
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0E6E84F47A6011F1976E05638BA30FBC.roa
File: 0E6E84F47A6011F1976E05638BA30FBC.roa (raw, json)
Hash identifier: HtUuAkol0mHQrD42lO6MoPJ+Ejb03iZZDhqfCwpcfTY=
Subject key identifier: D9:9E:87:4B:20:89:AD:70:96:38:1E:5C:5F:43:07:B4:E3:88:A5:6B
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: F5
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0E6E84F47A6011F1976E05638BA30FBC.roa
Signing time: Wed 08 Jul 2026 00:00:40 +0000
ROA not before: Wed 08 Jul 2026 00:00:40 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 2914
IP address blocks: 163.8.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 01:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Jul 8 00:00:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a4d9328-4b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:52:6b:d2:ff:7d:c8:62:94:34:8c:60:19:
1a:80:95:8e:93:f4:07:03:d8:e6:7a:87:b8:19:ae:
b4:d6:3b:d5:4f:38:9c:f9:14:f7:c2:8b:e7:09:72:
56:5c:da:02:f3:ba:53:6a:d4:29:d4:44:5a:95:3c:
f4:64:dc:51:79:64:31:38:d4:d3:ba:ec:a2:09:49:
b9:9f:74:71:19:09:88:81:4c:92:5c:a8:8c:87:7e:
78:fd:6e:94:14:ca:62:3c:98:0e:59:4a:7c:7a:30:
76:1a:40:48:75:49:4c:92:ed:e8:75:cd:2d:a8:8b:
ac:81:a1:eb:81:3d:71:76:9f:47:94:3d:2a:1a:a2:
c5:10:6e:69:d4:83:34:a1:2a:16:1c:68:13:1a:c7:
20:af:ff:e7:d8:42:93:18:7b:c1:7f:10:b0:fc:a7:
84:1e:49:c4:8b:4a:13:e1:3e:9e:b5:3b:08:df:e6:
ac:a2:74:93:6c:d8:2f:c0:c7:97:ac:e1:31:1b:04:
14:49:32:4a:8c:c0:f4:8c:28:b6:75:01:0a:40:b3:
f9:8c:36:22:73:2e:b0:aa:6f:13:32:20:4b:f0:e5:
09:76:de:9f:43:ed:e4:33:db:82:91:d6:c6:bf:13:
d3:27:1b:8e:5b:71:ac:df:2f:13:ec:35:e5:08:85:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:87:4B:20:89:AD:70:96:38:1E:5C:5F:43:07:B4:E3:88:A5:6B
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0E6E84F47A6011F1976E05638BA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.198.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:ef:63:7d:d8:8c:73:25:66:73:75:35:bb:1c:6c:19:2a:56:
a6:3d:48:fa:4d:a5:81:3d:88:82:21:2c:a7:8c:2e:9c:b8:11:
7e:90:09:47:83:00:88:eb:99:0b:89:72:28:86:20:a2:ed:1e:
b5:1d:5e:f1:33:8e:5c:d7:71:c4:2a:11:78:96:f9:dd:3f:92:
de:ce:2d:27:dd:07:97:f3:02:95:bf:66:16:f1:0c:47:2a:53:
df:e1:02:74:c8:7b:ae:36:be:08:91:d5:c7:46:48:d3:b2:68:
c8:cc:54:ad:11:32:62:a5:bc:65:00:97:3c:c8:9c:05:d3:d3:
02:15:e1:a9:0b:f0:f7:a2:2c:6c:19:4f:67:89:2d:f8:b5:31:
c1:1e:1e:3d:7c:37:b6:05:09:8d:a9:9a:c1:a3:5b:95:e8:6b:
93:a6:38:0a:4e:3e:51:ce:d0:06:ee:15:3f:bd:cf:77:99:68:
f2:ef:fd:98:3e:fd:80:6c:c5:ef:a8:25:10:73:9f:99:4b:03:
c2:91:fb:ec:78:64:26:1d:3a:ff:33:ee:24:36:e0:b8:19:05:
30:5f:d2:23:14:63:b8:51:4f:86:7b:46:94:0a:1a:c1:62:36:
e1:6a:0d:2b:57:f5:e3:02:14:a8:58:3e:30:25:d8:78:ed:aa:
e2:07:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:31:43 2026 by rpki-client