
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/21A658D2BA5311EEB6DF2E4BC4F9AE02.roa
File: 21A658D2BA5311EEB6DF2E4BC4F9AE02.roa (raw, json)
Hash identifier: /qDUNSsKHdaGT3hjQ+TdlFyIG+aSfBJxZa8Q/n9CJDE=
Subject key identifier: 19:34:B6:9D:20:62:B0:CD:39:CC:80:B7:4D:09:C6:2E:EA:26:72:C2
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1199
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/21A658D2BA5311EEB6DF2E4BC4F9AE02.roa
Signing time: Fri 22 May 2026 20:28:06 +0000
ROA not before: Fri 22 May 2026 20:28:05 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 216056
IP address blocks: 2406:840:eef0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 02 Jun 2026 19:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4505 (0x1199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:28:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc55-7ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:83:21:32:e8:29:3b:37:9e:19:f9:97:45:
cf:28:2f:2f:3f:56:b9:aa:2c:ca:bd:f9:36:be:c6:
7b:c9:00:5a:06:7f:ed:d6:d5:a9:5d:22:49:10:f5:
f2:9b:97:c1:4f:f0:09:08:95:c5:c9:02:90:c3:11:
38:49:0f:20:11:55:60:72:db:4c:f5:06:12:db:a6:
31:4c:e4:c6:f1:65:f0:6f:c1:79:47:f5:2c:eb:88:
9c:8f:1f:07:45:3f:69:9d:80:1e:ad:ce:a4:ee:be:
31:8d:73:4b:01:fd:d8:6d:44:01:ce:a7:d3:46:19:
b9:f9:64:c7:7b:31:e1:c3:4a:33:b9:56:54:2e:8b:
49:bb:64:c2:32:90:08:fc:cc:ba:47:48:3c:e0:1e:
14:98:19:f7:b0:f1:a8:51:23:df:95:42:4f:ec:eb:
58:47:07:df:e8:22:f8:f5:22:af:20:7a:c3:1c:9d:
51:85:ca:0f:9b:fa:7e:ed:73:1f:45:04:57:88:a2:
3e:e9:50:30:62:3e:72:02:a3:ae:c0:b0:df:98:48:
4a:b4:26:d0:66:c2:d1:9f:5e:cc:e4:dc:9e:45:09:
df:c4:e2:ef:75:99:20:36:9b:ce:a8:9c:a1:3c:70:
a8:82:b8:3d:75:0c:f0:84:b5:86:65:3e:52:4c:01:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:B6:9D:20:62:B0:CD:39:CC:80:B7:4D:09:C6:2E:EA:26:72:C2
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/21A658D2BA5311EEB6DF2E4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:eef0::/44
Signature Algorithm: sha256WithRSAEncryption
34:0e:e5:94:d7:83:ae:c9:c7:fb:c8:6f:f7:ea:56:3c:11:24:
03:0e:be:29:f1:14:ac:91:59:5d:1e:bd:86:9f:c5:94:bb:4c:
4b:2c:3d:91:c2:6e:c0:26:58:f0:b6:43:79:07:61:20:2d:fa:
2b:99:33:67:78:b1:ce:29:7b:e3:31:e3:ea:1a:fa:ac:78:9c:
87:f8:06:bc:3b:e4:e5:e3:f2:65:28:aa:11:0e:bd:27:e1:1e:
8f:3d:cb:0b:54:ac:40:48:50:0f:59:c6:38:c2:5c:ee:53:db:
1f:a9:70:98:b8:20:f7:ed:89:0b:f7:b0:b2:13:ff:b3:e5:43:
8a:7b:08:02:a3:59:a3:57:94:e0:80:61:7d:0b:2c:a0:51:97:
bd:d3:23:c0:61:5c:ae:46:69:ba:6a:87:30:9b:1a:8a:f0:d9:
25:f0:de:fe:43:87:4b:1f:83:e7:f0:9c:00:ee:91:22:a4:63:
98:9b:c4:53:51:ea:0b:a3:8e:b4:b5:1e:e5:8c:4a:16:34:c2:
3c:55:f4:c0:14:c4:d2:43:9d:75:ca:bc:7c:9b:22:24:e6:c4:
0c:68:58:24:33:e9:22:98:62:7e:c5:5f:2e:f0:23:dc:d4:bb:
df:0b:ca:80:16:cc:5d:84:8b:21:74:6c:88:ea:39:de:a3:6f:
5e:b2:a0:95
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyODA1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmM1NS03ZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYWDITLoKTs3nhn5l0XPKC8vP1a5qizKvfk2vsZ7yQBaBn/t1tWpXSJJEPXy
m5fBT/AJCJXFyQKQwxE4SQ8gEVVgcttM9QYS26YxTOTG8WXwb8F5R/Us64icjx8H
RT9pnYAerc6k7r4xjXNLAf3YbUQBzqfTRhm5+WTHezHhw0ozuVZULotJu2TCMpAI
/My6R0g84B4UmBn3sPGoUSPflUJP7OtYRwff6CL49SKvIHrDHJ1RhcoPm/p+7XMf
RQRXiKI+6VAwYj5yAqOuwLDfmEhKtCbQZsLRn17M5NyeRQnfxOLvdZkgNpvOqJyh
PHCogrg9dQzwhLWGZT5STAE9zQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBk0tp0g
YrDNOcyAt00Jxi7qJnLCMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMjFBNjU4RDJC
QTUzMTFFRUI2REYyRTRCQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQO7wMA0GCSqGSIb3DQEBCwUAA4IBAQA0DuWU14Ouycf7yG/3
6lY8ESQDDr4p8RSskVldHr2Gn8WUu0xLLD2Rwm7AJljwtkN5B2EgLformTNneLHO
KXvjMePqGvqseJyH+Aa8O+Tl4/JlKKoRDr0n4R6PPcsLVKxASFAPWcY4wlzuU9sf
qXCYuCD37YkL97CyE/+z5UOKewgCo1mjV5TggGF9CyygUZe90yPAYVyuRmm6aocw
mxqK8Nkl8N7+Q4dLH4Pn8JwA7pEipGOYm8RTUeoLo460tR7ljEoWNMI8VfTAFMTS
Q511yrx8myIk5sQMaFgkM+kimGJ+xV8u8CPc1LvfC8qAFsxdhIshdGyI6jneo29e
sqCV
-----END CERTIFICATE-----
Generated at Wed May 27 13:31:28 2026 by rpki-client