
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/19BC1586171111F18BC19176053D8C67.roa
File: 19BC1586171111F18BC19176053D8C67.roa (raw, json)
Hash identifier: r7rwh10AUg8Bp5TjM4K+BlSqP0ZqaS+4qEdtW0RqnTM=
Subject key identifier: 2A:66:61:13:50:A5:35:41:5A:E2:8F:41:E0:E9:78:B4:42:68:2A:E0
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 10B2
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/19BC1586171111F18BC19176053D8C67.roa
Signing time: Tue 03 Mar 2026 14:56:04 +0000
ROA not before: Tue 03 Mar 2026 14:56:04 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 204244
IP address blocks: 2406:840:e230::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4274 (0x10b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Mar 3 14:56:04 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a6f684-b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:87:05:cb:0e:b1:22:b4:77:76:10:59:d5:
f5:38:45:d7:9d:a8:7e:ef:26:53:eb:1a:3c:d5:dc:
b3:f7:42:36:55:5d:0f:7f:a8:06:01:74:e8:7a:5f:
12:0e:91:58:b9:e4:09:ff:86:77:e4:b0:ef:17:6f:
b9:3a:e7:36:08:89:c5:62:82:5d:a2:4a:cf:2f:d6:
4f:d1:23:2f:04:e4:19:4d:46:b7:06:36:d4:d1:63:
50:a0:2a:b8:cb:4b:b4:b6:15:42:7f:f2:d1:bc:03:
8a:97:91:7f:ce:22:7d:89:60:0a:14:f4:94:44:d5:
c0:63:69:17:71:e7:f4:bd:0d:1e:d1:90:82:1a:32:
0f:1a:67:e8:71:e4:f1:bd:86:12:8d:bd:8d:09:5a:
94:fb:ce:b4:f3:15:b6:79:cb:ce:c8:22:37:66:92:
ca:86:ee:16:da:a6:9a:46:ef:9e:42:0f:e8:55:4e:
37:c5:44:c6:f9:ca:27:a2:ec:c2:99:4d:75:46:e9:
93:b4:d8:ea:14:1e:32:43:6c:2d:09:ee:10:eb:06:
2e:ac:3e:d6:b2:bd:f8:5b:5b:39:10:ef:40:09:6e:
c3:37:f3:0f:2b:ea:2f:5b:f2:7f:9b:21:81:0f:ed:
35:40:fd:f0:dd:bc:6d:c9:5b:5d:7f:28:56:8d:22:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:66:61:13:50:A5:35:41:5A:E2:8F:41:E0:E9:78:B4:42:68:2A:E0
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/19BC1586171111F18BC19176053D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e230::/44
Signature Algorithm: sha256WithRSAEncryption
5e:41:3c:00:d3:cd:98:e2:a5:0b:50:19:09:7e:13:46:8e:aa:
01:4c:68:4e:cc:f7:e2:49:07:46:4e:98:6a:72:0e:85:ba:fa:
10:7d:9f:89:41:2a:2f:d9:e4:8e:31:79:09:56:de:5c:5f:e0:
f7:32:8d:17:d7:f4:e0:ed:25:77:32:08:2d:d4:76:f1:41:89:
c1:1e:c5:6b:fc:30:74:ca:3a:1f:c3:20:61:78:1d:73:23:bd:
dd:c0:61:e6:d9:1a:d7:b6:0f:8b:30:b8:6a:04:e5:28:6a:93:
3c:b3:42:b7:d9:97:24:e7:cd:a6:35:2c:d2:2f:0e:3f:79:a5:
c4:9f:ea:fa:fb:17:78:50:1e:65:4e:a4:b5:87:c2:54:50:0e:
42:89:b4:93:0f:42:f5:ca:c0:c7:ae:c6:57:d7:f5:f4:98:b5:
8b:8b:e2:af:2b:b1:a8:86:4e:7c:54:48:0f:d4:dd:b0:c8:b5:
e4:d7:a1:08:77:b1:b9:e6:c2:4b:88:14:88:41:3a:49:19:16:
7c:08:49:94:66:ad:e5:0b:4d:4e:6c:32:01:ee:bc:9c:44:e0:
11:db:5f:30:2b:10:b6:71:94:a4:47:71:5c:4d:af:52:3f:14:
53:8e:62:82:28:03:f7:f8:44:c5:2c:88:0d:c9:5c:6b:92:5f:
03:03:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 05:13:05 2026 by rpki-client