
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/F8CE85E2B30211EBA63AE482C4F9AE02.roa
File: F8CE85E2B30211EBA63AE482C4F9AE02.roa (raw, json)
Hash identifier: Oq+DZRLUONdiWQsPcpVZZkOJsIqLLjEOw+XElhBj3Kw=
Subject key identifier: C3:23:19:18:3F:5A:87:F3:60:B6:F2:80:0B:9B:E0:A6:0C:2F:3E:9A
Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial: 06AB
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/F8CE85E2B30211EBA63AE482C4F9AE02.roa
Signing time: Fri 24 Apr 2026 22:30:03 +0000
ROA not before: Fri 24 Apr 2026 22:30:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142027
IP address blocks: 103.166.72.0/24 maxlen: 24
103.166.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Validity
Not Before: Apr 24 22:30:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ebeeeb-acce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:3b:97:47:f8:75:70:40:d8:4d:3b:a3:fe:
d3:ea:8a:26:b1:62:4a:f5:3b:bf:0e:13:72:f1:b1:
a5:6a:d1:47:7c:f5:6c:5c:9c:7e:88:33:56:f9:a3:
4f:27:0c:ea:fe:9d:f2:2d:12:e6:49:3a:9d:73:39:
fd:d7:b9:46:48:f3:a8:0a:09:22:f1:76:5a:4a:c5:
a9:fc:e6:a7:0b:0b:5a:50:dc:0e:ab:81:da:74:a8:
81:9a:d4:63:65:eb:ae:24:da:9f:89:32:78:e0:60:
b0:d3:93:e7:4c:f8:4b:81:4e:da:97:4e:32:d7:e7:
27:e3:83:ab:32:ad:15:d1:5b:e7:00:98:2f:b8:7b:
4b:0a:fb:87:4b:12:93:52:b3:88:24:78:aa:a4:1f:
a7:ae:90:11:2d:63:4a:a8:0f:ed:48:59:75:e1:69:
e4:28:5a:52:88:99:6f:46:63:f2:a1:da:19:e3:55:
b7:bb:6a:d3:48:14:17:aa:ce:06:eb:1a:d8:6c:16:
ad:ae:16:cd:64:30:91:61:53:62:ef:69:3b:05:b6:
18:98:bc:d0:f2:ad:02:5f:42:04:b1:85:75:6c:83:
ca:53:35:53:48:25:23:64:d1:82:52:94:f5:c2:de:
ef:ca:09:d5:a1:93:11:1a:36:35:eb:ae:1a:aa:c7:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:19:18:3F:5A:87:F3:60:B6:F2:80:0B:9B:E0:A6:0C:2F:3E:9A
X509v3 Authority Key Identifier:
keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/F8CE85E2B30211EBA63AE482C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.72.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:90:42:0a:95:95:9e:c0:26:47:10:0b:ea:d1:f0:09:0a:76:
53:36:07:d2:b1:f6:b2:f8:ae:d3:6b:93:ae:64:a8:5b:65:cb:
23:06:43:78:ce:3f:3e:f3:49:3a:57:6f:9b:91:71:52:f4:12:
40:91:1f:0c:9c:ec:a1:01:d6:73:4a:23:74:53:9c:b1:28:d9:
0d:69:0f:90:a2:ff:58:11:4a:da:1f:ab:8b:17:d9:8b:37:0c:
52:f6:35:12:72:56:b0:8a:19:c1:91:28:0a:1c:30:de:eb:26:
d7:78:cb:5a:fd:33:6e:2f:87:bd:fa:d7:4b:ff:bb:a4:1f:de:
a3:44:d3:c2:b3:32:12:64:0f:48:18:b8:f8:4a:7a:45:80:4f:
98:17:eb:0e:9e:e6:fb:dc:0e:67:a0:77:0a:8b:1b:b9:e5:5b:
30:d2:9a:e1:eb:56:c3:2a:a7:e7:35:50:aa:a4:9a:8a:b7:6f:
73:6d:4a:a8:bf:8d:02:62:aa:90:2d:96:72:4f:e4:88:c0:76:
3f:66:6e:43:cd:3d:72:74:96:ff:67:88:38:ae:85:85:0b:05:
16:0b:9a:8a:4b:f5:a2:94:62:54:9a:da:b3:17:bf:de:bd:3e:
06:b8:7d:4e:1e:35:d8:0d:32:30:78:7d:cf:66:40:ec:b8:10:
c5:7b:f0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:35 2026 by rpki-client