
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa
File: 5493E832AF1511F09DB9CB78C4F9AE02.roa (raw, json)
Hash identifier: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=
Subject key identifier: D4:90:C3:B8:F8:17:09:CD:6A:A1:14:32:D3:0D:EC:E3:97:E8:90:09
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 54
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa
Signing time: Tue 03 Mar 2026 08:44:39 +0000
ROA not before: Tue 03 Mar 2026 08:44:39 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 45589
IP address blocks: 163.8.48.0/21 maxlen: 21
163.8.48.0/22 maxlen: 22
163.8.64.0/19 maxlen: 20
163.8.160.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Mar 3 08:44:39 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a69f77-7e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:f5:ab:58:e8:b5:b7:7c:90:db:6e:fb:4a:
2e:fe:20:c7:86:2e:05:b1:f4:df:c9:86:59:44:2b:
68:df:ac:43:22:2f:90:56:12:17:64:31:58:fd:de:
eb:64:2c:76:9c:50:bb:3e:ec:79:1c:ad:3a:fb:1d:
79:c6:75:ca:64:be:07:9b:01:3f:3a:15:3b:94:52:
1e:71:61:14:c5:09:70:e5:3a:d2:f0:5c:54:db:1b:
51:b9:ba:0c:fd:84:89:9e:ea:74:66:c8:bc:fd:83:
fd:0d:2a:88:59:8d:f3:25:c2:5b:23:55:0d:4e:2d:
91:92:cb:0f:e0:a7:51:82:2d:ce:a1:95:2c:3f:4e:
4b:37:d7:88:e6:52:0c:5e:61:35:68:2e:16:87:72:
f6:a0:5b:0a:63:ae:c3:36:de:2c:54:2b:bc:72:92:
46:fa:26:b0:c8:4e:bc:12:00:b1:2f:66:5e:9a:49:
9e:5b:60:a8:a0:0c:d8:5a:32:27:2b:0e:97:30:4d:
6d:17:08:19:9b:59:12:5d:f0:20:72:71:e8:45:57:
3e:42:a8:12:a6:f8:40:2d:7b:2a:be:ff:6d:db:20:
4e:26:f6:e4:f5:6a:e3:a0:38:32:a5:6e:c2:1a:ff:
dc:39:be:22:4a:5c:09:e3:f7:74:41:f2:24:d9:47:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:90:C3:B8:F8:17:09:CD:6A:A1:14:32:D3:0D:EC:E3:97:E8:90:09
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.48.0/21
163.8.64.0/19
163.8.160.0/19
Signature Algorithm: sha256WithRSAEncryption
22:d6:e2:ab:95:3e:9d:5a:24:01:cd:85:48:2a:b9:7d:59:63:
cd:0a:ad:da:19:c5:a0:ba:77:e7:b7:ae:df:a3:2d:51:9b:2d:
42:e2:eb:7a:0d:6a:e9:b3:58:a2:72:13:93:5c:70:1b:46:d4:
15:e0:c0:ba:97:5f:b6:8c:c5:bb:d3:c9:dd:33:1e:5b:a1:92:
d0:33:ba:19:fd:73:ca:81:c0:37:29:78:cb:8f:0d:3b:1a:7b:
48:30:2e:11:27:95:ca:6f:b6:79:c6:81:d7:c8:ed:55:5f:c2:
f1:f5:77:37:0a:00:ce:fa:7b:43:58:a2:f1:d8:b0:da:9c:42:
51:59:b6:45:5a:47:9d:53:94:fe:46:08:96:53:ab:ac:0f:f5:
f7:65:89:4c:36:3c:e3:5e:20:13:ab:cc:59:64:b7:4e:8f:09:
d5:2e:39:85:80:5d:ae:17:28:62:93:a7:93:4c:2a:2d:2b:2b:
33:1e:42:67:fa:7d:28:f5:d7:59:53:84:b4:99:bb:1d:b3:9d:
e7:92:3b:28:06:d2:83:6f:59:8e:c6:43:1d:81:92:c8:93:54:
3c:cf:c0:ba:33:9c:14:13:4a:b7:e9:ce:c4:ef:5c:04:b6:82:
98:8d:9c:1d:9c:f0:a6:bf:97:fa:a1:ec:9e:77:77:6d:68:95:
09:c1:f5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:37 2026 by rpki-client