
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1335102E52DE11EC8E8CB053C4F9AE02.roa
File: 1335102E52DE11EC8E8CB053C4F9AE02.roa (raw, json)
Hash identifier: o8lpd29V2793Q6ei9XrJbKo2xiPjkZmfT0Tb59gzGp8=
Subject key identifier: 7B:73:43:8E:30:40:A8:57:6D:CF:26:B2:6A:32:7C:2C:A9:0D:D0:1F
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 113D
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1335102E52DE11EC8E8CB053C4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:00 +0000
ROA not before: Fri 22 May 2026 20:25:00 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 141429
IP address blocks: 2406:840:e0c0::/44 maxlen: 48
2406:840:e0d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4413 (0x113d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:00 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bb9c-3c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:da:7c:02:0e:70:de:9b:b9:6e:ba:1b:3c:
3a:fc:24:86:ff:08:e1:ef:af:f0:62:b1:b3:fb:45:
a8:17:49:b2:a7:19:4d:a5:1f:c4:64:b8:dd:74:f5:
b2:b5:d1:ff:53:eb:3a:29:77:2c:55:39:01:e5:53:
5a:62:71:34:da:30:eb:8c:2d:8c:8c:80:a2:d5:78:
20:68:25:89:9f:9e:0c:ac:d9:61:bb:e7:d6:71:1b:
58:13:4b:cb:f8:bf:4c:3d:24:22:85:cb:ed:c1:d2:
9b:6a:0e:2a:9d:a5:80:ed:6c:20:31:9b:84:57:39:
ee:c8:d5:92:bf:26:79:6e:2e:2f:b8:0a:14:31:8b:
a1:e5:ea:53:90:c6:b4:9b:f9:5c:fc:17:b9:8b:f0:
c9:fb:ca:c6:82:6a:b8:58:10:6e:9d:91:18:a4:67:
7a:0a:61:9c:de:af:fd:34:08:23:ef:b3:46:1a:f4:
bd:5e:bb:28:2f:bc:b3:39:c9:f1:f5:0c:fd:c1:7a:
60:3f:34:5d:d3:4d:cf:81:70:00:a2:dc:37:11:ee:
86:31:14:3e:67:70:c2:92:d7:e0:e4:4d:b0:4b:05:
6f:0b:45:a8:be:38:1c:e0:54:38:df:86:89:81:b6:
88:66:22:0b:d2:f3:81:ce:e0:44:5e:d1:4e:2d:1f:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:43:8E:30:40:A8:57:6D:CF:26:B2:6A:32:7C:2C:A9:0D:D0:1F
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1335102E52DE11EC8E8CB053C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e0c0::/43
Signature Algorithm: sha256WithRSAEncryption
70:a8:33:8d:d7:d6:d7:5e:80:f1:15:c5:3c:67:7c:1b:92:00:
aa:83:e0:5e:05:5a:c8:b5:61:91:63:c3:89:1a:5d:52:26:05:
34:e2:ec:70:e8:c2:43:0f:07:ed:62:88:e4:3e:44:a2:0b:5d:
26:25:ed:aa:c4:f9:fd:d6:8c:cb:3a:b0:85:68:df:a5:ee:bf:
e1:9d:f4:e1:51:3d:d0:a0:26:6b:99:2b:30:f3:ce:db:03:92:
2f:45:d2:00:f9:59:c3:da:e2:a7:96:54:68:33:17:5e:c9:3b:
a0:9a:42:d9:c7:fe:f5:12:15:1c:35:82:ce:68:bf:2a:7f:dd:
75:a3:11:90:3c:65:0e:69:57:22:3f:cd:4c:b2:e8:67:cf:8d:
90:ee:93:1d:d9:06:b1:44:de:66:80:df:ce:b6:51:f1:b8:ed:
6e:93:26:de:f4:9c:39:3c:6c:f2:b8:11:cc:c1:51:e5:ef:e9:
d9:aa:c2:2f:39:36:82:d3:dd:e6:f4:63:d2:16:13:1b:31:06:
40:f1:60:52:44:cc:aa:82:67:46:f0:3a:60:3a:bb:a7:52:8a:
81:a5:0c:2a:ac:d7:74:37:ab:06:5a:97:69:b3:7e:4c:2b:c8:
82:14:52:9f:61:3c:0a:eb:86:8b:d3:73:99:f8:9c:11:85:2c:
9b:51:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:14 2026 by rpki-client