
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/C9D8A890D0BA11F1840EBE782366CEF9.roa
File: C9D8A890D0BA11F1840EBE782366CEF9.roa (raw, json)
Hash identifier: KZRiVqQDm3dexMsDSdmirKfLJNix8BeJiHEe4YchE3g=
Subject key identifier: 46:04:8A:D0:54:1B:E4:E5:E1:D3:5A:C7:6E:AE:81:6E:C2:D3:C0:05
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 01D1
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/C9D8A890D0BA11F1840EBE782366CEF9.roa
Signing time: Sun 25 Oct 2026 21:26:50 +0000
ROA not before: Sun 25 Oct 2026 21:26:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 214143
IP address blocks: 163.8.35.0/24 maxlen: 24
163.8.36.0/24 maxlen: 24
163.8.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 07:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Oct 25 21:26:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ade7419-3403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:de:aa:c2:20:95:cc:08:83:f3:87:83:cd:
42:d2:8d:0b:d1:04:ec:cd:b0:a8:8d:6d:81:85:97:
5d:ca:5b:be:c8:d6:13:39:85:dd:60:51:cb:eb:24:
9e:01:b2:a8:a9:49:98:f6:a5:c6:9c:38:ba:c6:ba:
f3:41:3b:b8:1e:cc:f4:ab:92:8d:f2:32:fa:6d:ce:
91:50:40:47:18:73:26:30:a4:e6:ad:dc:b0:03:91:
de:21:21:d5:9d:fb:13:a6:03:f5:3d:a0:dc:78:59:
02:a8:49:d1:79:0e:5a:85:28:97:94:c7:b4:cd:66:
b9:1e:16:00:33:9e:ad:d5:2a:69:53:8c:82:52:38:
22:d9:56:ba:ef:38:70:b2:85:21:e4:1c:e6:cf:33:
75:13:e5:24:c7:45:f9:a1:ba:eb:f5:47:35:7b:2d:
b1:2a:25:88:e6:85:98:95:79:f2:64:c8:74:99:1b:
d6:76:fd:cf:e9:1d:5f:9f:a6:71:6c:08:f8:96:4a:
6e:25:71:68:d9:33:e4:03:4f:6a:df:fe:ac:dc:14:
1b:19:3a:d7:ac:2a:f5:8c:90:54:d9:34:ee:75:2b:
11:a9:a4:4f:2c:18:ae:6a:8a:c4:9d:a9:0e:d0:2a:
a9:bc:0e:f5:f6:a4:02:f7:da:3d:a9:fb:d6:00:ed:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:04:8A:D0:54:1B:E4:E5:E1:D3:5A:C7:6E:AE:81:6E:C2:D3:C0:05
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/C9D8A890D0BA11F1840EBE782366CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.35.0-163.8.36.255
163.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
db:0b:16:11:c7:50:82:ee:01:66:2a:e6:51:98:cb:d2:2e:ec:
a3:76:5b:3a:1e:68:8b:8a:4e:70:fd:85:41:d3:cc:7f:aa:5e:
14:09:ee:f3:8d:e6:99:8e:0c:0f:7b:27:da:79:62:16:2c:d0:
4e:bb:50:48:14:0e:8d:a9:45:79:e8:96:6b:81:f9:47:ca:ea:
62:94:b5:d1:e1:06:6b:91:12:68:2c:56:e1:05:fa:e9:a2:1e:
e6:53:3b:fb:f2:5d:7b:67:85:43:3a:ba:09:ce:bf:d6:aa:18:
ab:4b:8f:90:f9:06:2b:f0:af:c3:5d:f2:2f:78:9a:b8:7d:d6:
95:42:f3:15:3c:f5:26:03:85:8e:3f:01:3b:85:ea:de:c0:a6:
3c:42:06:0a:db:c1:c9:53:de:a6:72:66:e3:6b:34:76:e5:32:
1f:ca:e6:09:57:e4:e5:c6:e6:2b:7a:b1:97:4f:d4:68:ad:b9:
7a:be:f3:42:af:4b:5d:e4:3d:80:d3:5e:63:8c:22:57:65:fb:
ec:a1:25:b0:33:1c:e0:6b:19:61:e3:1a:b0:50:d6:37:66:12:
5c:14:c0:be:69:d9:12:58:3c:8f:4c:49:01:be:81:02:5e:e1:
6b:71:6e:8f:0e:e6:af:27:c6:2c:d2:a6:a9:75:ac:14:34:2b:
ab:87:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:15:33 2026 by rpki-client