
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A7349B8A499E11F19CE2905A97833773.roa
File: A7349B8A499E11F19CE2905A97833773.roa (raw, json)
Hash identifier: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=
Subject key identifier: 6C:2E:90:BA:7D:B5:52:21:D0:3A:9F:66:7D:6D:67:70:69:D0:07:24
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: A6
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A7349B8A499E11F19CE2905A97833773.roa
Signing time: Wed 06 May 2026 23:08:56 +0000
ROA not before: Wed 06 May 2026 23:08:56 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 401783
IP address blocks: 163.8.204.0/24 maxlen: 24
163.8.206.0/24 maxlen: 24
163.8.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 03:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: May 6 23:08:56 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69fbca08-5026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:04:8b:0f:90:20:2f:92:e7:cd:c9:c3:7e:
66:9b:de:67:1d:d6:3b:e5:a6:5f:cd:0d:55:48:e9:
ac:fb:8f:54:33:2b:53:e5:27:bd:68:82:99:ee:91:
d0:b8:3c:bd:bb:d4:1a:d0:93:55:09:40:02:46:9e:
bd:bb:43:f0:c6:ea:16:ba:66:b0:9c:d6:94:6a:c5:
ea:97:10:16:01:8a:40:b5:61:b7:93:96:1a:27:01:
cb:05:6b:f6:af:ee:38:0d:51:26:e1:e6:d2:31:4d:
99:eb:6e:88:a6:81:75:b7:b4:dc:e9:8f:40:fb:e0:
d0:63:6b:89:e8:c2:da:a8:57:83:23:16:d6:1e:1a:
f0:1c:40:c3:60:16:72:b1:94:20:29:b9:53:1f:1e:
09:4e:46:1e:df:27:44:aa:36:7f:e7:13:70:06:ea:
ec:de:2b:41:b2:a4:08:aa:48:48:cb:b0:a9:f3:45:
d8:1e:8a:07:7d:f8:d2:f2:94:5f:8a:31:c2:f9:e8:
f2:06:f4:00:b3:30:f4:37:c7:cf:6d:51:2b:03:77:
17:c1:b6:d2:5e:36:1e:49:40:8b:00:22:05:a1:82:
ca:34:df:bd:a7:4e:a1:3c:ba:87:1c:3e:80:ba:8e:
75:1b:6f:62:24:91:9b:c6:98:55:4c:98:b7:56:22:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:90:BA:7D:B5:52:21:D0:3A:9F:66:7D:6D:67:70:69:D0:07:24
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A7349B8A499E11F19CE2905A97833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.204.0/24
163.8.206.0/24
163.8.208.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:10:a7:03:de:49:d2:e7:4f:ce:40:66:6c:9b:9b:d9:ba:70:
53:9c:b3:b1:8a:be:62:ba:45:17:78:9f:61:bb:ff:1e:38:c8:
c9:7b:f4:8b:9c:17:b8:b4:70:6f:48:c6:0d:67:a8:a3:1b:28:
00:35:b3:ab:2a:80:26:1e:6e:07:a1:ed:3f:0f:14:bb:c5:4c:
67:f7:7a:c4:be:44:86:fc:bb:38:ee:bc:61:01:7e:25:41:79:
aa:1f:45:ce:f9:f4:43:6a:6f:bc:68:8c:0c:d8:37:26:19:49:
35:ac:ae:2e:25:b3:bc:a1:a0:ca:15:81:e3:c5:03:82:a8:6d:
0f:ca:80:94:51:d5:24:51:4f:79:f4:28:f0:47:79:1d:9f:16:
3d:a3:fa:88:46:5a:19:ad:6e:cf:60:87:4f:96:4f:72:42:5d:
6b:1e:04:9c:6c:e6:12:6c:b9:83:9a:41:29:03:bf:c5:c4:d5:
19:f7:f8:12:41:0d:8a:76:47:b8:9e:9f:17:77:c2:5b:df:83:
53:75:7f:f8:81:95:ec:4a:31:03:35:b5:25:f0:f2:81:1c:98:
90:d2:c4:0f:c4:11:93:bb:bd:68:1c:9b:dc:a7:f1:6b:73:d7:
56:09:23:44:fe:b7:ab:85:6b:09:99:c8:1a:78:1d:81:cd:cd:
f5:43:47:49
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC
QTQxMkI2M0QwHhcNMjYwNTA2MjMwODU2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZiY2EwOC01MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvEEiw+QIC+S583Jw35mm95nHdY75aZfzQ1VSOms+49UMytT5Se9aIKZ7pHQ
uDy9u9Qa0JNVCUACRp69u0PwxuoWumawnNaUasXqlxAWAYpAtWG3k5YaJwHLBWv2
r+44DVEm4ebSMU2Z626IpoF1t7Tc6Y9A++DQY2uJ6MLaqFeDIxbWHhrwHEDDYBZy
sZQgKblTHx4JTkYe3ydEqjZ/5xNwBurs3itBsqQIqkhIy7Cp80XYHooHffjS8pRf
ijHC+ejyBvQAszD0N8fPbVErA3cXwbbSXjYeSUCLACIFoYLKNN+9p06hPLqHHD6A
uo51G29iJJGbxphVTJi3ViK/uwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGwukLp9
tVIh0DqfZn1tZ3Bp0AckMB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC
QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvQTczNDlCOEE0
OTlFMTFGMTlDRTI5MDVBOTc4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAowjMAwQAowjOAwQAowjQMA0GCSqGSIb3DQEBCwUAA4IBAQDIEKcD
3knS50/OQGZsm5vZunBTnLOxir5iukUXeJ9hu/8eOMjJe/SLnBe4tHBvSMYNZ6ij
GygANbOrKoAmHm4Hoe0/DxS7xUxn93rEvkSG/Ls47rxhAX4lQXmqH0XO+fRDam+8
aIwM2DcmGUk1rK4uJbO8oaDKFYHjxQOCqG0PyoCUUdUkUU959CjwR3kdnxY9o/qI
RloZrW7PYIdPlk9yQl1rHgScbOYSbLmDmkEpA7/FxNUZ9/gSQQ2Kdke4np8Xd8Jb
34NTdX/4gZXsSjEDNbUl8PKBHJiQ0sQPxBGTu71oHJvcp/Frc9dWCSNE/rerhWsJ
mcgaeB2Bzc31Q0dJ
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:18 2026 by rpki-client