
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/AAE73A68450111F18FAFB8B98E833773.roa
File: AAE73A68450111F18FAFB8B98E833773.roa (raw, json)
Hash identifier: M6g5Gu1STDjqBwg7jYIrBUM+lRO9g/M65OCYmhaWupM=
Subject key identifier: 59:6B:3C:25:50:0A:EA:38:07:2B:17:BD:19:D4:36:96:2D:EF:F7:36
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 92
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/AAE73A68450111F18FAFB8B98E833773.roa
Signing time: Fri 01 May 2026 02:01:30 +0000
ROA not before: Fri 01 May 2026 02:01:29 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.8.32.0/24 maxlen: 24
163.8.34.0/24 maxlen: 24
163.8.36.0/24 maxlen: 24
163.8.39.0/24 maxlen: 24
163.8.41.0/24 maxlen: 24
163.8.43.0/24 maxlen: 24
163.8.44.0/24 maxlen: 24
163.8.198.0/24 maxlen: 24
163.8.200.0/24 maxlen: 24
163.8.202.0/24 maxlen: 24
163.8.210.0/24 maxlen: 24
163.8.212.0/24 maxlen: 24
163.8.214.0/24 maxlen: 24
163.8.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 03:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: May 1 02:01:29 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f40979-4b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:d8:3b:c1:5b:39:3d:5a:c8:22:fa:e0:c9:
1e:f3:17:a9:5b:e8:a3:2c:57:fc:0d:76:7d:01:90:
4e:d2:b9:41:fe:8a:10:0e:da:0c:3b:a6:33:c0:86:
f5:43:b4:c1:f9:e2:61:9b:ec:31:9d:09:95:ac:be:
51:50:fa:dc:13:d0:cb:fb:71:a2:e8:7a:61:92:c0:
9b:c0:68:2a:76:0e:cb:60:c2:4b:4e:1b:a0:e1:d0:
68:ef:ba:6e:69:0d:5a:49:50:1f:42:0f:66:ce:6a:
dd:86:7b:03:24:22:c8:9e:97:0b:50:98:74:74:de:
39:b8:1b:36:ac:22:4f:a7:94:b8:91:d5:68:8a:75:
09:74:77:06:8b:3a:94:b4:69:0e:76:c9:4b:b3:20:
a5:11:cf:22:04:22:fa:ee:18:39:95:6e:44:23:bd:
db:2d:2b:83:07:5c:16:66:82:bf:81:02:c4:55:9d:
fa:8b:56:79:de:b6:dc:49:17:37:a2:50:ae:e9:a5:
4a:82:ee:c2:c3:0a:7a:68:6a:70:f5:74:ae:c6:81:
2c:4e:4e:1d:d8:6e:ec:25:f9:3c:4d:4a:3f:4c:c0:
4d:7c:f3:a0:84:c8:87:1b:45:b8:96:54:4e:74:cc:
2e:95:23:c0:94:00:00:4d:b8:61:21:ec:77:0e:43:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:3C:25:50:0A:EA:38:07:2B:17:BD:19:D4:36:96:2D:EF:F7:36
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/AAE73A68450111F18FAFB8B98E833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.8.32.0/24
163.8.34.0/24
163.8.36.0/24
163.8.39.0/24
163.8.41.0/24
163.8.43.0-163.8.44.255
163.8.198.0/24
163.8.200.0/24
163.8.202.0/24
163.8.210.0/24
163.8.212.0/24
163.8.214.0/24
163.8.220.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a9:8d:f9:e8:e1:5e:aa:f1:5d:ad:00:e6:82:19:15:ba:4c:
e7:38:eb:c9:bb:7c:e1:a6:6d:1a:78:cc:9a:97:0f:51:34:f8:
96:ea:c5:1b:9f:f9:5f:d6:ac:55:a9:29:8a:d0:83:f3:c0:ae:
5b:d8:a9:f5:0f:1e:6f:a1:73:c1:3d:1e:7c:0b:0a:1c:6a:34:
87:06:a2:f6:ff:fe:22:79:04:bd:e5:64:50:2c:c8:ea:97:dc:
e9:4f:54:58:ce:24:fb:76:cc:f1:8e:3e:38:eb:05:29:a6:55:
3f:1a:df:a8:e8:73:57:28:0f:e3:80:9c:6a:7d:0e:19:b1:72:
12:fc:cf:70:ec:02:51:97:2e:4b:1e:cd:33:6c:3f:f0:10:5f:
c5:20:a1:50:39:99:e9:54:9f:ba:1b:b7:a5:4b:d2:ea:f8:91:
09:8d:fe:ae:e8:3d:45:6f:ce:1d:b5:4c:8d:1c:74:3a:91:04:
87:20:46:a8:e1:e2:49:39:58:0e:ce:e7:60:89:66:62:71:ab:
10:89:70:16:9a:ed:f6:13:88:7c:46:84:8c:6e:11:9f:d3:b3:
a4:9a:15:3d:b0:aa:b0:68:ef:80:d5:ed:5e:47:de:f7:e2:a0:
2b:82:e6:e9:74:0a:d6:c7:51:e4:e1:53:bf:6c:d9:69:d2:b9:
b8:ea:43:4f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC
QTQxMkI2M0QwHhcNMjYwNTAxMDIwMTI5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0MDk3OS00YjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtc7YO8FbOT1ayCL64Mke8xepW+ijLFf8DXZ9AZBO0rlB/ooQDtoMO6YzwIb1
Q7TB+eJhm+wxnQmVrL5RUPrcE9DL+3Gi6HphksCbwGgqdg7LYMJLThug4dBo77pu
aQ1aSVAfQg9mzmrdhnsDJCLInpcLUJh0dN45uBs2rCJPp5S4kdVoinUJdHcGizqU
tGkOdslLsyClEc8iBCL67hg5lW5EI73bLSuDB1wWZoK/gQLEVZ36i1Z53rbcSRc3
olCu6aVKgu7Cwwp6aGpw9XSuxoEsTk4d2G7sJfk8TUo/TMBNfPOghMiHG0W4llRO
dMwulSPAlAAATbhhIex3DkMJlQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFlrPCVQ
Cuo4BysXvRnUNpYt7/c2MB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC
QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvQUFFNzNBNjg0
NTAxMTFGMThGQUZCOEI5OEU4MzM3NzMucm9hMG8GCCsGAQUFBwEHAQH/BGAwXjBc
BAIAATBWAwQAowggAwQAowgiAwQAowgkAwQAowgnAwQAowgpMAwDBACjCCsDBACj
CCwDBACjCMYDBACjCMgDBACjCMoDBACjCNIDBACjCNQDBACjCNYDBACjCNwwDQYJ
KoZIhvcNAQELBQADggEBADmpjfno4V6q8V2tAOaCGRW6TOc468m7fOGmbRp4zJqX
D1E0+JbqxRuf+V/WrFWpKYrQg/PArlvYqfUPHm+hc8E9HnwLChxqNIcGovb//iJ5
BL3lZFAsyOqX3OlPVFjOJPt2zPGOPjjrBSmmVT8a36joc1coD+OAnGp9DhmxchL8
z3DsAlGXLksezTNsP/AQX8UgoVA5melUn7obt6VL0ur4kQmN/q7oPUVvzh21TI0c
dDqRBIcgRqjh4kk5WA7O52CJZmJxqxCJcBaa7fYTiHxGhIxuEZ/Ts6SaFT2wqrBo
74DV7V5H3vfioCuC5ul0CtbHUeThU79s2WnSubjqQ08=
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:51 2026 by rpki-client