:c7:67:2d:68:7a:a8:04:e8:93:22:91:
18:f2:9b:27:bb:c6:8d:bf:a2:22:2f:57:24:db:fe:
fa:95:1d:b9:67:a6:26:44:77:a1:60:29:5a:01:5e:
bf:d7:00:51:4c:a7:3a:26:fe:f3:bb:ad:15:6e:6a:
84:c9:7f:0d:2c:7b:a4:02:2b:55:47:c6:ff:2b:e7:
82:d5:0a:5e:1b:5c:b4:c0:31:16:0a:02:6d:73:f4:
8d:b1:e0:c4:96:dd:3b:c9:42:1b:c4:4d:ee:67:b7:
37:05:12:a3:44:a4:5b:9f:de:2a:6d:25:78:1f:0f:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:E4:C6:37:72:DA:DC:D5:CD:15:66:6A:16:39:E4:CA:BE:07:1C
X509v3 Authority Key Identifier:
keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.16.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:25:34:fd:78:38:4f:95:ba:74:51:f7:3c:87:5a:4d:27:c0:
28:19:98:55:1e:6b:21:28:3c:2e:db:87:83:87:51:89:17:62:
bf:9c:ef:96:7b:b8:df:49:14:93:ef:9d:ab:aa:fa:01:76:e5:
14:0b:b4:23:ac:32:60:79:b3:c2:37:c8:4c:a8:19:49:d6:66:
ac:ba:18:7d:d8:9e:f3:d7:8f:c5:13:16:b4:f7:73:df:2f:b1:
93:2e:c6:5e:b1:56:0c:c1:00:48:e4:b0:eb:00:9b:a8:b5:ec:
44:b8:1f:52:6f:97:22:8e:19:c4:7a:35:c5:4c:14:67:62:8d:
87:3d:32:9b:c5:4e:af:67:78:2d:9d:6e:76:6d:69:40:5c:6e:
3e:d4:ee:a0:2b:d2:e5:f3:a6:4d:11:74:02:88:7c:fe:e6:ec:
e1:7b:4e:23:d6:8a:1c:3a:f5:5b:07:be:1a:6e:1b:63:41:f1:
03:39:fb:74:fd:a8:55:e2:c9:4c:6e:01:07:6c:16:b8:37:d8:
e8:2e:b1:c7:b8:f0:75:77:41:dc:6b:a2:db:a5:f7:81:18:49:
11:57:1f:10:f0:e8:1f:b3:8e:c7:3b:c9:57:eb:1d:dc:74:30:
fa:e8:3d:e1:82:c0:f9:10:2f:3c:56:3c:9f:52:f0:78:47:f3:
94:ad:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:11:33 2026 by rpki-client