
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/AFBA3B6099CC11F1A36A837B3B11F970.roa
File: AFBA3B6099CC11F1A36A837B3B11F970.roa (raw, json)
Hash identifier: H/OHVH3gHMbF1VZocaHnojjYPp+zCG+XnnmhJV9htu8=
Subject key identifier: EA:51:C9:A8:3B:7E:E1:0B:F2:8D:57:62:D2:BD:DD:C0:2A:A2:62:6A
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 0163
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/AFBA3B6099CC11F1A36A837B3B11F970.roa
Signing time: Sun 16 Aug 2026 23:46:23 +0000
ROA not before: Sun 16 Aug 2026 23:46:23 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136244
IP address blocks: 163.8.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 23:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Aug 16 23:46:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a824bcf-1dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:84:68:94:50:eb:92:5c:2c:4f:b5:f5:04:
3c:59:8f:70:62:f2:28:65:44:49:f9:05:3b:11:37:
5e:d7:a4:b8:68:c4:ae:e2:ab:72:93:f2:e0:22:19:
d3:b8:1f:38:d8:ae:b7:29:3d:e8:6f:8f:64:89:4e:
4c:c1:b7:a9:3b:10:eb:44:99:db:65:14:fb:df:6b:
86:fc:40:bd:26:19:f5:d1:4a:13:a6:46:c8:4b:b6:
d2:ff:e0:65:ad:c8:57:a4:f1:a6:b4:b4:94:14:2b:
9d:7c:d2:be:8a:2b:12:05:1b:8b:8b:0a:1e:1f:4b:
82:3d:bc:ff:87:2c:70:7e:b6:67:4d:ae:43:39:72:
4e:fc:d6:dd:34:d2:12:31:f3:f2:b3:b6:07:4c:03:
95:14:b7:79:58:a5:b4:70:3c:38:c5:e6:f3:1f:51:
e5:13:e1:70:99:c2:41:27:48:16:79:b6:b8:a2:57:
ae:2c:86:08:45:b3:3a:d2:37:0a:6e:59:fc:bb:7e:
6b:a7:be:ab:f6:80:9c:39:73:2c:f7:09:44:bd:50:
91:7a:57:d6:e6:dd:ed:02:c6:c6:f1:58:19:51:08:
89:11:db:5a:f6:4b:d8:59:3b:97:c2:d0:c1:fd:3c:
52:46:0c:b1:07:1d:1c:78:5b:d1:08:d5:e0:64:e2:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:C9:A8:3B:7E:E1:0B:F2:8D:57:62:D2:BD:DD:C0:2A:A2:62:6A
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/AFBA3B6099CC11F1A36A837B3B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.40.0/22
Signature Algorithm: sha256WithRSAEncryption
11:f1:65:d3:77:27:52:1c:fc:42:47:11:09:c4:2e:0f:a7:1f:
1f:72:75:0a:73:d4:d3:e1:cf:35:38:d7:4f:62:97:ef:43:9d:
48:aa:ca:b9:78:99:33:8c:76:d2:3e:90:b2:ca:0e:47:2d:67:
9e:79:fd:fe:28:66:72:a7:02:19:d1:11:96:12:10:eb:9f:5c:
35:46:dd:65:fd:36:2a:46:f7:3d:5a:ba:dc:a1:87:4c:ef:f8:
69:63:b8:db:39:90:ed:29:83:32:8f:24:9d:a3:8b:32:6f:44:
75:e6:60:40:ac:7f:59:48:da:86:77:cb:e3:51:a3:6f:17:85:
08:44:a8:f8:df:d2:1a:d9:cb:de:0b:31:34:0a:2c:96:16:33:
70:97:93:fd:82:fb:52:86:58:e8:1d:ac:d9:8c:f1:9c:14:b4:
7f:51:d4:12:19:07:ba:3b:19:1d:3e:1c:e7:dc:8a:80:e6:02:
9a:67:9a:1a:bd:8a:b1:92:88:56:9b:8b:11:1a:01:4d:48:18:
07:cb:db:3a:e7:8a:28:e9:8f:e8:ad:53:de:f7:77:14:4b:a8:
42:52:c9:da:66:72:d0:0d:21:45:3e:7a:d8:ff:30:1a:57:f2:
e2:f9:8c:0d:d9:cf:7c:73:f4:f2:df:ae:6b:48:52:1a:77:c2:
d7:27:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:23:47 2026 by rpki-client