
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1CF2F758E04711EAAA35044CC4F9AE02.roa
File: 1CF2F758E04711EAAA35044CC4F9AE02.roa (raw, json)
Hash identifier: MZriRnEuU8XXVgwC5s0MqCC2iy+XQFVUJ16SGyqOiT0=
Subject key identifier: 57:E7:65:52:83:EF:E2:34:7A:AD:F8:54:63:E5:9C:A3:7B:84:64:B5
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 112B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1CF2F758E04711EAAA35044CC4F9AE02.roa
Signing time: Fri 22 May 2026 20:24:28 +0000
ROA not before: Fri 22 May 2026 20:24:28 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137835
IP address blocks: 2406:840:f440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:24:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bb7b-02dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:04:ce:e2:3f:be:50:9a:00:f2:0a:c7:cc:
d4:d2:74:3b:b6:0b:c9:0d:5f:aa:9c:62:0b:b8:90:
00:c4:23:ed:59:53:07:ba:b3:3e:12:39:78:6a:6a:
9d:30:9c:fc:00:74:73:73:70:74:9f:17:56:54:31:
1b:74:e6:c6:4b:f4:84:f4:4b:58:72:c2:b0:e5:a3:
79:ab:08:e6:b6:6e:43:6c:78:b0:74:19:17:f2:50:
bc:70:71:57:57:9e:56:33:5d:f1:32:31:e0:4c:09:
0e:f7:3d:6e:34:b4:94:b0:ca:6c:93:cb:b1:cf:24:
d3:1e:41:a7:56:59:92:82:51:aa:74:1c:7f:31:cd:
36:12:cb:15:90:4c:26:04:77:b6:35:c5:5c:89:c9:
5d:1b:c0:11:3e:aa:6e:ce:80:f8:ae:df:8c:03:12:
b7:90:a7:6c:df:8a:5b:97:60:35:dc:33:1e:96:15:
d9:b9:ba:e2:a9:9f:27:99:ba:4d:15:26:3b:cd:bc:
19:33:74:74:2b:4e:31:ce:2f:ff:d2:91:13:4e:b9:
c4:99:da:b0:2c:11:7b:6a:d2:49:af:f0:e2:95:9f:
af:c2:49:55:18:00:f1:ca:42:a7:58:22:de:2d:48:
fe:63:b3:14:65:33:f7:51:eb:18:61:e6:b6:50:be:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E7:65:52:83:EF:E2:34:7A:AD:F8:54:63:E5:9C:A3:7B:84:64:B5
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1CF2F758E04711EAAA35044CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:f440::/44
Signature Algorithm: sha256WithRSAEncryption
a9:e2:da:cc:cc:6f:5c:d6:4a:4e:db:4b:cd:47:26:03:5d:77:
00:96:cf:f9:33:8d:a3:47:79:6d:25:25:d2:65:2a:c0:23:a8:
a5:eb:42:ff:ba:26:25:dd:2c:5f:dc:90:32:fe:42:fc:c1:20:
43:c2:b2:9c:eb:30:9b:25:ed:17:b7:2d:cc:10:d1:bd:f3:25:
c3:dc:7c:8b:4e:c5:39:c6:cf:dd:b3:02:04:65:8a:eb:c8:73:
a0:85:7a:5b:8c:4e:ff:dc:3b:a4:1f:54:50:98:c4:34:05:57:
b7:1b:a7:92:f9:bb:6a:9a:a4:97:4c:3e:d7:4a:be:0f:a0:6c:
2c:24:2d:db:b3:03:1b:c6:28:ea:af:9b:12:6c:eb:eb:97:af:
d2:c7:3e:c0:a4:1d:9c:22:30:e3:f4:11:27:0c:0a:5c:5f:40:
0f:80:1f:93:bd:e3:e0:73:20:0f:42:6d:ed:00:e9:15:4e:9b:
98:00:79:9e:76:49:27:4b:a9:1c:8b:9d:ee:45:d6:4c:b5:cc:
a7:2a:95:38:79:70:e6:2f:35:2d:4d:06:af:1c:32:07:4b:8c:
86:33:01:ef:c4:c9:cd:e2:ee:6e:69:7c:5c:ee:c9:de:58:2b:
27:1a:bf:d0:38:80:a4:cb:09:56:94:28:74:1b:31:73:67:e7:
28:50:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:07 2026 by rpki-client