
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/1E62E0DE909611F1890912DC6B11F970.roa
File: 1E62E0DE909611F1890912DC6B11F970.roa (raw, json)
Hash identifier: am5qfpMnpaUwcXDtu2oT9seLFHjolwhX7P/0ErWA4gw=
Subject key identifier: DD:0B:36:8E:C2:3B:5B:57:31:7B:C5:A4:11:4D:4C:17:0E:1D:F5:60
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 013C
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/1E62E0DE909611F1890912DC6B11F970.roa
Signing time: Wed 05 Aug 2026 06:23:06 +0000
ROA not before: Wed 05 Aug 2026 06:23:05 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.8.39.0/24 maxlen: 24
163.8.59.0/24 maxlen: 24
163.8.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 06:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Aug 5 06:23:05 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a72d6c9-0bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:f4:3f:7f:ff:96:47:45:77:62:ea:d2:22:
4e:01:0d:a1:d0:1e:83:86:03:cf:f8:1b:0e:f8:40:
9b:a8:23:40:9b:35:cf:fd:77:01:5a:85:b6:16:74:
d4:00:99:9a:92:4d:52:63:d3:a9:51:03:5c:36:cb:
c6:34:73:37:c1:66:81:75:46:2c:f9:62:5d:b9:be:
66:67:5f:72:e5:36:7b:ae:ff:a8:e8:c7:9b:54:e4:
82:5d:f5:30:ed:2f:59:76:8a:7d:87:fd:6e:77:11:
fd:02:29:79:53:c3:5a:c6:88:4d:a7:5d:14:4a:c7:
53:fa:0e:b3:fd:af:f9:f6:93:0c:f2:f4:bf:2d:b7:
1e:80:42:be:34:c0:24:5a:07:c9:66:7b:19:0c:1a:
ab:13:9b:69:d8:43:80:46:b4:16:fe:c8:d1:b7:9a:
1a:cf:e1:2c:74:c4:db:90:c9:98:99:2f:36:b9:d7:
1f:42:98:bf:d3:c3:1e:d9:f0:99:00:88:24:63:97:
db:ee:27:19:9f:ce:41:2c:83:56:ee:b6:7a:a8:f8:
d5:3b:56:83:6e:81:dc:fe:20:8e:60:f8:30:d7:f3:
b4:1a:f7:74:48:22:0c:ae:02:59:6e:46:6b:d0:6e:
f6:81:2c:54:26:4a:3d:1a:43:c5:cd:1f:e7:31:6b:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:36:8E:C2:3B:5B:57:31:7B:C5:A4:11:4D:4C:17:0E:1D:F5:60
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/1E62E0DE909611F1890912DC6B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.39.0/24
163.8.59.0/24
163.8.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:53:0e:f8:9a:12:c4:10:30:e5:9d:38:37:1f:42:c6:39:97:
3c:3b:d4:37:4f:d7:e3:44:2c:de:59:06:e4:a3:23:95:42:78:
fc:fc:6c:6f:31:ab:bf:2d:b7:38:78:fa:aa:66:5c:af:06:14:
b5:9c:54:f7:ec:3d:37:ee:01:76:1f:67:08:8c:6d:b0:82:f1:
48:34:30:fb:50:17:2d:39:d4:d7:9e:ad:f3:d3:59:12:c1:5e:
da:88:b2:89:b4:de:b9:c8:8e:7c:ba:f8:10:82:84:8f:58:6f:
c3:05:2a:d9:fb:4b:f9:f0:66:36:5d:e8:8b:64:45:2f:cd:18:
67:96:a3:ee:8a:c7:99:76:bf:ef:27:82:f0:f7:77:8c:56:f5:
ec:a9:d6:5a:57:d9:15:88:e2:c6:13:f0:1f:20:f4:4a:c8:3f:
fa:e9:6f:74:f0:7c:9f:00:f6:b7:aa:a5:cf:bf:d4:58:6e:58:
c1:9d:19:90:4e:16:23:92:3b:ef:42:9f:1e:6b:66:e3:79:ec:
de:33:90:0a:f3:d8:bc:94:37:9f:a6:bf:15:7d:8a:59:a8:36:
59:06:c9:78:b0:eb:0c:bc:ba:09:24:fc:73:51:17:94:93:f9:
20:46:70:70:4f:d1:55:08:cb:3d:f0:d6:46:41:17:3c:c1:e5:
b1:c2:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:31 2026 by rpki-client