
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0D0E9070174911F0BF4ECC60C4F9AE02.roa
File: 0D0E9070174911F0BF4ECC60C4F9AE02.roa (raw, json)
Hash identifier: qG6k1oPYJ0ct/neH2ABLvAEsmX0yo7eQtixItHbqAEU=
Subject key identifier: 89:9D:58:28:32:E6:E1:CC:97:5F:A9:B3:70:DA:CD:9C:BC:55:2A:C6
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1087
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0D0E9070174911F0BF4ECC60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:53 +0000
ROA not before: Thu 22 May 2025 20:08:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 211575
IP address blocks: 2406:840:e260::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4231 (0x1087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:08:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493ed-62c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:7e:5c:a6:c5:c2:b8:66:dd:9b:22:ea:12:
ed:5a:f3:4f:7c:54:83:d9:71:fa:da:e9:07:d7:08:
34:51:4e:9f:b5:07:e2:d2:53:a8:ee:e8:f9:54:68:
ea:ec:c7:7b:7d:bd:db:8b:2d:30:68:16:87:fb:24:
bc:53:7a:c3:03:9e:16:2d:f9:a0:1b:be:89:c4:d3:
80:e3:f1:49:7b:2d:f7:e5:10:7a:43:2e:77:e5:67:
2f:e0:84:e2:64:a7:09:ef:dc:26:41:e7:83:22:7e:
ea:12:db:b5:db:1a:43:13:cf:e6:c2:86:22:3a:4b:
e8:97:86:b2:6e:03:24:45:82:fd:72:89:25:c5:ff:
df:71:90:fd:4e:d0:70:55:b5:1b:e2:5d:8f:51:62:
2c:95:17:c9:dc:39:2b:f3:4e:15:1b:88:d2:00:ea:
29:e2:f2:42:5b:7c:ab:fe:1e:91:4d:c2:13:14:ca:
3c:9a:3d:62:9a:13:34:90:e6:53:4e:91:94:a1:30:
58:50:6c:33:83:f7:e4:55:00:7d:cd:97:80:05:be:
90:af:81:ba:db:52:c1:67:cc:25:17:f0:96:71:35:
89:b5:dd:59:cc:58:92:31:aa:0b:8d:ca:c0:ea:5c:
9b:84:48:c0:e5:2c:20:c2:ee:77:a1:b1:7b:d7:e1:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:58:28:32:E6:E1:CC:97:5F:A9:B3:70:DA:CD:9C:BC:55:2A:C6
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0D0E9070174911F0BF4ECC60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e260::/44
Signature Algorithm: sha256WithRSAEncryption
a1:45:e1:98:9b:4a:c3:b6:46:98:f5:5e:76:bd:a0:9f:69:33:
3f:1b:23:0c:2f:dc:ef:7d:77:fd:0a:f1:07:3f:fb:2a:7a:b1:
1e:38:dd:f8:b0:cd:26:5f:9b:47:15:c2:be:c2:07:ae:35:d8:
3d:95:de:b1:8d:6d:12:fc:3c:9a:ea:d0:15:d4:c6:e3:5e:4d:
cd:20:7a:f1:2e:f9:f3:d3:db:20:ee:1b:71:92:6b:4b:f7:10:
15:ae:d3:08:81:aa:c9:7a:e0:7f:d3:42:d2:87:04:8d:42:2d:
d5:f4:4b:97:13:0f:e3:77:c4:9d:cd:f3:b1:8e:0d:81:e2:50:
5d:b3:61:f9:fa:6c:07:e7:94:27:14:9c:cc:60:5e:e3:b4:08:
09:89:d9:87:79:01:0f:e3:40:bc:d8:74:5a:a8:49:ab:91:b9:
3a:3b:29:f0:be:46:d1:1c:62:b9:79:76:d1:5f:ea:19:08:d0:
d8:35:ba:28:19:ca:71:60:77:3d:1c:bf:29:d1:87:97:61:7a:
15:c4:37:fe:af:0c:72:69:9e:72:1d:69:33:d6:0e:16:da:51:
cc:e5:37:e1:5b:8a:17:29:0e:25:9b:2d:68:ec:db:57:33:c1:
3a:93:33:95:12:95:d1:88:4f:f8:d8:f0:44:6d:96:61:d9:b6:
00:8b:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:25:28 2026 by rpki-client