
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1B033B22BA2911EF8CC06977C4F9AE02.roa
File: 1B033B22BA2911EF8CC06977C4F9AE02.roa (raw, json)
Hash identifier: gmTna+BLoQrmsl+1k9NjLL1+OcRK9cOn/Vrp395uBaQ=
Subject key identifier: DC:11:B2:9D:A1:F8:00:CF:1E:9A:9F:7B:DA:51:3C:50:EC:AA:F4:FB
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1098
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1B033B22BA2911EF8CC06977C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:31:09 +0000
ROA not before: Thu 22 May 2025 20:08:30 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 53343
IP address blocks: 2406:840:9690::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4248 (0x1098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:08:30 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493fd-ab3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:81:dc:81:14:0a:fe:47:30:f3:d2:92:5e:
c3:47:41:a1:b7:a7:34:60:b7:62:5f:5a:44:db:ee:
5a:95:aa:fb:15:04:7c:62:6b:21:33:30:39:7a:f7:
a7:68:ce:00:e1:19:07:51:41:dd:28:dd:e9:ed:e3:
27:44:cf:4b:28:3b:a4:3c:72:35:65:c3:27:23:6d:
6d:81:b4:e3:b3:f0:19:1b:cf:29:09:97:6b:ff:b0:
0e:78:0b:ef:84:d8:86:12:15:72:79:af:35:2a:d6:
02:19:5a:cf:eb:4b:fc:2f:00:8e:77:65:c6:56:22:
78:ae:df:62:8d:ad:d4:98:c1:be:9d:a2:25:8e:0a:
da:8e:f9:4c:a0:50:b9:eb:37:d0:de:ce:ff:a2:6b:
5a:15:9d:ad:bd:54:05:b9:d0:a0:fa:f3:bf:f6:1d:
9e:b1:1f:0a:02:a4:74:34:55:92:da:bf:5e:21:98:
c3:a8:62:9c:09:b5:76:64:f9:48:29:d1:28:ad:87:
17:d2:36:4a:7b:5a:d8:27:1f:53:69:0b:bf:5f:a8:
ee:64:b3:63:28:e2:8a:a6:ba:30:16:8f:48:03:ad:
19:53:eb:26:7c:18:c1:89:48:75:5d:b4:ef:d5:84:
76:fa:bc:ed:a3:72:72:14:cf:56:12:6a:c6:17:92:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:11:B2:9D:A1:F8:00:CF:1E:9A:9F:7B:DA:51:3C:50:EC:AA:F4:FB
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1B033B22BA2911EF8CC06977C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9690::/44
Signature Algorithm: sha256WithRSAEncryption
27:a9:7b:f6:ca:8b:d7:6a:0e:64:d1:1b:60:47:bd:da:31:76:
be:31:cc:fa:73:ff:25:36:ac:f2:be:db:cd:83:b1:4a:97:9d:
3b:e8:dd:ff:29:6e:29:e0:c8:0d:1c:92:c6:3d:a6:a9:9b:10:
f4:76:96:ba:14:d9:f8:12:52:8c:b3:ee:fc:cb:6e:c7:bc:28:
81:c8:24:ee:84:d2:39:1e:30:b6:84:89:ec:09:92:78:f6:e4:
60:2b:d9:ca:cf:f8:8f:a5:ee:53:b2:a2:17:74:f7:fd:b3:eb:
05:5d:c0:bf:d4:7c:0b:96:92:90:9a:ea:8a:eb:4e:ed:ea:a7:
ba:ff:f7:a1:aa:05:2b:f4:5e:62:4e:7c:73:1c:29:24:ee:d8:
a5:fd:0f:c4:63:3a:76:5c:96:c1:9e:ef:1f:71:bf:f8:be:cf:
56:6b:66:20:b9:a2:18:a1:6f:5d:2c:86:97:03:44:c4:93:ff:
a7:45:80:e3:a8:10:33:f6:86:7e:bf:37:02:7a:28:4b:61:ad:
6f:6a:ab:c7:09:31:7c:3b:e7:18:d0:31:1d:cc:51:fa:18:cc:
b2:b2:09:a7:c0:6d:9f:4c:c8:81:59:0c:e2:1d:5d:13:d6:26:
ab:8b:d3:27:91:15:64:87:8a:06:7f:7e:d4:e9:3c:63:b0:d4:
1d:12:94:c6
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwODMwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTNmZC1hYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsKaB3IEUCv5HMPPSkl7DR0Ght6c0YLdiX1pE2+5alar7FQR8YmshMzA5even
aM4A4RkHUUHdKN3p7eMnRM9LKDukPHI1ZcMnI21tgbTjs/AZG88pCZdr/7AOeAvv
hNiGEhVyea81KtYCGVrP60v8LwCOd2XGViJ4rt9ija3UmMG+naIljgrajvlMoFC5
6zfQ3s7/omtaFZ2tvVQFudCg+vO/9h2esR8KAqR0NFWS2r9eIZjDqGKcCbV2ZPlI
KdEorYcX0jZKe1rYJx9TaQu/X6juZLNjKOKKprowFo9IA60ZU+smfBjBiUh1XbTv
1YR2+rzto3JyFM9WEmrGF5IAMwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNwRsp2h
+ADPHpqfe9pRPFDsqvT7MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMUIwMzNCMjJC
QTI5MTFFRjhDQzA2OTc3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQJaQMA0GCSqGSIb3DQEBCwUAA4IBAQAnqXv2yovXag5k0Rtg
R73aMXa+Mcz6c/8lNqzyvtvNg7FKl5076N3/KW4p4MgNHJLGPaapmxD0dpa6FNn4
ElKMs+78y27HvCiByCTuhNI5HjC2hInsCZJ49uRgK9nKz/iPpe5TsqIXdPf9s+sF
XcC/1HwLlpKQmuqK607t6qe6//ehqgUr9F5iTnxzHCkk7til/Q/EYzp2XJbBnu8f
cb/4vs9Wa2YguaIYoW9dLIaXA0TEk/+nRYDjqBAz9oZ+vzcCeihLYa1vaqvHCTF8
O+cY0DEdzFH6GMyysgmnwG2fTMiBWQziHV0T1iari9MnkRVkh4oGf37U6TxjsNQd
EpTG
-----END CERTIFICATE-----
Generated at Sat Mar 7 02:25:07 2026 by rpki-client