
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12F6CA2854C311EFB296F71BC4F9AE02.roa
File: 12F6CA2854C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier: rUffIiknD9NnwfMxjaRiL+6gYVEOesDNSI7qN1k12a4=
Subject key identifier: AC:E4:88:0A:9C:F2:72:68:AA:AC:40:83:B7:59:A1:2C:25:F9:2B:A2
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 106F
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12F6CA2854C311EFB296F71BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:31 +0000
ROA not before: Thu 22 May 2025 20:07:44 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153190
IP address blocks: 2406:840:fc70::/44 maxlen: 48
2406:840:fedc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4207 (0x106f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493d7-a589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:5c:eb:bd:8f:62:b8:94:aa:01:82:c0:bc:
ce:12:1f:cf:fe:02:77:af:75:d5:44:55:22:50:82:
2d:fb:db:de:20:f0:61:a0:bd:52:85:b3:8f:b9:d3:
b4:d9:23:1b:2e:b4:ad:4e:91:e0:81:ee:eb:c6:bf:
1b:59:ca:27:72:ad:34:24:8c:a8:c8:6c:e0:4b:a5:
b8:2d:08:3e:5e:02:78:dc:ed:23:8a:0e:94:8a:6c:
b3:61:b9:90:b9:4c:0c:76:6b:89:c9:fa:05:18:bb:
76:ff:17:f5:0c:1c:67:41:95:8b:96:4e:c3:eb:c0:
c9:65:db:37:dd:f2:30:2a:d3:87:4e:7b:38:69:1f:
bc:13:d7:75:16:4a:8e:df:99:ec:10:28:e3:9b:99:
34:0d:d8:96:5d:b4:b6:62:17:30:33:26:77:7c:6f:
05:cc:d4:b8:d1:49:40:53:78:a0:e2:90:0c:87:2a:
ee:59:d5:a5:37:fd:a2:93:c4:e1:11:93:9a:50:d5:
f0:34:c8:82:17:23:e0:9b:f2:2c:09:11:a8:87:1f:
be:7b:d4:7f:d0:3f:e2:4a:43:bc:df:1d:ec:7f:c6:
83:fa:a1:4b:1d:b4:6b:00:79:1b:d9:47:f8:83:37:
c9:5d:14:fc:71:7e:67:7f:ab:16:93:ac:51:c4:e0:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:88:0A:9C:F2:72:68:AA:AC:40:83:B7:59:A1:2C:25:F9:2B:A2
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/12F6CA2854C311EFB296F71BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fc70::/44
2406:840:fedc::/48
Signature Algorithm: sha256WithRSAEncryption
2e:39:c9:f4:01:bd:7e:3f:07:1e:67:c7:2d:62:3b:b9:6a:6f:
6e:4b:f0:22:24:59:ae:ca:82:89:ba:2d:6d:f4:a2:44:5a:e6:
fd:d1:29:66:dd:6f:15:fc:1c:36:69:c5:ec:70:e7:a5:65:28:
2a:9a:75:e9:e6:e0:53:9d:33:51:c9:4f:ce:d1:95:8e:fe:c2:
0d:c7:32:93:8b:02:e5:b2:d1:e0:8c:bc:94:47:48:61:29:7a:
6a:62:d1:88:00:33:71:36:d4:23:59:4a:a0:0d:28:b4:19:57:
bc:fd:ee:f6:b1:28:1f:78:dc:01:d4:3f:0d:8a:9f:bc:05:de:
9f:80:13:98:6a:1e:0f:c5:e1:93:e4:1e:2e:52:42:2a:6a:8b:
47:35:a2:ad:24:ea:fc:5f:7d:e4:43:b8:80:a0:d8:21:76:54:
02:e4:e2:6d:e4:b5:6c:97:88:a4:5d:e2:c7:c9:c5:4c:c0:dd:
5e:a0:ee:69:56:88:32:b7:83:9d:24:fb:ff:41:45:37:7b:52:
3f:00:32:f6:95:f4:d8:fa:e9:0f:a3:07:08:98:fd:84:8d:f0:
71:11:fe:9d:7c:fc:fc:f9:93:61:6c:34:c1:cf:9e:a9:42:6c:
fa:ff:e3:75:03:d9:c0:9f:70:4f:7b:9f:80:b0:8f:32:8b:fc:
de:bf:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:43 2026 by rpki-client