
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa
File: 8FE569EC776B11F0B156EB5AC4F9AE02.roa (raw, json)
Hash identifier: mAetrzmxM2ZT4+crCKozE+BAJ9ciI8UzV9keXEOThDU=
Subject key identifier: 30:79:43:5A:35:C7:A0:17:72:08:71:35:EB:7A:C8:5B:9E:14:AC:A3
Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial: 062A
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:59:00 +0000
ROA not before: Wed 13 Aug 2025 06:49:46 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.166.60.0/23 maxlen: 23
103.166.60.0/24 maxlen: 24
103.166.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1578 (0x62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Validity
Not Before: Aug 13 06:49:46 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58994-f264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:6c:dd:73:bb:e8:58:f0:5b:24:a4:be:d3:
b3:7e:d1:55:fa:e7:18:99:5e:f5:4b:67:02:78:00:
51:dd:0d:fc:31:92:0b:ed:b0:93:26:18:ed:e6:22:
1b:6c:7b:05:32:84:61:a6:86:c8:db:b7:e5:43:16:
0f:5c:1d:0c:06:10:ab:99:dc:22:4f:15:79:67:45:
d4:73:94:d8:d4:0c:52:71:7f:6e:06:0f:3f:cc:90:
e7:06:0e:7a:72:1c:23:31:ed:68:c7:ea:66:92:49:
c4:d8:9b:22:b4:da:16:a8:de:9a:b2:4d:18:f7:bb:
7e:0e:03:98:1a:46:3c:6d:68:3a:8c:64:7c:f6:7a:
b1:37:b3:39:98:20:1d:6b:05:16:e2:1d:16:9a:58:
d9:7d:8b:10:ee:34:b9:0b:cd:94:aa:fc:04:48:75:
d6:1a:29:1c:fc:f3:6d:93:16:42:0f:0c:95:0d:66:
24:65:c6:ad:28:c8:fa:33:99:0e:f8:69:63:a1:71:
cb:3a:30:dd:33:66:8f:01:fd:a7:f1:80:29:02:0c:
79:53:94:7b:57:de:b1:7e:7a:00:f9:4a:a7:eb:74:
78:53:a6:72:f9:82:ce:fc:72:84:e4:d1:42:9f:3d:
93:4f:c0:38:df:77:f2:01:4d:aa:23:2e:56:37:cb:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:79:43:5A:35:C7:A0:17:72:08:71:35:EB:7A:C8:5B:9E:14:AC:A3
X509v3 Authority Key Identifier:
keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.60.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:5c:a8:bb:af:b7:21:1e:a5:7e:cd:90:39:df:f6:d0:c2:42:
8f:95:bd:90:f3:3d:e9:08:79:48:d3:3f:60:fb:f7:a8:03:24:
5b:d9:d2:fd:6b:e9:0e:d3:80:4e:3e:7b:9e:f1:0c:8e:46:ec:
2b:69:3f:a2:cb:2a:c1:ff:23:03:96:b9:a2:9a:a6:de:14:c3:
4e:ba:2f:14:2b:6a:4b:92:8c:d6:50:8e:89:44:cd:53:41:58:
bb:05:d8:e0:ea:53:d3:40:d9:e7:d8:c0:46:db:25:23:af:5c:
c6:d9:5b:27:f1:05:f6:4c:68:bb:8a:b7:0b:ed:dd:ad:03:57:
5b:c2:b9:1a:38:af:27:9e:48:c9:9c:96:fb:e4:cf:4e:8a:60:
0e:84:19:1b:f5:d7:9c:69:2c:84:fc:d5:dd:0b:2f:62:ab:71:
be:5c:cb:9a:b9:77:b2:72:b2:de:8a:7e:fe:b2:49:e1:9f:92:
76:84:1e:ef:2c:c9:b0:ba:55:4a:e9:fb:4d:c5:02:f5:89:68:
2c:1d:70:ef:87:0a:f6:88:56:66:a7:80:3c:03:ff:05:fd:93:
64:8e:33:ba:05:9a:d5:a3:ff:a0:18:56:be:36:be:62:79:63:
ed:6e:0d:1b:e8:b6:54:57:38:33:cc:8a:c4:bb:e3:c1:6e:bc:
d1:02:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:15 2026 by rpki-client