
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa
File: 1154663A54C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier: TmGniQlFv4lBcMU5TARtYSB/juKyTQmzowMGJwKp+L4=
Subject key identifier: A1:4C:38:07:B3:ED:5E:91:5E:9F:75:96:5C:A6:C2:91:E5:2A:4E:FA
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 116E
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:32 +0000
ROA not before: Fri 22 May 2026 20:26:32 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153186
IP address blocks: 2406:840:fc40::/44 maxlen: 48
2406:840:fefa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4462 (0x116e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:32 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbf8-2356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:64:1a:bb:04:dc:97:5a:85:eb:18:6c:12:
d0:bf:cf:5c:4d:60:b9:91:6e:34:27:dc:de:1b:a2:
8a:e2:76:50:01:99:46:10:ab:2c:d8:c8:f5:70:54:
44:87:e0:2f:4e:1c:22:9e:38:b6:d7:4d:99:65:2c:
b4:3f:87:37:24:40:c1:3a:a1:0b:ef:cf:2e:06:a0:
8c:6e:36:c8:24:7d:70:e1:84:1f:23:a2:9e:00:ff:
e4:e9:14:7d:3b:82:3b:b1:1f:ef:01:cf:d4:92:6c:
85:6b:83:fd:c0:1f:5f:4a:82:06:41:24:2a:58:9a:
63:dd:cc:25:1d:d2:d6:b7:45:d4:f2:65:c5:c2:60:
bf:6e:2a:f6:dd:fa:27:21:bf:55:14:2e:b5:e2:f1:
bc:9f:aa:d1:55:b8:21:f2:23:d5:04:c4:92:59:03:
e7:68:65:39:35:71:cf:59:16:ce:68:d1:ef:95:78:
59:6c:1e:a1:48:c9:d3:69:73:74:e0:91:7b:a2:50:
d2:3c:8a:64:f3:b9:71:0d:5c:e7:e7:1c:ce:3e:38:
39:6d:b7:94:48:47:85:9d:48:ad:ff:d8:44:91:1a:
66:a4:08:28:2d:cd:6f:e7:b4:6c:bd:3f:a0:c5:5d:
6f:d6:69:dd:db:06:8b:fb:3a:c6:8f:59:f1:76:16:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:38:07:B3:ED:5E:91:5E:9F:75:96:5C:A6:C2:91:E5:2A:4E:FA
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fc40::/44
2406:840:fefa::/48
Signature Algorithm: sha256WithRSAEncryption
14:e1:03:23:f9:6c:94:b2:89:50:0f:61:23:d5:33:f3:6a:e7:
b0:b7:36:f7:ff:89:c2:33:8c:7d:86:82:5a:41:2a:dc:59:0e:
f7:ec:b9:ef:6c:dc:63:47:5b:60:8f:1f:f9:f4:f9:41:5a:8c:
93:5b:d7:01:08:a5:1f:f4:02:f1:1a:b3:83:6a:11:c3:75:18:
bc:b2:56:f8:cb:99:e7:c5:11:37:ff:e1:ef:eb:f7:15:96:bd:
e6:2b:3b:0b:13:f3:03:51:f0:cf:c7:eb:7c:1e:ab:43:fa:a6:
3b:3a:58:c3:c1:8e:56:e9:33:45:c2:90:e8:1f:66:a7:25:dd:
a0:9f:32:e2:22:8b:fe:3a:8d:42:04:48:36:6a:d5:02:b8:98:
9d:0d:b3:a5:f2:0b:67:87:ae:c3:c1:14:62:38:39:1b:4f:02:
b1:b1:05:b1:77:63:df:d5:97:f6:b3:78:11:86:52:07:81:a8:
1d:c6:d2:e5:da:6b:ec:3f:da:ee:e4:50:51:9f:97:23:bc:a7:
92:1b:db:a4:82:06:24:ed:3c:27:57:a1:6a:fd:20:76:73:e9:
5c:2f:56:95:a8:d5:6c:6c:a5:d0:b6:a3:be:74:bf:ee:93:f6:
6b:0b:6d:4b:bf:93:a9:14:74:ed:e1:85:4c:7e:0f:a3:c8:ec:
15:7a:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:48 2026 by rpki-client