
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/04656EAC645B11F1B268230A7247A888.roa
File: 04656EAC645B11F1B268230A7247A888.roa (raw, json)
Hash identifier: ZLSg6HwODLo+puhFiwXmPzM7m7MODVG9RC15F63rdlg=
Subject key identifier: 40:E7:FB:31:16:3F:A3:A6:F1:69:47:1C:3F:F9:43:BD:64:4F:08:40
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: D8
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/04656EAC645B11F1B268230A7247A888.roa
Signing time: Tue 09 Jun 2026 23:29:10 +0000
ROA not before: Tue 09 Jun 2026 23:29:10 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.8.32.0/24 maxlen: 24
163.8.34.0/24 maxlen: 24
163.8.36.0/24 maxlen: 24
163.8.39.0/24 maxlen: 24
163.8.41.0/24 maxlen: 24
163.8.42.0/24 maxlen: 24
163.8.43.0/24 maxlen: 24
163.8.44.0/24 maxlen: 24
163.8.198.0/24 maxlen: 24
163.8.200.0/24 maxlen: 24
163.8.202.0/24 maxlen: 24
163.8.210.0/24 maxlen: 24
163.8.212.0/24 maxlen: 24
163.8.214.0/24 maxlen: 24
163.8.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Jun 9 23:29:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a28a1c6-4125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:ea:1b:e3:e7:91:27:68:90:2a:ba:1c:7e:
4f:2a:24:db:dc:3a:5a:97:63:d0:59:ac:3b:02:7e:
67:b7:ba:5f:ec:4d:30:54:ba:05:c7:11:65:5e:2a:
a4:a5:67:18:32:a7:78:a9:71:68:0f:d0:52:b1:2b:
78:dc:be:20:5d:0d:67:e8:9b:99:bd:db:13:bd:98:
6c:db:47:4e:ba:86:28:e6:ba:7b:0c:99:38:10:02:
e6:24:90:79:bf:be:ac:0f:d5:d6:df:50:30:2b:b9:
d8:c4:76:9e:79:a3:7d:cf:ea:a4:6f:61:9b:ea:c3:
f9:60:ad:be:5d:1b:1e:29:43:a3:5e:d0:e1:31:a4:
46:bb:6d:55:7b:e6:f4:cf:0d:0b:2a:8d:8d:54:db:
e6:4a:35:35:30:f9:e9:fd:21:86:19:23:d3:1f:48:
99:85:ac:f4:7f:0b:ed:90:bb:11:8c:b2:2f:71:87:
05:1c:80:0e:ac:73:f3:e3:58:df:8c:65:a2:ec:6f:
d3:04:01:77:96:80:a2:d6:e8:a9:93:3b:f0:6e:be:
87:27:51:3b:e9:8e:b7:f4:31:b8:40:20:ad:f9:2e:
da:53:a6:44:7f:a9:dc:2f:ac:1f:89:7e:5a:ce:4a:
ad:de:e2:cf:01:9c:7e:78:71:72:92:04:cd:8b:9b:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:FB:31:16:3F:A3:A6:F1:69:47:1C:3F:F9:43:BD:64:4F:08:40
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/04656EAC645B11F1B268230A7247A888.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.32.0/24
163.8.34.0/24
163.8.36.0/24
163.8.39.0/24
163.8.41.0-163.8.44.255
163.8.198.0/24
163.8.200.0/24
163.8.202.0/24
163.8.210.0/24
163.8.212.0/24
163.8.214.0/24
163.8.220.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e0:26:2d:2c:0e:fd:36:5e:b4:cb:31:7e:c2:4b:8a:18:12:
80:20:bf:df:92:0e:4c:43:45:7b:17:d2:31:c3:13:42:e9:e9:
54:1d:96:a5:fd:63:eb:db:19:ba:6e:98:e6:5e:aa:fd:8c:f1:
73:76:aa:15:10:8c:35:4c:7a:8a:e5:85:92:ab:1c:61:08:31:
88:8a:8b:b6:d6:ba:f4:a9:13:56:a8:cf:3f:c2:15:98:2c:ef:
b5:6a:e5:c9:82:9f:b1:e9:b1:fc:4f:ea:4b:f1:8d:f4:25:1f:
1f:da:7f:e4:b1:1d:00:12:30:a8:69:17:6c:39:08:aa:64:05:
32:45:fa:72:5a:f1:22:d6:95:6e:43:e9:6d:8f:88:92:d6:24:
51:33:f8:de:f9:e6:0f:b1:51:ca:1a:34:60:94:94:55:ba:87:
65:54:73:0b:db:53:fc:11:7b:80:d0:56:1f:0d:90:b9:f0:3d:
e0:34:7f:52:64:e3:58:a8:a6:c1:99:f7:19:de:e4:42:e8:e1:
d9:3d:c3:e2:ff:a5:b2:eb:b3:77:7f:ca:36:b6:1c:41:7c:9f:
9e:e7:5b:7a:fc:23:23:fa:d9:70:73:df:f2:f1:eb:64:e9:81:
4b:31:16:9c:d5:81:ba:fc:3e:97:77:d3:4b:5b:a0:f3:00:34:
47:45:e8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:31 2026 by rpki-client