
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/207389BE7C1A11EBABA86F44C4F9AE02.roa
File: 207389BE7C1A11EBABA86F44C4F9AE02.roa (raw, json)
Hash identifier: zaQK7byxcrhx6yIwz5cmuvY9b/t1ZueSfi9c4ga1h94=
Subject key identifier: 4D:2F:E4:E5:0D:9A:AC:5A:23:04:76:DE:DD:40:56:80:5C:D7:A3:F3
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 113C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/207389BE7C1A11EBABA86F44C4F9AE02.roa
Signing time: Fri 22 May 2026 20:24:58 +0000
ROA not before: Fri 22 May 2026 20:24:58 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 141237
IP address blocks: 2406:840:e1e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4412 (0x113c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:24:58 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bb9a-9161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:ec:37:62:a5:90:b5:48:d4:f3:bf:83:5a:
ba:6a:59:5c:28:bf:d2:6a:94:11:e5:3d:eb:48:64:
1d:44:b5:6b:c1:14:af:39:27:32:0a:0b:19:eb:8e:
88:2c:e6:aa:62:f9:0a:34:1a:71:6f:a3:7b:98:ea:
97:31:ee:28:ac:11:db:72:96:48:48:f7:46:22:3c:
7d:15:6c:bf:f4:d5:ba:4a:54:6f:8b:30:92:30:ad:
28:9e:c1:56:8c:01:21:30:ac:69:2f:a4:4d:f8:40:
94:7f:fb:cd:8b:32:de:b8:32:cf:0d:66:a6:c0:e5:
b9:72:ee:3e:3a:3f:f8:eb:6a:a6:42:ef:3a:97:1b:
1b:20:e7:98:c0:65:cb:81:fe:c6:98:20:48:42:57:
66:fa:f9:9c:33:d5:96:23:12:75:32:41:52:12:7d:
72:75:56:d0:62:c3:52:e5:43:29:fc:1a:f2:88:1d:
c8:b0:fa:8f:7c:97:e8:dd:59:f8:04:1e:24:fb:d9:
bb:22:07:29:be:b3:e5:14:41:e0:d6:4f:19:7b:68:
c3:1a:81:cc:34:ca:bc:c5:a7:49:43:3c:ec:b9:cd:
6e:8c:a0:0a:e4:72:f0:5b:6b:a8:03:8a:05:c0:23:
bc:c4:0b:a8:72:47:ef:db:f9:35:e5:74:6b:05:f6:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:E4:E5:0D:9A:AC:5A:23:04:76:DE:DD:40:56:80:5C:D7:A3:F3
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/207389BE7C1A11EBABA86F44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e1e0::/44
Signature Algorithm: sha256WithRSAEncryption
35:c3:c5:5e:1d:75:68:5b:cd:56:49:8d:7b:f0:9f:ee:9c:ce:
04:5d:eb:50:e2:d7:f1:cd:26:6b:b1:d1:67:60:a2:a1:1a:f7:
7e:89:8c:15:17:83:15:57:8c:04:82:f8:b0:d1:8b:52:09:02:
af:9b:f3:ee:01:e5:c3:dd:99:e7:ef:b3:a4:64:1a:40:f6:49:
ab:a2:dc:a8:62:a9:d7:32:35:c4:04:8c:97:05:9f:ff:72:ab:
0e:d4:c2:15:03:93:6d:e3:28:13:25:7a:67:3d:18:43:10:3e:
c0:20:51:59:07:89:ed:2c:95:3e:0d:47:7c:c0:56:fd:4f:03:
34:c3:78:a5:d5:d8:11:6a:5a:90:26:e8:4f:41:24:98:1d:5f:
2e:c5:b8:59:16:1d:d2:9b:b4:b8:b7:6c:d1:ed:f8:67:3d:98:
e2:76:92:13:e4:ba:1f:53:59:28:e0:64:aa:6b:e7:8e:88:f5:
e7:aa:e4:ca:fd:b4:80:b1:f3:aa:d6:de:fc:52:e5:b9:5b:1b:
da:ef:bc:5b:a6:05:16:d5:f9:43:17:b0:5f:2a:d3:26:2d:4e:
a7:ac:35:35:a4:11:93:f8:d8:39:65:85:dc:c4:82:07:85:52:
61:9a:e1:af:99:ad:b0:d9:bf:ff:71:e5:b5:66:90:5e:d1:a5:
5b:ed:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:10 2026 by rpki-client