
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/7C66030E49CF11F1A6BACE62A7833773.roa
File: 7C66030E49CF11F1A6BACE62A7833773.roa (raw, json)
Hash identifier: tBXwz1eGx7JSBx7KbE61Py7Ep4zIyFlKzA5jH4c9rY0=
Subject key identifier: B5:D3:D6:44:D5:70:06:AC:F1:81:9B:C8:82:8C:3B:C0:07:67:BE:8E
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: AA
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/7C66030E49CF11F1A6BACE62A7833773.roa
Signing time: Thu 07 May 2026 04:44:52 +0000
ROA not before: Thu 07 May 2026 04:44:52 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9304
IP address blocks: 163.8.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 03:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: May 7 04:44:52 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69fc18c4-1c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:48:ee:84:be:9c:44:c9:a1:0d:53:7d:f8:
89:c0:d2:00:ae:7e:36:0e:a1:ab:dd:e5:3a:a3:6a:
48:44:06:11:a2:c9:89:ec:da:ae:91:6f:5e:0f:33:
0f:16:ef:15:b4:02:66:b3:b6:c4:64:c9:6c:6f:eb:
0f:d8:23:43:53:39:12:5c:29:c1:4b:2e:0d:5c:73:
9f:82:25:ee:a3:0b:52:2f:32:f1:ec:19:ea:be:a7:
00:eb:75:58:70:67:0d:80:28:96:57:36:e1:51:93:
ba:fe:34:4c:9d:f3:29:f6:c4:06:87:0c:6e:fc:22:
55:94:02:03:ab:12:f5:3d:89:7f:7e:2e:f5:69:b6:
e7:dc:65:29:a3:9d:50:16:22:32:f1:81:78:84:aa:
75:5e:dd:70:60:17:ec:a0:20:12:d8:89:f7:43:d0:
6f:ac:e0:59:b5:83:df:bf:45:f6:57:57:e8:7c:58:
5d:1e:51:27:ec:38:09:8f:c5:72:1e:8e:1c:38:27:
c9:93:df:62:bc:89:3f:35:a4:35:95:80:2d:69:eb:
c2:03:c7:89:28:e5:a0:10:3d:3c:65:7d:ad:8f:2d:
3c:96:bf:ce:5c:2a:5e:5d:92:fb:0a:d1:5a:79:fa:
72:f7:9b:75:38:58:15:e9:52:e3:fd:ce:50:2b:39:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:D6:44:D5:70:06:AC:F1:81:9B:C8:82:8C:3B:C0:07:67:BE:8E
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/7C66030E49CF11F1A6BACE62A7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.198.0/24
Signature Algorithm: sha256WithRSAEncryption
07:74:68:24:ca:3d:e8:ed:bb:2e:f1:20:81:99:9c:d2:95:85:
b6:ed:f0:93:73:7d:09:dd:c7:0e:9d:b1:54:9a:c6:19:1c:41:
1b:24:1a:46:a6:60:77:19:2b:2f:a6:fa:ff:be:df:8a:80:a4:
33:38:7e:f7:5b:4e:0c:3b:38:3d:bd:d8:ef:40:7f:2f:a9:93:
8a:bf:3a:34:39:1b:66:a1:ba:2e:85:10:ef:6e:ef:0f:82:76:
8a:1f:a3:5b:b6:0f:a2:fb:56:58:7c:e3:2a:10:72:6f:d6:21:
ea:f2:7e:e4:50:61:0b:33:d0:75:b4:be:8d:fb:4d:34:51:71:
b0:93:7c:b9:da:08:94:fa:20:ac:4f:db:a3:b0:7f:a6:09:51:
8b:f9:29:be:bc:c5:06:1a:79:08:a5:35:30:c0:da:c8:e1:e7:
23:6f:24:96:be:5b:90:3a:0e:84:af:bf:67:60:51:74:bb:31:
3f:7e:dd:98:49:0a:bd:d0:b7:42:5b:fb:96:8a:01:6b:52:30:
54:02:ba:f5:c0:81:8f:a7:4b:f7:2f:7e:23:cf:42:96:ef:43:
7e:c7:d8:95:7c:56:0e:87:77:d1:ee:44:b9:c8:82:0f:9f:85:
71:5d:f0:a2:29:ad:87:17:1a:dc:da:f2:5b:a2:b9:36:d3:00:
d8:8b:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:59 2026 by rpki-client