
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa
File: 10D2721054C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier: 7e5vNWOohwCsthPNFmDxnRNTdM6GYGNbCwbh/B2PQQU=
Subject key identifier: 6D:7D:A4:A3:EF:2F:45:5B:60:E9:5C:A5:E5:AF:4A:7A:F1:B1:BA:8C
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 116D
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:30 +0000
ROA not before: Fri 22 May 2026 20:26:30 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153185
IP address blocks: 2406:840:fc30::/44 maxlen: 48
2406:840:fec2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4461 (0x116d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:30 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbf6-bb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:ab:e6:44:e9:bd:69:47:6e:ef:aa:22:87:
c8:67:27:20:30:6a:b9:2c:f4:2c:e2:76:42:d1:5a:
3b:ce:a3:93:f9:fe:5b:5d:a5:38:49:14:da:6b:4a:
03:4b:1a:b4:6d:74:45:f9:89:44:d6:a6:b5:5c:a9:
f9:8a:bb:c1:60:0d:55:4c:80:26:45:44:be:11:9e:
ba:e9:b2:83:88:d1:3e:93:eb:c1:0d:82:10:40:e2:
c6:91:eb:f7:22:9d:ff:17:a0:ae:b9:97:bd:d8:6e:
2c:ff:f8:6f:33:9a:f9:fe:bb:23:f2:6b:6a:bf:8a:
cb:d1:53:8f:1d:16:1b:f0:72:94:0e:8a:58:72:2f:
b5:d4:11:f4:94:81:e0:56:f2:7d:c7:9a:32:c6:ad:
ce:62:08:ba:da:5b:3c:ba:18:ba:4b:05:90:07:d1:
3d:0b:f8:01:4c:10:07:16:16:12:62:fa:e9:b6:d6:
68:4e:da:75:ea:e7:80:9a:49:1f:b4:a7:fe:25:36:
ee:e1:ed:3e:1c:92:92:4f:2b:f7:b6:b9:17:41:ce:
c0:a0:9c:c2:63:3c:98:3c:c1:3d:d3:fe:bd:b0:d3:
44:42:bc:d2:ed:c6:b0:15:49:13:2f:8a:b0:df:f9:
f5:4a:ff:09:c4:6e:9f:c9:16:73:4e:12:e1:a4:5a:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7D:A4:A3:EF:2F:45:5B:60:E9:5C:A5:E5:AF:4A:7A:F1:B1:BA:8C
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fc30::/44
2406:840:fec2::/48
Signature Algorithm: sha256WithRSAEncryption
84:48:63:8a:46:69:86:83:0d:b7:8e:81:95:66:aa:d7:f7:86:
f8:8b:ca:98:6a:3a:75:94:02:b0:9f:09:4f:c4:ce:db:cb:9d:
ea:a0:a8:71:46:b9:b3:61:c7:4f:2b:85:4b:c8:0e:92:26:b1:
8c:52:d1:15:bc:1b:be:ad:3d:64:31:82:3e:44:16:b8:d2:0f:
df:c0:8d:2a:77:ba:23:e0:84:53:89:a4:a8:9a:6f:e2:1e:aa:
f2:f4:52:bf:81:b0:32:5b:25:94:f3:4b:a4:14:f0:0e:38:aa:
ef:76:78:1d:fd:44:be:91:ec:e0:c3:34:c3:72:54:5d:ab:88:
73:35:4f:e9:4d:18:e2:10:cc:14:ee:58:03:71:13:34:df:ca:
64:f4:5a:c6:f1:dc:76:3c:51:46:f4:17:b6:15:13:0e:91:a1:
dd:57:f6:c9:50:62:bc:a7:7f:9e:9d:bc:ed:9b:23:78:56:94:
8b:4a:1e:4a:04:02:cd:4f:76:c2:89:eb:cb:57:01:6b:c1:6d:
98:9b:c5:73:a6:61:e6:90:e5:4b:86:39:a6:3a:b4:7b:be:08:
90:57:eb:d9:e7:63:da:36:ea:5f:45:33:1c:75:21:12:90:ac:
3a:4d:20:17:dd:84:30:a0:8b:ff:8e:86:5f:36:61:a2:12:a1:
b3:15:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:59 2026 by rpki-client