
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/661016326EAD11F19155D21761A30FBC.roa
File: 661016326EAD11F19155D21761A30FBC.roa (raw, json)
Hash identifier: YTWmohwpwhoCmZfIxLG5hC9pLYMTv1xAlbNU9dLIWJI=
Subject key identifier: 68:D0:DF:05:49:83:69:93:23:67:B4:47:CA:1B:23:45:1A:D0:E1:7F
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: E7
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/661016326EAD11F19155D21761A30FBC.roa
Signing time: Tue 23 Jun 2026 02:44:05 +0000
ROA not before: Tue 23 Jun 2026 02:44:05 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.8.32.0/24 maxlen: 24
163.8.34.0/24 maxlen: 24
163.8.36.0/24 maxlen: 24
163.8.39.0/24 maxlen: 24
163.8.41.0/24 maxlen: 24
163.8.42.0/24 maxlen: 24
163.8.43.0/24 maxlen: 24
163.8.44.0/24 maxlen: 24
163.8.198.0/24 maxlen: 24
163.8.209.0/24 maxlen: 24
163.8.210.0/24 maxlen: 24
163.8.212.0/24 maxlen: 24
163.8.214.0/24 maxlen: 24
163.8.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Jul 2026 08:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Jun 23 02:44:05 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a39f2f4-391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:69:53:27:27:d2:01:f6:42:da:7f:c7:10:
68:48:20:62:85:9e:e5:cd:f3:ec:e2:f9:94:3f:56:
d5:0f:17:bd:b5:5a:15:db:ea:b0:62:42:5c:64:e9:
6b:7e:a1:ae:e0:a3:28:c0:37:6c:92:f4:a0:5d:05:
79:3b:88:59:87:55:91:48:e7:6b:fd:3e:d0:6f:2b:
06:6b:51:54:1d:1b:97:78:e8:ee:43:3c:17:fa:98:
2f:c5:de:d7:82:16:b6:e8:40:08:ae:10:37:9d:0b:
50:a6:af:d0:6c:4a:b0:18:b5:42:2f:f2:5c:ec:02:
84:08:2d:d1:bb:6c:fc:c1:8a:9d:b6:a7:f8:e0:1a:
18:4b:0d:55:b8:e7:cb:ee:9d:a9:6e:fc:50:f7:bd:
21:96:22:77:1b:84:42:31:d9:02:84:f1:3a:96:80:
e8:d3:de:6a:2c:8a:93:ca:17:70:2b:0b:4d:66:39:
4b:8c:b0:1f:d7:c3:4c:44:d7:48:5a:5c:1c:bf:6a:
f3:56:33:42:77:05:c2:ea:5d:98:57:66:82:28:70:
8c:0f:98:d9:ea:5e:18:3d:06:aa:d4:72:0c:a9:db:
1f:18:e1:9c:46:ca:45:bd:8a:39:ac:1e:7b:b2:6f:
1b:69:bb:56:7f:98:64:4d:a3:c5:86:a2:f3:59:3d:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D0:DF:05:49:83:69:93:23:67:B4:47:CA:1B:23:45:1A:D0:E1:7F
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/661016326EAD11F19155D21761A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.32.0/24
163.8.34.0/24
163.8.36.0/24
163.8.39.0/24
163.8.41.0-163.8.44.255
163.8.198.0/24
163.8.209.0-163.8.210.255
163.8.212.0/24
163.8.214.0/24
163.8.220.0/24
Signature Algorithm: sha256WithRSAEncryption
82:23:13:05:c8:80:97:0f:ce:c7:52:e7:54:24:a7:71:fa:d4:
d0:5d:7c:73:13:b7:15:09:97:6f:5e:e1:19:c9:2e:dd:f7:dc:
98:39:b1:24:95:14:be:05:76:5d:9f:6e:2d:d0:fa:68:fe:d9:
f1:b9:97:62:c9:c7:09:b4:33:b9:54:b5:2e:9c:59:c6:01:18:
93:df:7f:26:44:b1:71:94:50:fc:cc:e7:a6:e1:1a:d1:f6:18:
2e:c9:eb:d8:0f:4e:6f:61:6a:7d:10:97:59:69:15:78:b5:e5:
90:73:c0:de:bf:72:7a:21:f6:6f:6e:a2:10:3b:c5:5b:a9:85:
31:3b:be:5e:fe:aa:e9:e2:90:1e:e1:78:54:3a:03:c8:bc:7d:
5e:6a:2f:f6:13:c4:48:1f:16:44:9c:87:0b:c0:40:a0:a3:29:
4a:94:c0:15:a7:11:68:b8:aa:4a:5d:60:b0:7f:64:f8:5a:cc:
8d:86:2d:f2:d9:4a:a0:73:03:e6:24:d5:13:4c:57:d1:49:b0:
74:ab:fb:fa:92:8b:16:8c:55:63:c1:7e:34:7a:52:5b:d2:27:
52:6c:03:a5:25:42:90:63:11:40:df:86:7c:59:4e:83:bb:fc:
fe:0c:ed:65:86:8d:66:ab:7e:28:53:34:69:27:10:87:d1:c4:
b2:d4:9c:98
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC
QTQxMkI2M0QwHhcNMjYwNjIzMDI0NDA1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM5ZjJmNC0zOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1JJpUycn0gH2Qtp/xxBoSCBihZ7lzfPs4vmUP1bVDxe9tVoV2+qwYkJcZOlr
fqGu4KMowDdskvSgXQV5O4hZh1WRSOdr/T7QbysGa1FUHRuXeOjuQzwX+pgvxd7X
gha26EAIrhA3nQtQpq/QbEqwGLVCL/Jc7AKECC3Ru2z8wYqdtqf44BoYSw1VuOfL
7p2pbvxQ970hliJ3G4RCMdkChPE6loDo095qLIqTyhdwKwtNZjlLjLAf18NMRNdI
Wlwcv2rzVjNCdwXC6l2YV2aCKHCMD5jZ6l4YPQaq1HIMqdsfGOGcRspFvYo5rB57
sm8babtWf5hkTaPFhqLzWT0v3QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGjQ3wVJ
g2mTI2e0R8obI0Ua0OF/MB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC
QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvNjYxMDE2MzI2
RUFEMTFGMTkxNTVEMjE3NjFBMzBGQkMucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDBS
BAIAATBMAwQAowggAwQAowgiAwQAowgkAwQAowgnMAwDBACjCCkDBACjCCwDBACj
CMYwDAMEAKMI0QMEAKMI0gMEAKMI1AMEAKMI1gMEAKMI3DANBgkqhkiG9w0BAQsF
AAOCAQEAgiMTBciAlw/Ox1LnVCSncfrU0F18cxO3FQmXb17hGcku3ffcmDmxJJUU
vgV2XZ9uLdD6aP7Z8bmXYsnHCbQzuVS1LpxZxgEYk99/JkSxcZRQ/MznpuEa0fYY
Lsnr2A9Ob2FqfRCXWWkVeLXlkHPA3r9yeiH2b26iEDvFW6mFMTu+Xv6q6eKQHuF4
VDoDyLx9Xmov9hPESB8WRJyHC8BAoKMpSpTAFacRaLiqSl1gsH9k+FrMjYYt8tlK
oHMD5iTVE0xX0UmwdKv7+pKLFoxVY8F+NHpSW9InUmwDpSVCkGMRQN+GfFlOg7v8
/gztZYaNZqt+KFM0aScQh9HEstScmA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:59 2026 by rpki-client