
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/2D01B33649CE11F1962271F3A6833773.roa
File: 2D01B33649CE11F1962271F3A6833773.roa (raw, json)
Hash identifier: fE3u6ug0IGHQpJAT/PUe02heuwmqk8tqifUw2JFm9XE=
Subject key identifier: 69:70:FA:0D:B0:9F:14:F6:CB:F6:2A:7C:A9:DD:79:97:8D:2C:65:F3
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: CC
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/2D01B33649CE11F1962271F3A6833773.roa
Signing time: Sun 31 May 2026 02:21:35 +0000
ROA not before: Sun 31 May 2026 02:21:35 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 20473
IP address blocks: 163.8.32.0/24 maxlen: 24
163.8.34.0/24 maxlen: 24
163.8.36.0/24 maxlen: 24
163.8.39.0/24 maxlen: 24
163.8.41.0/24 maxlen: 24
163.8.43.0/24 maxlen: 24
163.8.44.0/24 maxlen: 24
163.8.198.0/24 maxlen: 24
163.8.200.0/24 maxlen: 24
163.8.202.0/24 maxlen: 24
163.8.210.0/24 maxlen: 24
163.8.212.0/24 maxlen: 24
163.8.214.0/24 maxlen: 24
163.8.220.0/24 maxlen: 24
163.8.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: May 31 02:21:35 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a1b9b2f-c7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:50:7b:cb:ea:db:e9:a9:15:c9:34:84:2a:
ac:43:d3:97:a7:f8:a8:f3:d4:93:fc:0c:cf:6d:30:
32:76:b2:f5:eb:a5:51:52:0c:53:d8:84:86:0c:5d:
c7:33:ec:e4:38:80:dd:f8:9f:73:08:c5:01:2e:20:
a8:3e:c2:15:23:f7:5f:c5:2f:b7:35:05:ed:40:0e:
d9:61:f0:bc:c4:d1:68:2e:f3:93:56:4c:d6:d4:8f:
ba:99:e2:8a:fa:38:6b:da:88:65:c9:e4:b7:94:7e:
fa:7d:94:32:38:59:91:81:6b:9a:ad:17:83:b3:40:
08:4f:c3:84:d7:5a:b6:8f:87:b5:89:86:30:aa:0e:
30:d7:38:f8:e6:d6:1d:64:69:de:57:a3:22:6c:b6:
de:80:03:72:8c:bd:23:eb:08:ce:05:0a:8e:42:3b:
b0:6a:c7:b1:68:e6:f6:fc:7e:35:a8:8e:af:4f:28:
bb:32:45:de:06:4d:bf:bb:4c:56:6f:b7:90:36:7e:
95:ed:b1:c0:b3:65:f9:ca:5c:43:20:82:79:11:9e:
e0:85:04:59:05:80:98:cc:59:c8:1f:eb:15:13:7b:
09:bd:ea:22:97:6f:b3:8b:a0:d5:27:1d:73:d3:dc:
3c:07:2c:52:79:22:26:ea:0a:39:69:e7:04:2b:01:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:FA:0D:B0:9F:14:F6:CB:F6:2A:7C:A9:DD:79:97:8D:2C:65:F3
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/2D01B33649CE11F1962271F3A6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.32.0/24
163.8.34.0/24
163.8.36.0/24
163.8.39.0/24
163.8.41.0/24
163.8.43.0-163.8.44.255
163.8.198.0/24
163.8.200.0/24
163.8.202.0/24
163.8.210.0/24
163.8.212.0/24
163.8.214.0/24
163.8.220.0/24
163.8.223.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:76:7f:f2:0a:28:92:af:2d:31:5a:6c:02:cb:85:16:06:95:
5c:77:11:a5:84:bc:70:ee:69:dc:1c:0e:0b:20:22:9f:34:99:
6c:5a:c0:00:0b:fb:ae:38:dc:c7:2b:5c:8e:51:af:4b:e2:14:
67:10:16:3b:3f:c4:a6:a4:71:e7:88:6a:1b:44:56:0b:66:d3:
02:a8:46:e8:d7:d6:03:ac:28:b0:db:f1:8f:85:ac:c1:aa:8d:
69:2a:6e:fe:fe:70:cd:54:ee:1e:60:c8:96:04:35:63:99:0a:
eb:a0:e3:49:d4:90:47:ca:4a:16:fe:c6:ee:53:b3:ba:5c:90:
c9:75:60:09:21:d1:c7:db:c9:b5:a4:23:48:c4:99:ca:0d:2c:
16:17:86:77:d9:fd:96:76:67:2e:63:6b:0c:86:d9:42:f4:c4:
9a:3d:5b:83:03:73:c8:7a:da:09:c5:4a:b5:45:cd:01:44:ed:
96:3a:45:ed:d7:ce:bd:6b:c8:8f:b0:40:27:f9:57:b9:75:85:
d0:8e:23:6a:64:3f:01:8f:7c:e0:30:f2:2d:85:70:24:7d:53:
ef:88:1b:29:a6:e4:62:de:93:b9:65:55:a2:99:92:26:f4:0e:
ff:a7:de:15:b7:d2:02:5c:7d:b4:41:7c:ef:62:1d:88:b9:a5:
ad:e9:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:24 2026 by rpki-client