
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
File: 2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa (raw, json)
Hash identifier: 7ZkC7O2ipojxnjrZ7aYtrQbS9Cs0/ANwTc3SjIO+nkU=
Subject key identifier: 1B:43:D6:FA:1B:99:01:5A:6F:C8:C7:61:95:28:CC:B8:C8:9C:A8:03
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1126
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
Signing time: Fri 22 May 2026 20:24:19 +0000
ROA not before: Fri 22 May 2026 20:24:19 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134488
IP address blocks: 2406:840:e800::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4390 (0x1126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:24:19 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bb73-968a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:69:c4:ff:eb:dd:3a:b2:6b:84:18:ea:60:
b4:12:d2:24:e7:ae:d4:05:c3:5b:2b:eb:b0:86:4d:
65:c6:ae:ae:6a:c5:63:e8:90:07:96:9a:29:d3:95:
f1:c5:11:90:d0:88:14:98:82:9a:ce:9c:38:5d:95:
6f:eb:b0:cc:d2:b9:f0:b0:a5:fb:53:93:73:96:17:
a9:cc:54:fa:30:49:f3:74:8e:94:8d:0a:3a:a5:3e:
16:9e:d5:f3:c4:22:b5:53:ba:e4:21:4c:84:86:c8:
cd:00:9a:03:b8:ad:27:44:df:58:77:1c:c2:44:ee:
86:22:27:4d:cb:b4:08:79:79:ac:4e:32:12:48:4c:
4f:f0:b2:04:42:69:7d:80:1d:86:92:53:a2:d3:aa:
80:40:b0:9b:1c:8d:20:f3:fb:a7:81:96:a5:5a:98:
01:0c:2d:4e:e5:97:fb:99:47:11:a5:95:d2:9e:1f:
00:07:24:42:ba:86:45:05:54:3e:6f:23:fb:65:d4:
17:d6:ea:bb:dd:d0:29:cb:7c:b6:3c:b8:a0:aa:52:
b4:91:b6:c4:4e:de:01:28:77:ed:b2:b0:52:74:08:
fc:da:38:7f:ad:25:ee:bd:bc:84:78:8f:7d:2a:2c:
5c:9c:06:e4:97:f8:94:12:77:f0:d7:e7:6b:ea:e3:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:D6:FA:1B:99:01:5A:6F:C8:C7:61:95:28:CC:B8:C8:9C:A8:03
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e800::/44
Signature Algorithm: sha256WithRSAEncryption
a6:bd:25:88:3b:88:17:4b:8e:25:bb:ee:bb:7a:02:f3:fe:f9:
c3:ae:75:1b:52:2f:09:c0:74:e5:7c:67:ad:07:62:9d:19:36:
de:58:fd:da:31:02:70:56:1e:f7:17:98:55:a8:5c:1f:d7:da:
f7:14:b8:79:2f:48:89:09:b2:82:54:fb:56:c4:7b:55:47:73:
4a:b3:78:c2:7d:b1:9d:2c:ed:e3:50:54:57:c0:b5:19:6a:a3:
a8:2a:5d:0d:aa:38:96:c9:c0:3e:93:5c:3b:2f:62:be:f0:54:
10:f4:77:53:7c:2e:72:71:67:ea:a0:67:da:6a:3b:d2:e1:37:
e9:b1:10:3d:4b:02:cf:5a:d4:35:17:f1:81:70:67:e8:5c:b0:
27:ed:1f:0b:ac:09:52:22:92:85:47:c2:cd:56:9d:8d:5c:e6:
22:0d:7d:31:4f:5e:04:d8:66:5c:ee:22:8a:a7:2c:de:9a:86:
a7:50:4f:7a:11:46:0d:52:17:7e:33:0b:a2:86:93:92:bc:05:
e2:18:64:5f:72:c2:30:ee:42:8e:b2:dc:29:4c:00:c2:73:fe:
76:c3:cc:20:74:e7:96:c7:d3:ba:11:5e:3c:75:0a:7d:66:0b:
17:aa:15:98:4f:ac:2e:ca:df:1d:6a:12:a3:66:46:b7:c0:51:
02:6a:bf:e3
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNDE5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmI3My05NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2NpxP/r3Tqya4QY6mC0EtIk567UBcNbK+uwhk1lxq6uasVj6JAHlpop05Xx
xRGQ0IgUmIKazpw4XZVv67DM0rnwsKX7U5NzlhepzFT6MEnzdI6UjQo6pT4WntXz
xCK1U7rkIUyEhsjNAJoDuK0nRN9YdxzCRO6GIidNy7QIeXmsTjISSExP8LIEQml9
gB2GklOi06qAQLCbHI0g8/ungZalWpgBDC1O5Zf7mUcRpZXSnh8AByRCuoZFBVQ+
byP7ZdQX1uq73dApy3y2PLigqlK0kbbETt4BKHftsrBSdAj82jh/rSXuvbyEeI99
KixcnAbkl/iUEnfw1+dr6uORNQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBtD1vob
mQFab8jHYZUozLjInKgDMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMkFFNDU5REM0
QTVCMTFFQkI3QjRCQTE4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQOgAMA0GCSqGSIb3DQEBCwUAA4IBAQCmvSWIO4gXS44lu+67
egLz/vnDrnUbUi8JwHTlfGetB2KdGTbeWP3aMQJwVh73F5hVqFwf19r3FLh5L0iJ
CbKCVPtWxHtVR3NKs3jCfbGdLO3jUFRXwLUZaqOoKl0NqjiWycA+k1w7L2K+8FQQ
9HdTfC5ycWfqoGfaajvS4TfpsRA9SwLPWtQ1F/GBcGfoXLAn7R8LrAlSIpKFR8LN
Vp2NXOYiDX0xT14E2GZc7iKKpyzemoanUE96EUYNUhd+MwuihpOSvAXiGGRfcsIw
7kKOstwpTADCc/52w8wgdOeWx9O6EV48dQp9ZgsXqhWYT6wuyt8dahKjZka3wFEC
ar/j
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:26 2026 by rpki-client