
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A190AB66D1011EFA13D6E2BC4F9AE02.roa
File: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (raw, json)
Hash identifier: y9tCShTAtdbkhcHqZKIPeVMLfFc8J6hhfijdxgmxbTg=
Subject key identifier: C6:E1:AF:7F:3E:2F:D5:FA:89:3D:EE:2D:E2:CA:94:18:58:BF:8D:F1
Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial: 055F
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A190AB66D1011EFA13D6E2BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:42:54 +0000
ROA not before: Thu 21 Aug 2025 00:05:58 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 138968
IP address blocks: 103.67.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1375 (0x55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Validity
Not Before: Aug 21 00:05:58 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4344e-e855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:47:af:f4:25:f3:2f:1b:9b:0e:b7:4e:cc:
b3:cd:9c:ef:ab:3e:6d:e5:4d:6c:02:c5:d0:86:9e:
68:22:14:28:b7:ff:f4:34:2e:56:ba:e8:80:5e:55:
b4:f9:c2:51:2c:04:8b:d3:c5:46:59:86:20:bc:39:
4a:64:44:d0:47:88:62:62:3e:a2:65:1c:b3:43:52:
43:5e:59:77:03:97:f8:55:68:1f:3e:72:60:09:57:
db:aa:3c:7e:85:21:1c:65:19:c8:a7:03:82:c4:26:
33:6b:f4:72:96:45:b2:11:57:74:55:29:5f:44:c2:
74:ca:bc:06:9e:0b:ad:76:c5:5e:37:a0:9f:40:f4:
d1:d6:cc:da:0d:e1:ac:92:08:8a:6f:db:e7:37:90:
48:d7:9e:da:c1:58:f0:c3:6a:f5:ad:7f:43:82:c2:
c0:26:c1:74:d7:80:f3:a4:0f:d4:44:09:dd:da:94:
a3:ee:dd:d5:f7:67:83:1b:44:87:89:5e:26:e5:18:
55:0a:c9:de:24:40:91:da:a8:71:2b:ae:ef:7b:2c:
ff:5f:13:07:4e:6a:c4:7f:26:84:5f:77:d4:29:26:
9a:7c:29:a8:87:b7:b4:96:0f:30:e4:07:a6:72:03:
58:44:09:e8:55:69:aa:dc:c3:2d:ca:00:65:5f:52:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E1:AF:7F:3E:2F:D5:FA:89:3D:EE:2D:E2:CA:94:18:58:BF:8D:F1
X509v3 Authority Key Identifier:
keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A190AB66D1011EFA13D6E2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:7f:cb:fd:39:a5:54:a4:4a:63:1d:d3:e0:e3:e9:76:1a:cb:
8b:c1:db:6c:8a:a1:c4:f7:b2:f2:3c:da:fd:a2:28:dc:ab:6c:
a5:26:b9:ab:75:22:9c:76:d6:be:c9:88:76:6d:12:ec:d6:b8:
75:0c:0f:36:74:2f:e0:13:69:20:55:3d:8e:dd:16:af:46:df:
1f:0a:69:6f:db:5a:ad:ca:ea:55:03:b0:f4:bf:09:e0:44:49:
62:bc:20:6b:49:cb:2a:a9:03:d4:1c:63:00:53:6d:cc:42:88:
7e:21:77:73:4f:38:a4:52:ec:66:5b:9f:e1:16:e6:13:ec:89:
45:40:1f:c8:c5:f9:db:48:ac:df:a8:60:1b:c7:d4:14:ac:c0:
88:20:4f:cb:84:2f:0f:6a:f2:31:c7:d0:2d:bd:e0:2b:01:0d:
8e:75:29:b8:8b:b9:46:c3:93:40:b4:08:27:68:16:25:1d:42:
52:82:07:1c:99:a0:7a:2e:03:3a:bf:a8:21:13:9f:f1:a3:e5:
73:85:31:e1:b0:52:4d:89:1d:d9:e4:7c:4f:a9:41:7a:1c:b8:
da:aa:f1:d6:da:44:82:2f:de:1c:4a:eb:4b:fc:dd:5f:79:a9:
c7:38:6a:91:02:40:79:2f:c5:d2:43:8e:67:4c:b1:2e:8f:9f:
ad:b9:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:08 2026 by rpki-client