
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23967BF24A7711F1A7BED77BA6833773.roa
File: 23967BF24A7711F1A7BED77BA6833773.roa (raw, json)
Hash identifier: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=
Subject key identifier: F1:5E:A4:B5:BA:70:68:4B:6D:A9:FB:E1:ED:6E:E8:06:BA:96:3D:32
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: AF
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23967BF24A7711F1A7BED77BA6833773.roa
Signing time: Fri 08 May 2026 00:44:58 +0000
ROA not before: Fri 08 May 2026 00:44:58 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153347
IP address blocks: 163.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: May 8 00:44:58 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69fd320a-431d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:a1:a8:d2:2a:ac:aa:4d:bf:29:e9:cd:7c:
3b:73:e7:c3:12:6b:14:bb:42:af:f6:60:de:a7:d7:
2f:ba:e5:6c:f8:b8:85:e2:e8:22:ec:6d:3c:0c:fc:
4b:d6:81:ff:f7:9f:53:bb:4e:bf:09:98:7f:c1:6f:
93:87:84:55:b6:a8:ed:97:1b:9d:c3:b4:e4:1e:ea:
1a:38:da:96:59:d1:cd:b6:3f:81:d7:67:cc:f4:b2:
c7:f1:99:9f:50:32:44:bf:65:76:e9:0b:8a:67:ce:
ca:62:2f:2c:91:01:63:85:2f:f4:e0:24:b5:98:9b:
b8:71:94:a4:db:a5:8e:6a:b4:cd:c7:dc:5f:50:0f:
c0:19:9c:76:6a:e6:d6:ea:da:42:89:6c:95:8b:99:
32:9c:41:a0:9a:02:6c:cf:a4:1f:03:23:91:b5:2a:
38:cc:0e:8c:9e:00:42:10:58:ad:0c:68:17:79:17:
46:f2:7d:f5:a6:9f:88:1b:05:d5:0e:d8:df:b4:a9:
4e:47:91:84:fd:5e:31:6d:0c:e6:15:fc:88:81:39:
e0:3d:ed:c4:60:1a:b8:46:26:9d:35:51:a0:d1:a9:
0e:d5:63:26:22:61:49:7b:70:5d:66:3c:e1:b9:05:
f7:0d:88:c6:fc:2a:db:ca:00:9d:d0:b0:2a:4c:b9:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:A4:B5:BA:70:68:4B:6D:A9:FB:E1:ED:6E:E8:06:BA:96:3D:32
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23967BF24A7711F1A7BED77BA6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
38:bf:27:fd:17:78:d3:e5:db:24:2d:ce:cb:47:1b:c1:8b:a3:
aa:cf:f2:b2:eb:fe:0f:7b:41:93:99:b0:40:1e:a5:9c:17:9a:
83:11:1e:4d:6d:79:73:32:45:6d:ba:34:77:41:5b:a2:c7:b6:
3e:19:dd:68:c7:5b:d8:a3:53:a6:cf:51:09:6c:42:08:14:de:
be:29:47:ee:53:a0:49:b3:29:13:33:35:34:28:ce:52:f1:1e:
cd:80:7b:3a:b1:d9:d5:1c:44:78:59:ca:af:2c:0f:93:eb:e5:
6f:e2:09:aa:d5:e6:45:13:be:e2:5d:0c:ae:b6:1a:2d:20:63:
a7:9a:11:42:86:e3:55:50:f8:ff:11:b4:5d:2e:c9:59:1c:89:
23:55:ad:52:3e:06:fe:cb:d1:c1:e0:3e:7f:8b:79:c9:cc:3e:
e0:26:4e:1d:09:40:fe:08:38:ef:b1:74:73:ee:f7:ac:fb:8a:
28:ef:f1:71:76:85:67:90:a3:a0:37:cf:0a:92:5b:f2:a8:c9:
4d:45:ec:bb:d4:c0:63:04:76:48:a8:fa:89:2e:e3:39:a7:d7:
20:dc:0c:55:ac:81:eb:16:cf:10:28:b1:4e:d4:51:46:7b:61:
d4:c3:c4:85:86:46:93:7b:6d:05:f6:ff:42:b7:60:be:16:a6:
43:c6:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:12 2026 by rpki-client