
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/048707902E3E11F18FB4E28692833773.roa
File: 048707902E3E11F18FB4E28692833773.roa (raw, json)
Hash identifier: K3CKFq9dj9GC5sZcbxnP9CeuT3Ddzdh/+xr7StrmVGQ=
Subject key identifier: 10:BB:30:FE:ED:74:B4:E5:7E:E4:DF:04:9F:A4:FB:46:96:E8:C5:81
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 70
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/048707902E3E11F18FB4E28692833773.roa
Signing time: Thu 02 Apr 2026 02:45:32 +0000
ROA not before: Thu 02 Apr 2026 02:45:32 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137235
IP address blocks: 163.8.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Apr 2 02:45:32 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cdd84c-79c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:24:24:56:8a:5c:6c:f0:6e:8c:e8:26:88:
8a:d0:89:0d:3e:51:48:cb:b1:5a:ae:21:7f:e9:11:
35:de:cd:80:5d:34:cb:ac:11:6e:b2:ec:72:f0:ba:
58:da:06:f9:ae:da:c9:88:e3:d3:6e:98:fc:30:68:
d1:c5:a2:08:fd:ac:7f:26:af:7a:66:b0:00:26:2d:
9e:49:11:bb:0f:88:9a:ff:e5:50:51:67:08:36:aa:
54:d7:1f:90:f1:00:c4:94:49:81:ed:38:5d:77:e4:
7c:88:53:80:09:61:cd:90:b0:d7:43:53:ce:34:27:
60:93:28:83:7f:92:20:d1:03:8a:ff:05:22:a1:5b:
31:b0:28:26:69:d2:2d:c0:f0:e6:5c:b4:17:96:a3:
e2:f1:10:86:d0:dc:ce:40:30:17:03:9f:21:89:3f:
1b:83:07:d0:2e:75:10:f2:87:90:04:0a:e7:66:db:
85:9e:d6:71:9d:99:a0:be:35:05:ad:b7:6a:50:fb:
09:f1:91:09:93:e6:bf:08:15:0b:93:e8:8e:e3:f0:
e5:7b:16:c7:08:29:f0:92:f7:b4:2c:b1:51:7c:eb:
09:11:d2:4c:8f:60:2a:8f:b7:7f:c7:e9:e4:db:bf:
85:5e:11:a9:81:b8:97:29:71:fa:3f:51:7c:7d:a1:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:30:FE:ED:74:B4:E5:7E:E4:DF:04:9F:A4:FB:46:96:E8:C5:81
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/048707902E3E11F18FB4E28692833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1c:2c:c2:35:15:a9:d6:d0:cc:bb:1d:b4:66:4c:7d:de:5a:
21:3f:d3:dd:79:30:81:8e:e9:cc:80:1e:3f:5a:c6:8b:17:fb:
e9:91:0d:10:5a:4c:43:83:03:69:ce:a6:4c:f7:cf:ce:86:ba:
ac:24:5a:c2:63:19:a2:f7:a1:a2:da:5e:d3:ec:4c:1f:61:9a:
76:f3:06:9f:d3:40:7d:eb:ba:fe:23:0e:ae:f6:fd:1c:1c:6e:
14:02:e7:64:5a:7a:69:9a:c2:e2:01:35:bc:0c:99:3f:66:55:
5e:d0:fd:87:6d:d6:93:09:b0:82:bb:11:e6:f8:53:a2:24:c8:
86:1f:5e:7b:ae:db:7a:2b:4f:45:78:a6:1c:30:00:51:8e:25:
d6:90:96:8e:6f:71:0c:16:88:8d:d3:ba:c7:96:3b:4a:4b:a6:
b6:cc:b0:2f:7d:c5:3e:fb:a3:d2:24:e6:b5:46:f0:70:78:0f:
1f:54:18:26:7c:c9:ae:2b:d0:3f:09:23:9c:93:17:96:ef:af:
dd:52:f0:88:ef:7c:b5:9b:a4:53:84:cf:bd:80:19:5d:78:82:
fc:d0:0f:ca:7b:da:e3:54:79:25:ae:1a:fb:0a:97:e1:01:b5:
5f:c9:e3:4b:19:36:3d:21:5a:61:97:95:ca:c7:10:3d:6a:c5:
e2:be:59:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:41 2026 by rpki-client