
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B9DCE45A347111F19700968FA5833773.roa
File: B9DCE45A347111F19700968FA5833773.roa (raw, json)
Hash identifier: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=
Subject key identifier: 53:BB:88:52:15:8D:DF:A7:95:8E:B9:9E:5E:57:74:5D:50:E1:6D:33
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 7C
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B9DCE45A347111F19700968FA5833773.roa
Signing time: Fri 10 Apr 2026 00:10:48 +0000
ROA not before: Fri 10 Apr 2026 00:10:48 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 4593
IP address blocks: 163.8.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Apr 10 00:10:48 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d84008-62ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:05:65:9a:f4:2f:92:a9:ca:5d:92:a0:61:
9f:1c:58:60:92:94:3e:7c:5e:96:bc:34:f6:1e:73:
f5:e2:a4:93:c8:18:53:44:32:51:30:ba:d0:86:d0:
87:2f:44:4b:e0:19:70:b8:93:6d:7f:64:36:f0:cc:
7d:ad:90:17:81:65:de:3a:5e:4f:89:c9:95:b6:d1:
24:2f:91:f5:0f:d7:18:8d:56:76:71:bd:ad:1b:56:
ff:e4:27:8a:c7:22:0f:a2:d8:62:be:fd:e5:1f:c0:
e7:55:06:0f:3e:d9:6f:47:8c:1b:1a:0b:8f:14:dc:
b8:a2:46:94:04:60:9d:d4:d0:22:67:a2:aa:6c:d3:
7a:82:bc:f5:33:6a:47:ba:a7:53:ee:52:e7:c1:87:
ba:49:3c:b3:ed:b5:c2:68:33:cf:7e:ca:a8:9e:27:
e8:c0:8b:6b:7b:49:a5:3b:4f:2b:86:b3:e4:c5:82:
79:e5:47:00:75:57:d7:79:b6:ed:ba:b4:9d:8c:c9:
32:cf:4e:db:5d:7b:f3:b4:8e:8f:de:6e:8f:f6:35:
90:54:5d:bb:d9:66:6b:e9:7e:36:94:39:97:0c:e8:
bb:5f:9a:ed:98:4b:bb:64:58:e3:ee:24:c3:48:16:
11:9d:3d:40:28:e9:19:98:17:e3:bd:51:a3:3b:ae:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:88:52:15:8D:DF:A7:95:8E:B9:9E:5E:57:74:5D:50:E1:6D:33
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B9DCE45A347111F19700968FA5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.221.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4c:80:5a:37:21:e2:6f:eb:c3:17:12:b5:cb:2e:ef:07:ca:
01:3c:b7:08:cf:98:99:b5:03:05:88:3d:d4:4c:4e:63:0c:47:
b4:a7:19:d9:43:08:39:83:8d:c0:2c:93:8c:1a:4e:79:17:7d:
47:ad:5e:d3:d5:fe:a7:bd:ef:f8:04:18:bd:d3:8f:3e:6d:fd:
8b:72:50:30:dc:63:52:50:26:8a:9e:de:29:e7:ad:3c:d4:52:
d1:46:26:5d:73:98:d3:02:9c:a2:97:c8:ed:ed:94:a5:48:0e:
18:2d:9d:50:62:c5:84:f2:bd:11:20:82:04:29:ba:06:d8:8a:
c3:63:03:19:e7:19:45:0c:84:e2:41:fd:4c:30:45:40:3d:1f:
1c:f7:e3:ae:50:43:25:c0:3e:81:26:9f:01:18:99:95:3e:34:
6e:31:e8:7f:23:7c:fe:b7:dc:6d:f3:15:63:91:6c:e7:87:d7:
8b:fd:fc:34:57:20:dc:16:c3:79:21:5b:bc:eb:fe:9a:bc:14:
97:80:25:e7:14:fb:9e:f3:1c:47:5c:f8:70:59:76:07:b6:bc:
aa:ca:74:b1:90:1a:93:af:10:50:ee:32:21:9c:62:ba:38:c0:
d8:a2:93:fa:1d:8b:c6:0b:b0:f4:9f:b0:d8:47:7d:5e:4f:f8:
42:3b:6a:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:47 2026 by rpki-client