
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/88221330A26D11F19D29C37F6511F970.roa
File: 88221330A26D11F19D29C37F6511F970.roa (raw, json)
Hash identifier: z551IATQrx2AVRTObISYemc3UykqMiktmWx2mC6/YLM=
Subject key identifier: DF:B6:3C:5B:EB:71:C9:6B:5F:2B:19:A3:5F:38:02:8B:8A:C6:3E:69
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 017B
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/88221330A26D11F19D29C37F6511F970.roa
Signing time: Thu 27 Aug 2026 23:17:54 +0000
ROA not before: Thu 27 Aug 2026 23:17:54 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 12989
IP address blocks: 163.8.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 23:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Aug 27 23:17:54 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a90c5a2-10b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:85:34:a1:f2:15:06:ac:eb:e3:72:c3:83:
ab:e2:0d:60:f5:4e:03:14:ec:09:33:c3:6b:68:c1:
5d:c3:5e:fb:7a:93:81:02:dd:1d:e4:46:e4:0a:aa:
66:6d:4b:02:a9:0e:c5:19:32:d4:7c:85:60:79:83:
5f:6a:bb:05:83:76:57:de:a2:bd:4e:95:6f:2b:e7:
d5:d1:46:d3:4a:2c:95:48:87:18:b4:5c:54:2b:64:
63:d1:38:08:9e:11:6d:52:0f:46:df:9f:ab:b1:e3:
52:63:96:49:03:56:bf:05:2a:53:2f:12:57:3c:f9:
3e:35:f9:3a:2e:b2:b3:0c:bf:4b:2e:49:c9:39:a2:
29:45:27:84:47:ab:36:5d:eb:93:e0:76:38:e7:f9:
17:a8:0e:e6:25:bf:2a:16:17:70:0c:10:5a:5d:94:
59:dc:89:c6:c2:76:ab:8c:4a:46:e3:d3:e6:03:17:
e4:3b:68:04:3c:5d:2e:fd:9d:50:04:12:80:a2:7f:
66:41:1b:db:4a:bc:f0:37:22:94:7c:4e:51:71:dd:
7a:2e:c8:4e:ae:6a:eb:f9:24:2f:62:44:b6:e9:bf:
89:78:e2:41:61:55:97:20:24:3b:aa:06:46:dc:60:
e1:c9:ab:fa:a4:39:09:e1:bf:ad:30:f2:c8:38:03:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B6:3C:5B:EB:71:C9:6B:5F:2B:19:A3:5F:38:02:8B:8A:C6:3E:69
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/88221330A26D11F19D29C37F6511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cf:b6:f9:46:db:94:83:64:ba:cb:b6:be:c5:44:03:fe:cf:
7d:32:6c:10:27:ca:0f:fc:61:ef:aa:9c:98:d2:7d:bd:d7:e0:
46:e9:00:6b:39:e7:06:59:21:d9:42:70:d2:80:4e:62:75:3d:
61:42:8a:55:4e:86:ff:95:8e:64:28:f9:46:51:c4:76:ac:92:
38:87:bf:3c:d8:27:4e:ae:bb:ad:a5:35:b2:7f:5c:64:00:a0:
4b:bb:c0:1c:58:89:68:32:19:bd:ba:0f:7b:6d:7c:6d:f9:dc:
14:7c:58:ce:dd:b5:5a:84:ee:3f:7a:c8:a3:4a:88:dc:60:06:
67:63:b9:64:fc:ec:67:a8:d6:8c:90:e0:af:e6:9f:19:6e:e7:
91:63:c4:3f:94:2e:62:2e:af:27:c5:69:e0:18:f2:36:e7:c4:
80:ca:76:c0:e8:7d:c0:b9:40:aa:d7:2c:0a:63:cf:3b:de:52:
09:a0:7a:81:88:73:66:cc:10:ee:99:08:31:f7:f9:3a:5b:7b:
31:d8:a3:c5:7d:f8:3b:ae:2d:b7:8d:0c:e5:eb:bf:e5:a5:b9:
5c:ab:6d:3b:e2:df:fc:64:01:12:96:ca:23:2b:8c:82:94:b9:
c2:10:34:23:07:37:8a:9d:a7:3b:db:d7:19:fb:10:13:40:1f:
22:3c:03:98
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC
QTQxMkI2M0QwHhcNMjYwODI3MjMxNzU0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkwYzVhMi0xMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCSFNKHyFQas6+Nyw4Or4g1g9U4DFOwJM8NraMFdw177epOBAt0d5EbkCqpm
bUsCqQ7FGTLUfIVgeYNfarsFg3ZX3qK9TpVvK+fV0UbTSiyVSIcYtFxUK2Rj0TgI
nhFtUg9G35+rseNSY5ZJA1a/BSpTLxJXPPk+Nfk6LrKzDL9LLknJOaIpRSeER6s2
XeuT4HY45/kXqA7mJb8qFhdwDBBaXZRZ3InGwnarjEpG49PmAxfkO2gEPF0u/Z1Q
BBKAon9mQRvbSrzwNyKUfE5Rcd16LshOrmrr+SQvYkS26b+JeOJBYVWXICQ7qgZG
3GDhyav6pDkJ4b+tMPLIOAMV4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN+2PFvr
cclrXysZo184AouKxj5pMB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC
QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvODgyMjEzMzBB
MjZEMTFGMTlEMjlDMzdGNjUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAowghMA0GCSqGSIb3DQEBCwUAA4IBAQChz7b5RtuUg2S6y7a+xUQD
/s99MmwQJ8oP/GHvqpyY0n291+BG6QBrOecGWSHZQnDSgE5idT1hQopVTob/lY5k
KPlGUcR2rJI4h7882CdOrrutpTWyf1xkAKBLu8AcWIloMhm9ug97bXxt+dwUfFjO
3bVahO4/esijSojcYAZnY7lk/OxnqNaMkOCv5p8ZbueRY8Q/lC5iLq8nxWngGPI2
58SAynbA6H3AuUCq1ywKY8873lIJoHqBiHNmzBDumQgx9/k6W3sx2KPFffg7ri23
jQzl67/lpblcq2074t/8ZAESlsojK4yClLnCEDQjBzeKnac729cZ+xATQB8iPAOY
-----END CERTIFICATE-----
Generated at Sat Aug 29 08:23:54 2026 by rpki-client