
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/E798D1FC8C7C11F1935F28C96511F970.roa
File: E798D1FC8C7C11F1935F28C96511F970.roa (raw, json)
Hash identifier: MmfMKjzryKAERgtdM3KI0fHay6JKngE1MhsrksxyP6M=
Subject key identifier: 4F:31:0A:FB:FC:14:E6:A9:17:B7:8A:09:41:8A:7C:B1:91:2E:BE:E2
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 0120
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/E798D1FC8C7C11F1935F28C96511F970.roa
Signing time: Fri 31 Jul 2026 01:12:32 +0000
ROA not before: Fri 31 Jul 2026 01:12:31 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 219105
IP address blocks: 163.8.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 23:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Jul 31 01:12:31 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a6bf67f-0c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:08:2c:32:2c:1e:22:0e:e3:cc:2a:20:a2:
02:20:ef:ea:6f:da:df:0b:a9:6f:54:05:8e:6b:ac:
ab:64:92:cb:10:19:3e:e7:5f:b1:0b:0e:e2:03:5b:
6b:02:9d:ae:0e:5a:a1:77:6e:e6:c9:0f:82:00:37:
19:64:67:1d:79:ca:51:eb:93:95:77:d5:b7:bd:b6:
1b:aa:1a:f2:1b:f2:d8:ee:1e:b3:e3:ac:2a:b6:c3:
f2:66:be:95:42:d1:41:bc:72:4a:a7:c4:3f:70:29:
0a:c4:9c:d1:73:fb:5b:f5:e3:a9:c3:70:c2:fc:84:
cb:b6:9c:63:68:8b:f6:83:04:0c:9a:89:8e:06:9e:
b6:96:e0:af:9c:7d:df:f7:50:dc:e9:8d:67:b8:6f:
9d:b6:85:70:80:cc:d8:cb:c6:64:eb:62:84:66:86:
b3:ba:a7:96:22:97:fb:8b:81:ad:e9:52:72:cd:5b:
2b:4b:33:2c:3b:77:42:25:ce:93:88:05:e5:5e:1d:
65:0f:de:dd:66:17:b0:2a:7d:06:6c:8d:a6:a6:cb:
37:a8:0b:75:54:e3:ec:23:ee:30:07:7d:b5:49:2d:
f3:72:f4:06:61:3c:90:d9:c2:9b:00:7e:f1:fb:50:
e5:b8:eb:aa:40:1a:51:0e:5f:3f:20:14:e8:bf:dc:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:0A:FB:FC:14:E6:A9:17:B7:8A:09:41:8A:7C:B1:91:2E:BE:E2
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/E798D1FC8C7C11F1935F28C96511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.220.0/24
Signature Algorithm: sha256WithRSAEncryption
73:26:4a:f1:15:fc:42:b0:76:02:74:67:19:96:38:0c:6a:bd:
bc:86:0a:b1:05:0a:09:0b:29:bd:25:b7:c6:70:bc:cd:9c:f5:
7a:0b:53:bc:1c:11:e6:c5:82:e5:b5:8a:c7:eb:7a:95:a7:09:
60:76:f4:aa:8a:19:e2:6d:56:89:0c:2b:8c:3e:48:11:77:10:
26:cf:e8:63:f7:74:db:85:5b:b1:47:99:ba:fa:0c:c8:d0:c1:
70:b8:2c:0f:b1:3f:42:11:c2:9a:8d:d8:39:0c:e4:9b:dc:82:
c0:0e:b9:c2:72:cc:6e:56:06:10:14:9f:5c:9c:5e:d4:1e:64:
2c:31:e0:15:e9:6f:9d:0b:60:40:2a:bd:99:38:08:d3:fb:a8:
5a:fd:6f:71:8a:c8:63:f1:28:04:b8:19:a8:e3:f3:0b:69:64:
dc:cb:e4:72:74:19:f2:85:ed:28:26:75:a0:28:5a:cc:3c:7e:
01:e4:95:71:2b:c1:c4:d2:b0:f7:67:c2:a4:9a:79:28:5b:08:
28:dd:1d:df:d0:5e:68:50:8a:16:af:fc:20:19:c0:c3:a6:a0:
2e:50:eb:3e:1b:f3:9f:12:2e:32:83:27:b9:84:0c:ea:3e:40:
48:ac:0e:6e:21:9d:5f:e4:4d:f4:af:d9:64:97:52:be:aa:1e:
79:a9:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:23:56 2026 by rpki-client