
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/031EEDBCBBBC11F1BE6A84C15C11F970.roa
File: 031EEDBCBBBC11F1BE6A84C15C11F970.roa (raw, json)
Hash identifier: yeGxyr5iuQh6lfnN2XMkpjaKZ4Xc34hL8spoymNcpy4=
Subject key identifier: EF:C3:2E:26:5F:C1:24:7B:D1:DD:90:92:65:46:EA:E6:06:00:F2:1F
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 01B9
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/031EEDBCBBBC11F1BE6A84C15C11F970.roa
Signing time: Wed 07 Oct 2026 01:14:19 +0000
ROA not before: Wed 07 Oct 2026 01:14:19 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.8.34.0/23 maxlen: 24
163.8.36.0/24 maxlen: 24
163.8.205.0/24 maxlen: 24
163.8.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Oct 7 01:14:19 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ac59ceb-1028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:4b:fb:ba:ed:74:38:5f:30:52:7f:ea:c8:
ec:39:06:7e:03:2f:cd:3b:b3:9a:5a:b3:a6:92:3f:
ee:85:01:bf:e2:df:ba:d3:19:a1:54:5f:a2:ec:2f:
07:92:69:d7:3b:11:4a:81:fa:fa:1e:8c:57:74:24:
fd:ab:72:15:e6:3b:8f:9b:6a:bb:5a:22:6b:3f:bb:
91:01:74:ab:eb:79:f5:14:c2:a0:be:00:0e:7f:cd:
7c:5a:54:92:9e:3c:a6:28:c0:d5:0d:d2:b7:8e:f2:
e1:9a:7a:3d:02:4d:89:83:27:b6:0e:ff:fb:99:c7:
b7:97:65:1f:f5:8d:3d:6b:98:96:6e:e8:92:39:4d:
47:e6:9f:5a:ec:ee:e9:95:75:c1:8b:e5:03:18:7d:
3c:29:82:bc:bb:29:38:e8:ff:7c:f6:7b:e7:68:94:
7d:66:e9:b4:fc:a5:12:64:57:3a:76:f0:e8:18:81:
35:b4:76:23:94:02:b7:e9:4a:f3:c2:ed:42:db:5b:
29:13:10:08:76:45:96:e4:18:3a:b8:1d:12:da:ee:
28:cb:2d:b5:cb:dc:f5:7f:30:65:6d:33:39:f9:51:
ad:18:cb:61:53:05:af:7f:71:b2:7b:9e:12:d0:a2:
1d:f4:8e:ad:63:91:01:b7:d2:33:8d:24:44:fc:50:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:2E:26:5F:C1:24:7B:D1:DD:90:92:65:46:EA:E6:06:00:F2:1F
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/031EEDBCBBBC11F1BE6A84C15C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.34.0-163.8.36.255
163.8.205.0/24
163.8.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:05:fa:4f:e0:c9:d9:82:86:4d:df:0a:e8:da:8d:e1:8d:d6:
65:ff:b1:34:68:63:47:c5:ef:31:4b:2a:77:58:37:83:cf:cb:
65:5c:c9:3b:5b:b0:9c:9e:62:2a:f1:b7:76:a3:67:3c:83:13:
ca:07:5a:30:ab:fe:3e:7e:75:fc:bb:11:ed:4f:14:e3:77:3e:
1a:59:c6:da:a6:41:49:cd:15:e5:db:66:ed:d9:d6:c3:cc:05:
64:8e:22:5e:34:3a:0d:ba:17:02:65:7b:51:d4:c1:13:bf:98:
39:7b:21:ab:72:53:5c:65:46:a9:57:fa:0a:06:3c:a2:1b:ca:
7f:cd:17:f9:fb:78:bd:a9:86:21:69:f9:2b:d3:e7:5b:10:28:
f3:5e:ac:ca:bd:b6:e0:0a:f1:e1:03:d7:69:5f:5d:2f:54:2a:
73:b5:3b:ac:1a:f2:98:4f:55:f3:f5:7f:77:2f:6f:a6:57:00:
71:f0:1e:42:31:e3:37:f0:f6:1b:af:21:ef:c4:f8:1e:26:94:
5d:97:b3:67:ab:9d:ac:2c:c5:41:21:33:03:46:08:84:ff:cc:
20:e8:ea:27:6e:bf:7d:02:02:60:e7:28:3b:8a:44:fa:7a:8f:
63:8e:2d:b8:7b:ee:82:8c:cd:6d:eb:0d:30:a5:dd:d6:97:d9:
46:7e:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:22:35 2026 by rpki-client