
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/9FA8D4DCA50411F18265DE6C3311F970.roa
File: 9FA8D4DCA50411F18265DE6C3311F970.roa (raw, json)
Hash identifier: ncxhXez+ge66tRuP9GlI5BQTNpxBURFVOTzkOlVAARM=
Subject key identifier: 12:AF:FD:25:7E:8D:31:FF:06:02:CC:0F:D0:6F:36:5D:9C:0B:23:B7
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 0183
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/9FA8D4DCA50411F18265DE6C3311F970.roa
Signing time: Mon 31 Aug 2026 06:24:30 +0000
ROA not before: Mon 31 Aug 2026 06:24:30 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153736
IP address blocks: 163.8.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Aug 31 06:24:30 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a951e1e-57fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:aa:fe:32:76:66:f6:ab:83:61:e5:bb:ac:
d4:e7:c8:70:e5:7c:7e:35:0a:8e:3b:1f:7b:0a:7f:
fe:38:e3:f3:75:ad:91:54:a5:f2:4e:ec:0c:90:be:
13:4c:8f:2d:74:d0:2d:89:d2:96:b6:87:c5:09:60:
e5:d3:4a:1d:f4:5e:13:3c:d9:03:64:15:92:9f:75:
04:32:be:55:e2:81:58:49:1c:b2:98:14:72:1f:0a:
7f:77:6e:fb:02:39:8f:06:87:b0:6d:91:cf:8f:a8:
1e:17:5f:21:be:1e:42:43:c7:af:ce:5f:23:87:1b:
c5:d0:ad:28:5f:04:0d:00:bc:62:68:a6:8d:88:95:
c8:17:31:38:c4:51:a9:3f:22:18:9c:db:70:25:52:
55:2c:e5:6b:8a:87:a2:1a:6d:a3:50:b4:d1:68:65:
39:52:49:c3:56:53:b4:c0:07:a3:37:0e:08:74:79:
12:67:41:2e:fd:1e:42:60:6d:c7:0a:ca:e1:6e:de:
4d:08:a9:14:c6:d7:3b:a4:38:2e:ce:6a:6b:23:74:
45:3a:0e:01:fe:de:6f:cc:62:e1:e8:7e:2f:da:09:
30:8f:3a:5b:3d:73:a6:50:46:87:16:46:c6:a8:7a:
ca:4f:2d:9a:b2:09:a6:e5:b4:a6:37:13:5b:e2:f4:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AF:FD:25:7E:8D:31:FF:06:02:CC:0F:D0:6F:36:5D:9C:0B:23:B7
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/9FA8D4DCA50411F18265DE6C3311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.218.0/23
Signature Algorithm: sha256WithRSAEncryption
47:fa:60:d3:e0:35:fa:d8:f9:e6:0a:fc:45:98:eb:62:ce:94:
fb:3d:99:45:60:db:3f:7a:6b:dc:02:68:a9:9e:8d:3a:36:c9:
cf:cd:e0:c5:73:bd:da:0a:22:02:f4:0d:a1:c3:27:60:e7:38:
e7:1d:f9:cb:37:6f:1a:5c:3b:76:e2:eb:0a:3f:9e:c5:46:de:
5a:96:86:c1:9b:3f:ee:a4:24:28:6a:ef:39:2d:37:8a:bc:38:
86:42:f5:9f:7f:e5:8a:09:2f:a6:a2:c9:3d:05:3d:6c:34:3d:
dd:e9:25:07:84:e3:2a:d6:aa:c9:f6:09:d7:c7:0e:9a:64:20:
53:ed:1f:f0:a8:28:85:d2:93:2c:5d:06:4d:7a:49:ad:13:2f:
6b:7e:e8:a6:b9:7d:46:22:57:23:91:15:75:21:19:54:87:e6:
20:fe:73:3b:21:c1:a8:cf:c8:00:ab:50:01:ac:b1:95:fa:41:
98:b0:48:26:e7:52:79:7c:b9:bd:d9:ca:ef:b7:d0:20:4b:5e:
07:a8:7c:92:9b:9a:e2:a7:ca:dd:4d:80:bf:23:f2:79:4e:bf:
f1:4d:6e:08:ee:18:c6:d2:1d:b7:1a:cb:0c:76:56:c3:3e:68:
c1:c1:83:3a:f4:a4:d7:9c:46:ed:96:eb:43:17:a1:60:0e:fe:
4f:84:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:02 2026 by rpki-client