
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/CFF23F5457FA11F1947AF89298833773.roa
File: CFF23F5457FA11F1947AF89298833773.roa (raw, json)
Hash identifier: 70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=
Subject key identifier: F4:1B:07:2F:82:EB:E6:93:3F:AA:6A:6F:4D:F5:58:20:6A:CE:6D:8A
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: C7
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/CFF23F5457FA11F1947AF89298833773.roa
Signing time: Mon 25 May 2026 05:30:17 +0000
ROA not before: Mon 25 May 2026 05:30:17 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 40178
IP address blocks: 163.8.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: May 25 05:30:17 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a13de69-16a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:68:d5:46:f4:8a:17:b3:e3:27:bc:3a:f2:
cd:16:63:09:e5:38:03:cf:58:f9:bd:e7:4d:8d:ef:
83:a5:6b:e0:44:ab:3a:39:eb:f9:36:aa:98:37:bf:
53:66:1b:6e:2a:64:4d:40:5e:bf:a4:f9:c6:ae:97:
fa:81:c9:05:55:f9:d0:43:61:95:36:63:e2:aa:c9:
c1:95:b2:b2:c0:c3:60:3c:f0:be:7f:79:4d:4e:27:
ca:29:d7:46:0b:33:97:22:b4:38:cc:56:7d:45:64:
ad:9f:4c:2a:95:60:21:18:1e:c8:c7:16:4e:18:59:
ea:54:f8:7b:78:f2:a8:8d:9f:00:3f:df:65:4c:63:
88:1f:e4:61:36:04:ff:3d:ee:f7:d2:9f:de:98:2d:
ad:78:0f:a3:b8:5f:ac:7d:98:63:b2:ce:1c:e4:00:
bf:de:9e:96:91:02:41:bd:ea:e2:ec:39:82:e5:b4:
9b:41:3b:4e:a5:3d:16:8a:23:29:e3:fb:71:2a:4b:
f5:56:ec:44:38:73:58:0a:d9:98:8c:e7:24:6e:fa:
49:ba:d0:08:6b:2f:07:a8:d6:3a:fe:f0:95:41:13:
74:1b:2f:cf:34:11:94:a5:ee:fa:0d:02:e3:e5:33:
fd:b9:0e:30:da:55:ae:1e:3f:da:28:4e:58:e4:f4:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1B:07:2F:82:EB:E6:93:3F:AA:6A:6F:4D:F5:58:20:6A:CE:6D:8A
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/CFF23F5457FA11F1947AF89298833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.215.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:e8:d1:78:b5:6e:cc:04:ff:84:3a:77:d3:85:c8:58:d1:5a:
95:43:cb:75:d6:51:60:bb:62:8c:db:69:93:ad:8d:a4:3a:58:
37:58:fd:0a:60:c6:40:42:d5:ee:8d:0e:f7:5b:fd:58:d3:68:
f6:0b:e5:bf:97:30:4c:58:79:8c:03:da:63:3b:a7:6c:c1:5e:
57:c5:83:26:7d:8e:be:66:50:64:c6:79:02:9e:8a:97:12:f0:
34:27:fb:b3:f2:9d:d3:6a:4e:a1:f3:6c:4f:bf:79:80:00:44:
5f:e4:ce:ab:4b:05:c5:a9:36:c0:cd:8d:df:5c:8a:78:80:65:
38:24:27:cc:e6:07:a4:2a:f5:38:d9:e4:bc:55:fc:4e:99:de:
96:fc:50:95:ca:9d:76:e9:61:aa:3f:9c:52:e4:ad:b1:e4:0b:
f9:62:75:65:02:c7:27:00:9a:48:6e:90:b6:9a:ba:cc:8c:49:
a2:36:7f:48:2f:44:43:7c:41:07:1e:df:fc:3c:62:94:11:8f:
26:ff:b4:a2:f8:ea:f2:b3:13:15:36:2c:4f:07:8c:7f:57:3e:
3b:95:1f:6b:79:ca:c0:1b:4e:1e:bb:6a:81:02:5e:85:3a:5b:
fc:33:ca:6d:84:f2:62:5e:9a:29:79:a8:d4:2b:ba:c8:4f:e6:
ca:79:a8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:16 2026 by rpki-client