
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/8A5CF8F0FB7411EF83C11685C4F9AE02.roa
File: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (raw, json)
Hash identifier: S+nQRnmZXUnFE6DkSM3kkEvhuxoEZtbN5DKGaAMAS/E=
Subject key identifier: 8F:19:C8:D0:8F:48:9E:85:70:85:D2:44:F7:5C:31:78:E0:FF:65:4E
Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Certificate serial: 0111
Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/8A5CF8F0FB7411EF83C11685C4F9AE02.roa
Signing time: Fri 03 Jul 2026 07:33:39 +0000
ROA not before: Fri 03 Jul 2026 07:33:39 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136969
IP address blocks: 163.223.4.0/24 maxlen: 24
163.223.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Validity
Not Before: Jul 3 07:33:39 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a4765d3-eff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:57:71:95:ec:00:5f:d9:30:13:73:fc:c7:
7e:b0:27:53:cc:7e:05:e3:57:45:a2:31:3a:5f:f0:
d1:13:44:7d:0c:43:a7:46:b7:c8:1d:e5:3f:6e:50:
72:de:cf:9c:7d:0d:2a:0f:8e:da:04:51:cf:cb:aa:
fe:ac:8c:0a:78:b1:d9:bd:47:df:e8:7a:80:e2:9c:
67:e4:cf:4d:a6:22:e0:24:d7:2a:b2:6f:1c:32:ce:
9d:88:0b:50:a7:be:ac:fd:dd:31:df:88:a4:27:35:
e1:37:8f:51:ee:38:81:52:7d:28:04:8f:2d:40:be:
63:91:ff:dd:71:a5:01:dd:07:79:2f:a4:79:b7:92:
99:ba:4a:46:aa:4e:07:3b:cd:dc:89:10:14:50:32:
63:f9:68:6e:93:a0:d0:fc:56:cb:8d:89:1a:03:4b:
84:c9:00:33:06:14:ab:b6:2b:9c:8f:6d:cc:65:b0:
8a:b7:f9:29:db:d6:48:6c:99:96:26:c3:1b:a0:e2:
d2:d7:9e:1b:00:e9:ea:1c:b6:61:33:40:75:1f:b1:
3a:52:ba:a8:a4:3d:88:5c:8f:3c:a5:04:9f:b7:75:
cc:7f:8d:34:2d:65:b1:d0:b4:36:ee:ae:b6:3b:4d:
ea:fd:9b:8b:63:a4:41:66:1e:9a:31:76:c9:54:95:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:C8:D0:8F:48:9E:85:70:85:D2:44:F7:5C:31:78:E0:FF:65:4E
X509v3 Authority Key Identifier:
keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/8A5CF8F0FB7411EF83C11685C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.4.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:ce:0c:95:34:6b:b9:a2:65:d1:3a:da:70:00:42:5a:ca:9f:
b7:0d:8e:a1:5b:b4:d0:87:46:07:fc:4b:42:79:bd:25:a6:a6:
1b:9e:e8:c2:a7:16:e3:53:5a:99:1f:d4:5c:20:b1:69:3f:a9:
0f:a6:e4:c5:b9:7c:6f:0b:5e:e2:99:09:4a:7a:3e:a3:7c:f6:
fb:cc:dd:a3:ac:94:b7:03:08:10:66:52:3d:e1:f5:5d:23:71:
58:8c:70:a2:ed:cc:e6:6f:51:b3:54:33:c9:fb:16:26:c6:a0:
f3:4d:f9:65:f9:fe:ba:43:35:78:32:a5:f6:cc:a0:b3:74:00:
4b:14:35:01:41:78:41:52:06:4e:2b:85:6d:3f:5e:78:3c:6c:
4d:3f:68:19:ed:db:ac:59:24:42:f7:db:6c:a7:2d:b2:7b:7b:
91:59:00:b5:d8:47:57:32:7f:7a:8b:00:ba:b4:38:fa:ba:31:
4e:9d:fa:d0:8d:4c:4d:c5:22:29:4c:74:04:bf:07:34:22:af:
b9:ab:80:60:b3:3d:d4:a9:26:6f:4a:9d:b2:f3:e2:81:23:cb:
aa:ee:ac:03:36:d3:5a:8f:13:9d:0c:f3:61:fd:70:d8:cb:cd:
65:09:09:6d:e8:7c:22:ed:0e:ce:48:c0:f4:d9:04:ff:91:e1:
e1:77:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:30:31 2026 by rpki-client