
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/783697D2107A11F1854A0E192E3D8C67.roa
File: 783697D2107A11F1854A0E192E3D8C67.roa (raw, json)
Hash identifier: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=
Subject key identifier: 7F:7B:46:8B:4C:24:02:D1:12:C3:D2:89:8E:D5:0C:7B:77:F6:B2:DC
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 35B4
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/783697D2107A11F1854A0E192E3D8C67.roa
Signing time: Sun 01 Mar 2026 18:40:48 +0000
ROA not before: Mon 23 Feb 2026 05:43:27 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 9318
IP address blocks: 157.66.64.0/24 maxlen: 24
157.66.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 14:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13748 (0x35b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Feb 23 05:43:27 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4882f-06d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:93:16:19:f9:66:26:56:4f:91:a9:54:f6:
25:34:40:c3:05:fb:df:5c:28:49:9b:a3:f6:d6:e2:
a5:e9:92:1a:7d:59:f0:f5:37:c3:a3:3c:3b:b5:61:
48:61:97:62:54:9d:90:67:4c:ee:16:1b:2a:96:70:
f1:00:12:dc:95:03:25:6e:a7:94:cc:08:de:7e:36:
09:20:4e:e1:6a:2e:af:42:09:1e:25:f5:9c:a7:e5:
00:d9:8c:d6:42:65:35:0b:52:ca:9f:15:68:2a:05:
6d:be:21:95:4a:29:50:f9:ff:83:0f:de:4a:c7:be:
71:98:f1:9b:f2:ba:68:4e:7a:89:f4:bf:04:23:c3:
17:26:ce:68:0e:02:85:18:47:58:25:b0:8f:54:0f:
a8:69:66:66:82:e0:54:90:52:25:03:a7:7f:6e:8e:
21:eb:a1:78:c6:71:52:de:9b:1f:7b:67:c8:36:39:
d2:31:2e:21:dd:94:b1:5d:43:2b:db:fb:0a:84:58:
1b:6f:db:fa:60:02:be:20:4e:77:16:c3:a8:f0:ed:
54:fd:90:09:1c:ff:f1:a1:42:83:af:fd:81:52:81:
26:41:5f:64:03:66:0b:f8:6b:79:c0:48:81:49:77:
77:19:e3:b9:9d:03:13:9a:19:aa:15:f0:31:93:17:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:46:8B:4C:24:02:D1:12:C3:D2:89:8E:D5:0C:7B:77:F6:B2:DC
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/783697D2107A11F1854A0E192E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.64.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:b5:8c:41:07:d3:4f:dc:b5:b0:17:2d:5d:8f:0f:10:56:c8:
8a:2b:5a:43:ec:ee:c7:d5:d3:70:60:e4:d4:01:37:f2:0d:fd:
9c:db:97:9a:49:e7:f7:be:ed:5e:73:e8:b4:4c:e7:b2:00:d2:
76:cc:1b:d9:40:1c:fd:48:c1:71:52:07:71:98:ff:bb:c7:1c:
07:9c:94:7f:07:00:bf:52:2e:e4:61:b6:20:e2:f8:b8:e6:ee:
92:82:79:f4:62:1b:a1:eb:05:02:3b:7f:a5:93:c9:14:00:9a:
2f:95:d7:95:4b:b2:c7:08:81:25:be:38:78:d7:72:32:02:d5:
9f:72:4e:52:e2:06:ae:89:83:6b:90:a0:08:ae:d6:a8:04:43:
01:68:6c:bb:f3:4e:5f:91:2f:96:26:b3:a5:42:cd:02:3d:4f:
73:61:b1:14:3c:26:fb:4f:54:25:55:84:b1:99:28:4b:61:a0:
9f:f1:95:26:62:37:49:8c:fa:34:2b:94:d2:4a:71:1d:09:67:
8b:5f:26:89:33:28:81:d7:e9:de:94:a6:96:d6:ac:a4:ed:11:
fd:22:d9:32:21:bd:3e:3d:bd:1d:fc:8d:9a:f3:54:b4:6d:dd:
e1:f2:55:a2:66:a8:76:b5:2b:ca:4b:4a:d1:01:3f:88:83:9b:
61:a9:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:01:39 2026 by rpki-client