
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa
File: 5493E832AF1511F09DB9CB78C4F9AE02.roa (raw, json)
Hash identifier: 51gJn/VKwmKiqlKvZvK/GbzYFHcLoSwqmBRf31iipIk=
Subject key identifier: 0D:1A:71:A9:B0:3A:92:F6:92:57:0C:80:71:24:C8:8A:B5:BF:6D:D1
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 4F
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:15:31 +0000
ROA not before: Wed 22 Oct 2025 07:04:20 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 45589
IP address blocks: 163.8.48.0/21 maxlen: 21
163.8.48.0/22 maxlen: 22
163.8.64.0/19 maxlen: 20
163.8.160.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Oct 22 07:04:20 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3d983-a04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:51:51:4c:9b:0c:e3:d9:06:83:d4:a9:7c:
6f:4a:a1:f0:3c:7c:24:a8:d0:71:94:f1:f5:e3:9c:
da:09:3c:48:ee:0d:6c:23:0c:f9:44:77:31:58:6c:
38:ed:2b:5f:a4:73:3a:5a:d9:d5:62:90:3c:8f:38:
c4:eb:38:fc:1f:b0:65:69:2d:2c:b9:d1:84:f0:97:
83:53:86:3f:f6:ea:da:bc:8c:6f:47:99:1c:50:28:
9b:a5:8f:fc:b6:78:28:dd:ba:df:ce:67:45:6a:ed:
ed:a5:d4:75:a8:f3:45:ca:4f:10:a3:13:2b:85:de:
67:1a:05:a2:71:b5:ae:43:5d:81:0d:93:5a:dc:8f:
13:93:68:84:b6:41:a6:c6:69:c5:e6:b0:64:22:f4:
c4:2d:e3:42:13:55:e8:21:46:0e:a0:e8:09:b8:60:
ed:c2:10:92:55:de:85:d5:77:5c:11:6c:04:81:2c:
c8:d0:b6:97:a8:5b:84:5f:be:2a:39:2a:6d:c1:e3:
0d:aa:5d:ac:39:ba:f3:0e:f7:a0:c0:01:18:c6:99:
e8:0a:4f:3d:da:24:7e:f2:db:a9:4a:80:b5:94:d7:
73:25:51:a2:77:aa:93:db:e2:0c:db:d2:5f:22:07:
ee:2a:97:2b:59:7d:41:26:b8:42:86:bf:e4:4d:39:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:71:A9:B0:3A:92:F6:92:57:0C:80:71:24:C8:8A:B5:BF:6D:D1
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.48.0/21
163.8.64.0/19
163.8.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:14:c5:95:71:ef:bc:5b:2a:36:ef:5e:ac:2d:8c:60:c6:2c:
2b:3d:49:b6:76:19:b0:f2:df:63:0d:8c:94:7d:a7:a7:3f:21:
7c:e3:04:8a:69:46:57:40:8d:8f:19:f6:90:9f:77:61:35:05:
13:0d:fd:c6:3b:0f:b2:ed:a8:4c:f3:a7:0e:91:e2:45:d6:8c:
27:45:57:2b:b8:fb:46:f9:fe:2b:ea:60:b0:24:69:41:ce:00:
ad:3a:40:e0:bb:3c:6d:fa:00:b1:bf:cf:1c:75:c0:e6:69:6b:
02:79:88:50:c9:a1:cc:8b:bb:f6:30:d0:e8:d3:68:24:f2:e9:
30:71:8d:f3:bc:ee:56:74:80:3f:e9:88:95:6b:d0:48:62:e4:
0f:6a:5c:c6:8f:ea:e2:ed:9a:87:40:b0:e2:11:75:58:30:96:
1c:e2:2f:b0:cb:ee:ed:df:35:e5:20:1d:19:23:09:a1:9d:29:
3e:01:56:1c:04:eb:9c:01:6b:45:69:3e:62:6c:98:ed:a3:79:
a8:73:8c:9d:65:8e:ca:50:66:de:83:22:ae:ee:ac:59:4c:5c:
47:b3:ca:aa:a8:d5:08:f6:08:9a:a6:8d:74:9d:e8:3c:75:1c:
0c:85:2a:99:59:78:07:42:db:6d:a8:dc:72:67:b1:7b:d4:05:
9a:16:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:29 2026 by rpki-client