
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/620D8D92B24311F1B988EDDC6311F970.roa
File: 620D8D92B24311F1B988EDDC6311F970.roa (raw, json)
Hash identifier: qxlzMzNMGw6ZR6vXmyZ4a2jsUlkB5KPOP3YwetQdzwA=
Subject key identifier: 3D:66:B1:0D:22:9C:BC:22:DC:2E:FE:D3:FD:56:F1:40:CF:25:60:7E
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 019B
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/620D8D92B24311F1B988EDDC6311F970.roa
Signing time: Thu 17 Sep 2026 02:56:30 +0000
ROA not before: Thu 17 Sep 2026 02:56:30 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153836
IP address blocks: 163.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Sep 17 02:56:30 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6aab56de-061d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:78:1e:72:6c:59:15:02:9c:1b:70:ba:80:
3d:16:e6:03:3a:d1:56:75:d8:41:77:92:df:e4:4f:
90:9f:f1:8b:5a:39:c9:e7:23:7e:08:97:b2:3d:73:
ff:23:88:fa:1c:82:fa:d8:03:a8:dc:0c:8c:c9:1e:
64:78:82:b6:bf:f6:89:0d:be:6b:c3:ad:fe:9e:4b:
4e:44:2a:ba:e8:11:33:b0:c7:4e:80:3e:df:34:bd:
d2:8b:ce:e6:b8:49:02:ab:be:8c:1f:d7:1b:e8:d5:
bc:52:ca:2f:4b:50:e4:12:68:8e:e4:54:27:71:25:
44:31:c2:67:a6:a6:30:b5:47:db:b8:5c:d0:d4:7a:
44:05:cd:ce:9f:0d:e2:0d:aa:6d:c5:ec:d8:df:af:
ed:de:51:70:99:0d:b2:38:09:5c:d0:56:18:7f:50:
93:d8:dc:fd:90:c7:0a:b3:94:7b:15:13:82:c6:32:
57:06:cf:a0:f5:8d:d4:ef:de:15:e4:35:61:7d:a5:
16:44:4c:c7:81:5a:82:8f:26:3b:55:4f:32:ac:9b:
14:6c:60:f2:d1:76:3d:6f:d0:a2:cf:9f:09:c7:6a:
1a:09:dd:ee:6c:6a:09:66:76:fb:47:65:fe:20:2d:
88:12:9d:82:d0:08:1c:51:69:f9:67:4e:7e:58:a6:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:66:B1:0D:22:9C:BC:22:DC:2E:FE:D3:FD:56:F1:40:CF:25:60:7E
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/620D8D92B24311F1B988EDDC6311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e9:12:56:77:da:3d:34:5d:5e:ed:ea:0f:5a:60:5b:b2:c7:
fc:29:b6:6f:f9:20:1e:c4:49:0a:04:3c:55:3f:16:75:a4:3a:
b6:ff:d0:09:53:32:e7:0d:98:65:7c:9f:69:f7:86:b9:06:9b:
70:12:54:ec:f4:0d:29:1f:dc:b9:91:91:97:89:b8:6b:55:c6:
d5:92:30:91:6b:a9:77:e5:aa:a7:46:0e:ac:3c:b6:a2:d5:6f:
96:e9:13:42:c6:11:cd:5d:c0:89:8a:62:4c:94:2b:32:e1:62:
0f:77:8d:1d:d5:ed:fd:e4:ed:ee:e5:56:7e:35:4d:b2:da:3d:
9b:43:39:5a:1a:c0:a1:14:f5:2b:4c:d8:26:a4:f6:bd:cb:ad:
aa:f4:34:37:b5:13:b4:7b:0a:c1:d4:ba:ee:e3:17:62:b2:d4:
a0:f5:f2:6f:e7:aa:2b:39:cb:4f:3d:de:bd:54:d5:75:2b:e6:
27:95:f3:d6:c9:c7:6b:9f:48:78:66:a8:ed:8c:14:3a:44:8d:
94:de:e0:c1:88:e9:04:af:a8:ec:03:1f:58:6b:95:1f:33:fa:
a6:70:d5:69:77:6e:ed:0b:75:d4:d6:15:43:68:a4:55:9a:8b:
a8:53:5f:ca:a9:05:51:da:73:23:9b:8c:a8:96:74:7a:a0:71:
25:e3:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:28:29 2026 by rpki-client