
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/18451E6C2C8011F18C554E5FB9833773.roa
File: 18451E6C2C8011F18C554E5FB9833773.roa (raw, json)
Hash identifier: 0ajQVVt6txOWHrToCyfiYFAV+lg67YKLG6n9YvJrg14=
Subject key identifier: 1B:49:32:0D:73:1C:2C:34:02:26:98:36:33:5A:F6:FE:D6:73:3E:4D
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 72
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/18451E6C2C8011F18C554E5FB9833773.roa
Signing time: Thu 02 Apr 2026 02:45:34 +0000
ROA not before: Thu 02 Apr 2026 02:45:34 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 142146
IP address blocks: 163.8.61.0/24 maxlen: 24
163.8.192.0/24 maxlen: 24
163.8.195.0/24 maxlen: 24
163.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Apr 2 02:45:34 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cdd84e-6bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:cc:a6:19:b5:ce:a2:3c:bf:77:07:42:e4:
3f:31:c8:40:40:1b:ee:ca:79:06:09:af:92:8a:8b:
4a:6d:8a:63:fb:c9:19:70:e3:dd:62:15:ef:e0:87:
e2:03:a9:cb:b8:d6:1e:13:57:02:59:c9:ad:94:ca:
ee:ef:2e:b4:7e:77:0e:45:87:ee:30:df:c3:19:ea:
28:6b:07:6b:fb:0a:d3:81:f7:76:54:fb:9e:40:e8:
0f:dd:a4:19:14:b2:be:89:97:90:0b:c7:d0:74:bb:
45:bf:40:00:56:56:7c:b8:a0:81:ae:18:93:a7:eb:
35:c6:28:d1:b9:8e:96:6d:1a:65:20:8e:22:43:77:
6d:28:3d:a3:e8:0b:fc:8c:97:1a:4c:c1:9b:40:9d:
d5:d2:2d:8b:2e:ce:2b:ea:56:39:08:7a:ce:52:34:
25:69:2c:1c:17:b0:6d:5a:fb:33:22:0a:2a:a8:69:
37:e8:7d:08:ca:34:05:69:2f:47:d7:32:6f:e0:d3:
5c:23:ba:23:b2:33:07:d4:09:2d:f9:3c:53:f8:ab:
05:1c:91:80:27:0f:8e:4c:5f:ec:cf:81:df:79:a4:
22:a9:48:8e:00:2a:ee:38:ae:26:e2:70:fc:45:e5:
5d:b5:97:4f:30:70:9a:4d:0d:4b:b6:c2:21:c9:9b:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:49:32:0D:73:1C:2C:34:02:26:98:36:33:5A:F6:FE:D6:73:3E:4D
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/18451E6C2C8011F18C554E5FB9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.61.0/24
163.8.192.0/24
163.8.195.0/24
163.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f4:9d:0f:f5:ee:18:36:ac:dd:56:8b:5e:43:cd:5f:6a:b7:
cf:7d:3c:77:e9:0e:84:74:62:c9:fd:00:33:99:fb:b4:87:b4:
6a:5e:78:50:83:c0:2f:cf:81:14:3c:0c:4f:57:9d:41:27:0f:
eb:f4:aa:96:23:6e:9f:cd:0c:0d:70:9b:40:3a:1d:5a:52:28:
21:4d:d8:02:29:a5:e0:06:05:1d:0f:d8:6b:19:41:63:dc:fb:
06:5d:b6:14:a6:2c:15:66:7d:c3:00:b8:34:90:e6:be:e5:a8:
72:84:9b:e5:e6:c7:69:bd:57:93:49:6b:99:b4:ae:f0:9a:b3:
7a:f2:20:d8:ed:b0:11:e9:e4:47:17:f1:36:f4:09:77:11:d3:
3c:ef:80:18:d5:41:80:65:26:87:74:1f:80:b1:b7:2f:9b:f3:
36:84:2a:c9:23:ac:00:20:7a:5c:cf:54:7c:6e:a4:f7:85:b0:
4e:21:0c:40:f1:94:50:8a:ec:5b:af:7e:50:06:58:34:48:49:
41:ad:b9:25:a2:fa:0a:80:7a:f6:2e:5f:d2:64:d9:10:db:6d:
ee:d2:d4:70:48:2b:e6:de:72:dc:a9:86:df:7b:3c:30:1e:d2:
6e:49:bd:3b:bb:ae:6c:ba:36:44:1f:32:62:5f:b2:38:f4:6c:
ce:92:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:41 2026 by rpki-client