
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/A4C79D56915C11F1B31E34186B11F970.roa
File: A4C79D56915C11F1B31E34186B11F970.roa (raw, json)
Hash identifier: txZBE76GyRH2FzSb4nahHUjabcAmRenCXZB0dWzn970=
Subject key identifier: ED:47:A8:73:05:7D:87:50:8E:0A:98:62:64:D6:38:6C:A3:91:2B:C0
Certificate issuer: /CN=A917BAC9/serialNumber=44FBC55DCDD2A8427D4F78F8140484A26E527790
Certificate serial: 02
Authority key identifier: 44:FB:C5:5D:CD:D2:A8:42:7D:4F:78:F8:14:04:84:A2:6E:52:77:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/A4C79D56915C11F1B31E34186B11F970.roa
Signing time: Thu 06 Aug 2026 06:04:11 +0000
ROA not before: Thu 06 Aug 2026 06:04:11 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154811
IP address blocks: 2001:df7:5540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl
rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC9, serialNumber=44FBC55DCDD2A8427D4F78F8140484A26E527790
Validity
Not Before: Aug 6 06:04:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7423db-f12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:58:e1:8b:36:21:6c:0e:6d:b6:0a:63:dc:
22:14:bf:67:4f:0f:f1:b2:d3:a5:f6:7b:c2:1e:4b:
4a:3e:15:e8:99:78:63:71:ba:e9:a8:32:6d:a2:9e:
d7:5f:c9:47:08:e4:b7:08:e9:38:f2:56:aa:8e:8d:
69:df:7e:29:b8:c1:f7:d0:75:d4:d8:a0:cd:bd:f7:
f8:0d:b7:b5:97:c9:44:6d:66:be:db:d9:f8:c9:51:
f0:50:dd:52:f8:22:c8:93:10:2c:a5:36:2a:99:21:
3f:92:e1:f7:7d:31:3d:a6:b9:04:00:57:4f:96:59:
6c:bd:0b:ca:e5:7d:ea:3d:79:4d:d1:5a:63:62:ed:
97:19:fd:cc:32:79:31:19:f7:b8:c4:56:2c:99:4c:
47:d3:36:df:ae:fa:9e:d5:0f:68:01:54:00:0c:1a:
f0:e3:c9:b6:34:10:de:85:6e:9d:82:ba:18:50:37:
c2:6d:6e:0c:ae:8c:ba:32:f7:ab:31:49:d2:ec:26:
24:39:35:59:e7:52:a1:34:dc:63:1d:ea:41:a7:1c:
11:40:63:d5:a8:f3:c2:0d:5e:90:f7:22:36:bf:b6:
93:7f:70:ad:ad:e3:02:e3:06:84:81:6f:53:73:a2:
f1:e7:04:dd:5c:1b:b9:d1:0e:f9:69:c4:09:99:7c:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:47:A8:73:05:7D:87:50:8E:0A:98:62:64:D6:38:6C:A3:91:2B:C0
X509v3 Authority Key Identifier:
keyid:44:FB:C5:5D:CD:D2:A8:42:7D:4F:78:F8:14:04:84:A2:6E:52:77:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/A4C79D56915C11F1B31E34186B11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:5540::/48
Signature Algorithm: sha256WithRSAEncryption
36:7c:c6:2f:ef:58:2b:07:13:dd:d1:fa:7e:7e:71:48:47:2a:
e0:c5:f2:6e:03:a8:28:ce:80:a9:d2:90:0c:8b:3e:e0:82:06:
89:93:5e:a9:a8:f2:f8:b9:29:4e:ab:28:ff:25:56:7a:4d:68:
4d:06:56:3b:89:7c:a4:48:86:f1:f5:e7:76:ed:7b:1d:d4:b4:
8b:3c:aa:c0:23:8e:82:af:1f:0e:93:cc:d2:a5:fa:dd:42:d2:
6b:d7:b2:15:1b:68:8b:f2:b9:e9:71:82:c6:b3:09:a5:6c:f4:
3f:a7:38:57:38:f4:39:34:3c:f5:41:64:06:e6:c3:ca:db:22:
09:64:14:f4:ef:d8:2a:a9:d8:04:27:a2:44:c8:a1:11:5a:ea:
be:86:d2:bb:77:2d:90:ff:15:88:59:af:64:5d:55:f6:47:e3:
2c:82:6a:ce:a0:be:03:79:ce:0a:2a:91:3f:73:fe:4f:9f:b9:
56:0d:39:b9:b8:3d:0a:95:e2:8a:89:3c:9a:a4:dd:d3:f8:db:
b0:ee:6a:65:a8:6f:b2:fe:22:4d:17:c8:9d:de:e5:2e:87:b2:
c0:1a:37:3d:b7:18:fa:0c:4b:b8:ae:ed:13:bc:45:e6:df:69:
c5:2a:d1:cc:60:7c:0c:15:9f:c9:6a:88:6f:01:e4:b8:ae:e0:
5a:e5:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:32 2026 by rpki-client