
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/1FBC70E68ECD11F1A7D369B65A11F970.roa
File: 1FBC70E68ECD11F1A7D369B65A11F970.roa (raw, json)
Hash identifier: p2LsAAju77Wtl4YpBh7a+IK7CkryURGaZtAogo2rH6I=
Subject key identifier: 94:63:66:D0:B5:96:C4:AD:BD:86:EA:A4:70:33:0D:11:28:70:28:C4
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 013F
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/1FBC70E68ECD11F1A7D369B65A11F970.roa
Signing time: Wed 05 Aug 2026 23:15:34 +0000
ROA not before: Wed 05 Aug 2026 23:15:34 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136244
IP address blocks: 163.8.40.0/22 maxlen: 23
163.8.40.0/24 maxlen: 24
163.8.41.0/24 maxlen: 24
163.8.42.0/24 maxlen: 24
163.8.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 06:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Aug 5 23:15:34 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a73c416-f52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:f7:68:5a:1c:23:db:3e:48:df:8a:20:81:
ca:e5:d2:4f:91:ed:7c:09:fc:ea:31:ca:8d:d7:f7:
b6:3c:9a:94:7b:75:36:3a:60:68:f0:61:e0:c9:b5:
f1:9d:b4:9a:60:a2:99:c9:75:f0:ee:33:2e:50:0c:
fe:56:1d:82:53:68:3e:ce:bb:78:83:7f:bf:76:fa:
d3:26:10:12:83:3f:e2:cd:81:b5:c0:68:0b:a3:a1:
94:e9:91:7e:a4:d5:f4:26:2b:6e:cb:98:7d:8c:c8:
a4:83:88:f8:c7:88:25:4d:01:0d:7c:b0:f6:2f:06:
f4:fe:52:c9:04:7f:6d:81:d7:57:ec:5c:22:c6:af:
f1:46:2d:9d:a6:0a:5c:c8:22:9a:9e:0f:bd:8d:3e:
76:88:b9:fb:a7:12:35:a2:69:43:81:8f:c4:3f:32:
5e:e6:ab:2c:d7:14:36:bc:f4:fb:b3:74:62:00:67:
95:ba:d5:09:e7:1e:d9:1a:48:5f:c8:c1:6a:b7:80:
61:b5:58:3e:7f:e1:9b:0f:40:07:d9:a0:98:a5:c9:
b0:6a:53:72:7c:e0:44:70:d9:9d:e2:92:6f:a3:2a:
b3:6e:60:69:94:b5:fc:5b:75:00:13:b7:96:f5:e1:
a5:4d:3e:b4:fa:44:9b:63:05:4a:8b:fe:64:c6:d1:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:63:66:D0:B5:96:C4:AD:BD:86:EA:A4:70:33:0D:11:28:70:28:C4
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/1FBC70E68ECD11F1A7D369B65A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:09:2c:2d:1e:b5:b1:7f:90:74:2a:e0:de:77:b4:4e:bd:32:
60:dc:d2:f9:41:f3:8c:ff:23:64:2e:07:0b:20:d0:46:98:20:
55:42:4c:c7:e1:57:db:26:38:8e:d3:bf:73:ce:a9:a4:13:01:
18:4a:b6:7c:ec:30:57:f0:09:47:8d:f1:94:f2:5d:e0:45:ca:
4c:91:c8:42:dc:4f:12:f4:be:44:9f:b8:ca:09:f6:08:c4:01:
86:6b:0c:ea:12:6a:64:1f:87:65:f7:f4:62:95:e8:67:13:e0:
b2:14:4e:2f:cd:95:0b:44:66:9d:bb:87:5d:b6:d8:c2:0e:16:
b8:27:4f:47:3c:dc:c3:75:c7:6f:94:45:89:36:48:03:5d:f6:
0e:89:ef:86:ef:d8:9b:98:c6:3b:8d:fe:cc:46:40:e7:86:6d:
bb:ed:03:83:8c:90:bd:8e:82:06:49:85:d2:93:bd:03:82:c1:
bb:fb:39:d8:92:78:bb:22:a1:59:9c:e6:07:a3:29:b4:0a:d4:
13:4d:d5:e6:c2:0b:e1:c5:2f:02:2a:00:6d:8e:6a:28:ab:87:
9a:cf:7b:59:86:b9:26:ba:36:e0:53:80:e3:6f:c4:57:fa:01:
5a:c1:95:4a:50:be:a6:09:86:5d:b3:eb:94:31:57:5d:ba:90:
c1:27:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:43 2026 by rpki-client