
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF3E21307BFE11F198B5A8F78EA30FBC.roa
File: DF3E21307BFE11F198B5A8F78EA30FBC.roa (raw, json)
Hash identifier: NT30pur8xhY9PcKqmg6IwjPQmddy3T3G46Qh5vdQmt8=
Subject key identifier: 0C:A4:A3:AD:CC:31:D4:77:2A:12:1F:01:5D:FC:21:71:2E:CC:01:0C
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: FC
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF3E21307BFE11F198B5A8F78EA30FBC.roa
Signing time: Fri 10 Jul 2026 01:30:02 +0000
ROA not before: Fri 10 Jul 2026 01:30:02 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 212238
IP address blocks: 163.8.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 01:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Jul 10 01:30:02 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a504b1a-ac0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:cb:2b:f8:bc:5a:d7:b9:17:db:15:23:0b:
79:32:60:37:ff:77:55:b2:cc:77:5a:ee:a1:61:a7:
ac:d2:7e:c2:64:46:80:db:54:08:30:5b:cf:74:13:
03:df:f1:25:0e:f8:50:af:d6:8d:49:b8:d0:cb:65:
46:54:f0:fe:2d:43:56:0d:c2:da:17:a1:a2:38:b9:
da:7e:bb:a4:13:db:fb:a8:cc:34:46:25:36:2a:3f:
91:c3:4f:47:4f:55:0d:59:8e:51:75:06:c5:4e:f8:
2b:51:49:9c:7f:91:db:52:a3:cc:b1:48:cd:91:77:
5b:34:53:90:2f:37:93:20:59:5a:8b:0f:4a:3a:7e:
1c:bb:2a:4c:54:91:5d:06:43:ed:da:fe:14:1c:03:
4e:67:34:c7:80:5f:87:21:37:26:e9:77:3c:72:c0:
7d:da:b0:f6:68:23:fa:8e:ee:f7:3e:5b:4c:75:87:
72:f4:fb:66:47:45:c7:97:10:35:43:29:99:b0:54:
ca:3a:af:7d:d8:8e:c7:9e:bf:3d:fc:ad:b0:f3:d6:
3e:b4:98:b1:7e:73:1d:a2:22:60:76:2f:1d:9b:c6:
14:76:d9:ee:ca:8a:59:2e:32:95:d2:6d:0e:91:9c:
2c:39:7d:18:09:8e:c0:61:f2:44:57:6e:87:80:86:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A4:A3:AD:CC:31:D4:77:2A:12:1F:01:5D:FC:21:71:2E:CC:01:0C
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF3E21307BFE11F198B5A8F78EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b9:b9:f8:29:13:4d:0f:8a:b9:50:df:3e:94:29:48:3b:d7:
ca:aa:58:67:72:45:06:2e:de:8b:b0:7d:63:88:a8:58:e0:df:
17:fc:6f:99:33:c0:9c:70:e6:4b:d1:64:c1:b9:40:15:11:49:
19:43:2a:47:0a:6c:a4:b7:bd:45:bf:87:8b:d2:b1:35:df:d4:
48:71:fe:f9:c4:1f:e7:24:1b:7c:e7:bc:59:1c:aa:e4:7d:4b:
62:c1:b7:da:d1:65:38:d1:22:96:1e:92:43:78:b5:31:59:b3:
fb:87:d2:29:f8:e2:a2:f1:ab:fe:f9:59:6e:96:4e:8d:49:bd:
0f:d3:06:cb:ba:7d:bc:0b:14:2a:ba:0a:ae:7f:3f:2e:6b:4d:
f4:36:6e:74:b7:96:fb:ed:54:c1:07:3c:d1:e6:e8:54:a8:62:
82:51:31:31:95:dd:1e:a8:83:81:8b:41:a3:46:54:45:1d:06:
5a:ad:83:67:35:72:0b:01:59:c8:b6:e7:94:82:e4:28:87:8d:
03:97:e4:e3:d5:6d:94:2c:01:83:77:10:2e:58:1f:0c:ab:6a:
ae:52:0b:c5:b7:ad:27:7a:6c:0a:59:30:d2:08:2e:2b:3f:df:
7d:c4:af:5e:05:59:2e:bb:6f:ad:c0:b8:f9:bd:b6:7b:ff:5b:
20:a2:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:31:27 2026 by rpki-client