
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/ABCE17E0E15511F0A05B89F1756F56BC.roa
File: ABCE17E0E15511F0A05B89F1756F56BC.roa (raw, json)
Hash identifier: QYg5E4x9LMPZOJAculgNlzjCkNXYjlhGRkbG+GBuYHI=
Subject key identifier: E4:E4:2E:6B:1D:F6:0F:65:CA:F4:40:BA:37:3D:05:7E:1F:96:BB:F3
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 0239
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/ABCE17E0E15511F0A05B89F1756F56BC.roa
Signing time: Fri 07 Aug 2026 03:52:41 +0000
ROA not before: Fri 07 Aug 2026 03:52:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 133617
IP address blocks: 2403:27c0:3000::/48 maxlen: 48
2403:27c0:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 03:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Aug 7 03:52:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a755688-a3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:8e:b4:01:a5:ea:b0:5d:85:4c:23:4c:56:
00:ee:0b:3b:57:62:3c:4a:90:a0:5e:bf:8c:64:d5:
c5:6b:c2:54:0b:dc:d1:ea:6e:a0:46:a2:23:df:91:
04:82:d2:87:eb:f7:c4:39:89:7c:dc:72:36:0d:60:
23:29:44:31:3a:ce:09:c1:5f:35:ae:d8:0b:92:da:
09:da:8e:f3:71:32:d7:8c:b6:c3:c0:22:ec:e8:db:
d0:31:7a:42:8b:cc:4e:8f:02:7a:cc:ce:0b:95:ea:
ea:92:eb:0a:52:08:7f:ec:03:f9:42:e3:8f:d4:f4:
a0:58:8a:53:db:c9:ae:3d:aa:51:f6:7e:45:22:56:
5c:90:83:f0:b6:7c:dc:e3:a8:64:ac:b3:cc:37:f0:
cc:36:7a:15:aa:8c:2b:2f:97:59:2d:19:21:c0:1c:
9d:21:d2:5a:6b:b9:12:6d:5d:62:6f:ae:17:9d:b9:
8c:86:b0:b9:00:d8:50:e0:00:7e:bf:7f:db:be:91:
9a:36:47:47:a0:cb:c5:bb:dc:fb:55:60:31:de:c6:
68:75:7f:93:11:10:0a:b7:7d:3e:3e:86:a5:9d:3d:
87:83:b2:0a:a6:53:0d:70:22:b2:ed:a1:62:02:26:
1d:96:f5:85:3e:aa:b2:a1:99:21:51:0e:a8:cb:0b:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:2E:6B:1D:F6:0F:65:CA:F4:40:BA:37:3D:05:7E:1F:96:BB:F3
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/ABCE17E0E15511F0A05B89F1756F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:27c0:3000::/48
2403:27c0:4000::/48
Signature Algorithm: sha256WithRSAEncryption
1a:66:db:b8:5e:4e:0f:18:21:de:5d:a3:8b:5e:e3:3f:5b:c5:
82:51:20:8c:92:09:08:08:41:9c:7e:37:65:11:47:b9:a4:0f:
d4:dc:4e:db:12:80:a8:03:c8:49:50:1b:d7:5a:e7:c5:7d:8d:
02:78:69:c9:41:7e:05:69:2e:a8:f1:d2:28:22:b0:39:b9:2a:
b6:3f:64:5a:b1:47:d8:e1:81:d1:ab:57:ce:5d:28:f5:1b:87:
44:48:0d:7c:96:a9:4c:c6:80:e7:5f:0c:b3:62:e4:c0:dc:51:
35:b3:62:ac:1a:e9:59:f5:55:36:d1:00:24:88:af:be:f7:ea:
68:a2:31:c9:19:ae:43:79:08:06:1c:9f:51:2e:11:fb:a1:d9:
0b:78:89:4a:3a:15:3f:4c:1e:ab:1f:f3:e7:d5:4f:a7:dc:06:
d9:c4:be:ce:d5:58:f1:e2:58:cb:44:c8:aa:47:32:17:11:73:
f7:d2:44:af:6b:8d:35:f8:da:f7:75:f7:cf:34:8b:b4:ea:49:
5a:db:9d:7a:54:8f:b3:4d:2a:35:9d:ed:a2:6a:24:f9:c2:d2:
cf:4c:7a:15:39:55:7b:85:60:43:12:87:dc:3d:59:79:f2:81:
df:9b:97:c5:dd:97:65:ac:e8:63:19:db:5d:50:8d:9d:9e:aa:
b8:db:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:13:36 2026 by rpki-client