
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/4C9617646D0611F0BBBF9039C4F9AE02.roa
File: 4C9617646D0611F0BBBF9039C4F9AE02.roa (raw, json)
Hash identifier: dVVvRypUK9/KtfRB7/hEbBL1MeEBt6MHgMHLpJHk1uI=
Subject key identifier: 8B:C3:DA:E5:EA:0D:3E:D6:B1:B3:0C:43:35:6C:1D:FA:DE:85:CA:45
Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Certificate serial: 0112
Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/4C9617646D0611F0BBBF9039C4F9AE02.roa
Signing time: Fri 03 Jul 2026 07:33:42 +0000
ROA not before: Fri 03 Jul 2026 07:33:42 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153641
IP address blocks: 163.223.4.0/24 maxlen: 24
163.223.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Validity
Not Before: Jul 3 07:33:42 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a4765d5-9d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:ed:52:aa:1d:42:dc:b2:76:bf:76:84:03:
e2:20:8d:8d:63:4e:62:de:64:bc:65:87:44:6b:e1:
45:c6:f2:d8:78:95:6a:fd:f6:7c:82:49:34:d7:0d:
4b:4f:f4:fa:10:ee:13:13:a2:5a:f8:68:43:df:23:
f4:d0:21:c8:0c:3e:71:a7:1a:06:53:5d:3a:dc:ea:
3c:87:c9:48:ca:40:5d:a7:6a:9a:28:87:59:fc:51:
07:b3:75:53:62:a4:05:ea:6c:70:78:bf:b8:fc:3f:
d2:83:34:11:6c:0b:48:fe:58:ef:f1:89:40:22:37:
5f:c3:f8:fe:36:78:5e:80:3f:28:2d:e2:89:62:77:
13:73:cf:a2:16:ee:b4:d4:d1:42:aa:c3:b0:4c:2d:
ff:7c:cd:c7:cd:7f:86:03:46:68:37:7a:69:6d:f9:
da:57:cb:d1:5e:ad:32:6c:93:51:8e:ef:3e:94:59:
3b:96:8c:62:2a:b8:67:7c:43:b4:ae:bd:11:df:f5:
c4:9b:48:b0:d3:a5:08:4f:75:d1:90:0c:29:f1:b9:
85:af:5e:29:a7:f4:3b:9b:a5:0b:f3:98:6f:65:d7:
42:92:3e:f1:8b:14:11:0c:7b:4c:5a:33:0a:ee:24:
ea:af:4a:65:59:9f:59:e5:8b:fa:e3:21:74:fd:0e:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:DA:E5:EA:0D:3E:D6:B1:B3:0C:43:35:6C:1D:FA:DE:85:CA:45
X509v3 Authority Key Identifier:
keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/4C9617646D0611F0BBBF9039C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.4.0/23
Signature Algorithm: sha256WithRSAEncryption
39:0d:a9:2e:1c:a6:7f:f1:20:40:2c:6d:2b:d2:e1:ab:74:13:
41:aa:32:48:25:28:3c:48:37:af:88:4b:d1:25:ab:52:ed:d5:
e0:f2:c8:eb:2b:6e:a7:4e:21:08:00:e7:05:de:e7:3a:39:bb:
88:9b:d2:ff:e9:e4:ea:c7:5e:f5:1e:65:ce:dc:6f:da:fe:6d:
9d:78:4e:9a:9d:db:c6:37:c1:9e:cd:6a:12:7d:54:65:8d:8c:
99:b5:3d:25:a3:c6:47:f1:ca:9b:4c:29:f0:e8:b3:c2:b4:92:
f5:cb:11:7c:77:48:69:f7:3f:d7:e5:c3:d6:1c:30:dc:33:19:
34:4c:ed:7e:65:65:bf:51:dd:85:aa:d9:3e:07:86:20:44:be:
47:6c:1e:95:2f:c6:9d:ed:a2:7b:99:c1:78:1b:ee:db:e2:12:
44:70:13:72:6e:dc:33:76:94:22:3c:cc:d1:c6:81:35:b5:6a:
c4:71:fe:e9:ae:38:f8:6b:bf:77:a0:11:ba:41:3c:5e:07:1b:
43:76:eb:80:81:27:87:02:2a:fc:29:03:3a:2b:c0:25:1d:fe:
af:21:c9:b4:0e:d8:2d:bd:e5:b6:27:ed:f1:1d:2e:fd:92:f5:
5e:74:86:96:d8:d1:15:bb:fa:8d:a7:6b:d6:10:7e:46:5b:3f:
7f:fb:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:29 2026 by rpki-client