
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/36B69F0C218F11F19319393A0D3D8C67.roa
File: 36B69F0C218F11F19319393A0D3D8C67.roa (raw, json)
Hash identifier: Rqu5d6Iyt5RvWg05t+Bs6MR1vP48lOt2FAst15Iu7bg=
Subject key identifier: 99:B4:5D:F3:BE:DB:C6:94:7F:88:A3:BB:13:FB:F5:59:98:53:D8:16
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 0139
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/36B69F0C218F11F19319393A0D3D8C67.roa
Signing time: Wed 05 Aug 2026 06:22:46 +0000
ROA not before: Wed 05 Aug 2026 06:22:46 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 213607
IP address blocks: 163.8.32.0/24 maxlen: 24
163.8.194.0/24 maxlen: 24
163.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 23:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Aug 5 06:22:46 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a72d6b6-deb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:33:a2:9d:9a:d7:3c:79:9b:71:fc:2b:df:
7c:6a:b3:89:c5:2d:fd:b8:21:42:7c:50:2b:e9:af:
33:a3:64:0f:76:53:15:b2:10:33:c5:15:64:16:c8:
34:2d:11:62:5a:d7:ad:76:4b:94:c2:90:1e:3f:21:
2b:d6:f0:f5:1f:5a:9f:15:ba:e9:02:cb:f0:d9:42:
0b:5a:d6:f4:03:ff:4f:65:99:98:5a:5a:59:d3:6d:
27:b6:95:69:fd:49:9b:7d:50:d3:1a:df:8f:8a:b0:
33:99:6f:a3:16:6d:b6:33:ba:31:24:eb:bd:3e:db:
4d:95:be:e1:d8:21:a5:09:e8:73:1e:3a:2b:40:8f:
41:ac:93:58:7d:d7:8d:fd:54:38:6a:38:91:25:9c:
3b:9b:82:e1:b6:11:72:18:e7:a7:47:d9:af:e3:df:
d9:a6:49:0e:ac:76:a7:e7:61:fa:bb:1c:cb:f0:a0:
b6:6f:28:a4:62:ae:21:f2:2d:fa:9e:f3:a9:95:c3:
33:4a:0a:10:df:0e:79:2d:eb:55:a0:c6:42:37:51:
33:ef:83:3c:4d:42:47:7f:e3:bb:41:bf:8e:92:61:
70:a6:51:86:af:e2:0e:22:64:fb:6b:21:7e:1a:f6:
8d:7f:00:92:a9:22:59:cb:1d:97:d1:01:01:05:c2:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B4:5D:F3:BE:DB:C6:94:7F:88:A3:BB:13:FB:F5:59:98:53:D8:16
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/36B69F0C218F11F19319393A0D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.32.0/24
163.8.194.0/24
163.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6c:d6:9a:bf:24:e9:c9:22:b3:44:07:e2:a1:99:da:71:69:
fe:f5:bc:79:72:8e:34:31:31:6a:e5:ca:b5:db:a0:dd:1d:16:
d9:54:5a:7c:22:1e:81:25:be:53:6c:0d:4c:2e:77:42:6b:c1:
97:c0:fa:b6:c5:5d:a0:11:36:9a:83:9a:27:37:64:fc:66:e2:
b1:6e:03:d3:4f:c6:09:9b:fd:7b:40:f5:66:b4:a0:27:6a:04:
c8:93:c6:ff:aa:64:f6:ab:67:95:35:b4:85:9c:57:a7:6f:19:
30:c7:65:f1:08:72:c4:68:0a:60:f0:d9:e8:9c:d8:dd:a9:c7:
86:4a:7e:c4:fe:13:a9:5c:1b:fe:75:ad:76:7b:41:ff:31:72:
5f:5b:a1:ab:a4:61:47:58:6f:b1:7d:3d:11:d7:bb:b6:a5:61:
e6:a2:6c:e1:ac:a4:3b:84:c3:84:2d:64:ad:12:67:de:8c:8d:
b4:97:1f:fa:5f:bc:6b:27:2e:25:ea:b7:74:54:6a:f7:d7:2c:
3e:45:cf:35:91:ed:6b:c2:ac:4e:74:e6:44:55:13:27:b6:54:
98:8d:87:3c:a1:dc:9b:23:eb:31:4b:5a:da:7b:39:de:0a:7c:
f5:a7:04:e6:33:2d:7b:84:88:84:be:88:d4:1b:c2:21:8f:8a:
ed:79:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:24:52 2026 by rpki-client