
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/6017E5BE54FB11F1B81DC57BA3833773.roa
File: 6017E5BE54FB11F1B81DC57BA3833773.roa (raw, json)
Hash identifier: P+pna3FadF29aa6apDihcWdlag9aJJPNQ/+Y5gHcH4s=
Subject key identifier: 94:96:6A:FE:C8:6E:C3:5B:A8:4A:AA:96:FD:BB:C8:0A:DD:1E:FE:5B
Certificate issuer: /CN=A914E6AA/serialNumber=B3843F1415539DE951EA6680A4E99008AF837874
Certificate serial: 09
Authority key identifier: B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/6017E5BE54FB11F1B81DC57BA3833773.roa
Signing time: Thu 21 May 2026 09:56:45 +0000
ROA not before: Thu 21 May 2026 09:56:45 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 141459
IP address blocks: 2406:e1c0::/32 maxlen: 32
2406:e1c0:5::/48 maxlen: 48
2406:e1c0:200::/48 maxlen: 48
2406:e1c0:300::/48 maxlen: 48
2406:e1c0:400::/48 maxlen: 48
2406:e1c0:500::/48 maxlen: 48
2406:e1c0:600::/48 maxlen: 48
2406:e1c0:fce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 22:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=B3843F1415539DE951EA6680A4E99008AF837874
Validity
Not Before: May 21 09:56:45 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a0ed6dd-865e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:9e:3f:94:5c:00:a4:43:e1:b3:8a:fc:4b:
e2:32:65:0d:ff:86:13:07:40:8c:95:cb:c8:9f:86:
02:b2:de:18:21:44:23:bc:1f:77:c5:96:cf:d9:08:
aa:b3:ac:30:bc:39:de:73:b8:25:2e:b6:7a:69:ae:
77:1c:14:21:63:8b:07:5d:ae:5c:85:cc:e2:c8:fe:
01:02:d7:93:20:c1:5b:04:9e:dd:06:30:ab:5f:82:
82:aa:25:eb:00:3a:5f:88:96:d9:f1:3a:e2:61:01:
ff:89:0f:61:45:5d:9a:e3:8d:33:d5:05:b7:df:af:
b0:33:50:20:76:74:0e:8b:bb:3c:81:46:c1:7d:45:
83:ab:db:ea:81:4d:8e:c5:e8:cd:63:d8:f4:11:16:
c8:be:e9:c0:d4:3c:24:ea:ee:66:92:a2:df:5d:5d:
3e:a5:01:79:d2:53:f7:ea:82:24:b0:f5:be:a8:dc:
7f:b2:44:2a:f4:ac:24:a2:4c:60:61:16:a8:68:b9:
99:59:50:92:4e:32:23:4a:93:60:5e:d1:eb:29:7a:
bb:a4:9e:46:4b:a8:b7:43:e5:78:93:45:c8:5c:28:
9e:4b:00:55:74:d1:69:8f:88:5f:bd:e1:77:70:46:
cb:2c:c1:2c:f2:aa:21:1d:6d:c3:bc:ef:61:f8:06:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:6A:FE:C8:6E:C3:5B:A8:4A:AA:96:FD:BB:C8:0A:DD:1E:FE:5B
X509v3 Authority Key Identifier:
keyid:B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/6017E5BE54FB11F1B81DC57BA3833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:e1c0::/32
Signature Algorithm: sha256WithRSAEncryption
d7:4f:03:c7:1d:10:c4:ce:81:e2:55:90:b0:da:59:ed:5f:e3:
37:86:59:f5:16:d1:9f:8d:28:3b:66:7a:68:71:7c:8b:91:0f:
6c:35:ea:d7:c1:89:ea:60:5e:7e:7f:9c:d1:06:2f:67:d0:d7:
bb:f4:42:00:f7:bd:19:5c:95:dc:52:c3:35:7e:5e:5b:4f:a7:
2d:80:4c:d3:05:0a:6c:38:03:9f:96:f6:61:bf:7b:1b:ee:e2:
8e:80:bf:3f:c1:94:49:a5:94:13:9a:43:19:3f:76:19:a2:97:
76:b8:b8:7c:c6:ae:4a:bd:62:d4:a9:5b:0d:c0:94:5d:f7:f7:
42:b8:09:21:b9:d0:67:ef:20:b0:25:d1:d4:f1:ca:39:48:08:
be:8a:84:cc:44:a2:1c:40:ea:2e:4d:94:2c:5c:82:1e:5c:f1:
b8:17:1e:19:e4:d3:d8:be:ba:b0:9c:ce:c9:2b:44:59:bf:52:
ef:ad:85:63:d7:40:2c:e6:fe:8b:b5:18:1e:4b:cc:e2:9f:6f:
ec:7f:f6:50:f4:27:de:ee:c8:c1:19:ed:00:e2:63:8f:fd:47:
5f:ce:8f:38:d4:bf:97:48:e1:1c:78:0b:8b:a9:60:ab:c3:fd:
2a:b0:b0:f5:1b:b9:18:9e:4c:13:39:c2:53:9a:b9:0e:9d:05:
b1:97:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:15:32 2026 by rpki-client