
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
File: 2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa (raw, json)
Hash identifier: p7r4O4Vf5Ep5mNiSsFV9jC3/scXjMoJzELj9zDheT2k=
Subject key identifier: 59:DD:99:AC:3F:6C:BD:C1:27:1E:D3:A8:0D:8B:0D:EF:E0:01:30:CD
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1024
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:24 +0000
ROA not before: Thu 22 May 2025 20:06:32 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134488
IP address blocks: 2406:840:e800::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4132 (0x1024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:06:32 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a49394-2e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:bb:25:04:4c:5b:14:90:8f:9a:1a:45:e6:
0d:d2:2a:b6:19:bb:65:f8:fa:e7:c3:db:00:79:19:
da:e3:b7:e7:9c:89:02:3d:f0:1b:9c:f1:b1:1b:00:
f7:9c:3b:eb:a0:52:1f:85:ac:d8:a3:70:06:09:46:
d0:14:ae:94:0f:d8:ff:79:c2:9b:0e:f3:c0:d2:18:
ea:b6:2f:3b:a7:7b:9d:54:33:4f:0d:27:b2:e0:50:
12:fb:79:d6:cf:0c:20:eb:a0:c2:19:ff:d0:77:d4:
05:93:26:64:86:af:cc:75:a7:50:6c:3d:67:1e:a7:
c1:ff:71:e3:54:f6:38:b2:9f:a0:75:e2:d7:64:b4:
76:db:59:7a:0e:5c:cb:2c:5f:9d:16:1f:2a:9a:b5:
8d:c5:46:36:02:43:77:0b:1f:69:34:16:63:ff:1c:
9d:c6:28:fd:bf:7b:d8:00:16:a8:fc:16:e4:79:68:
cf:a2:06:95:ca:ca:6f:9f:d1:02:6f:cb:9c:04:26:
3a:fa:82:7f:4d:ed:0c:e0:06:ae:43:6a:65:ee:e4:
b2:72:01:ea:2b:a7:da:c9:5c:8e:3c:62:04:3a:39:
5e:1a:5d:71:10:5a:7d:2f:fb:ad:d6:70:8e:9e:4d:
d7:fb:d8:9b:8b:51:fe:01:ca:6b:2f:5d:4d:04:73:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:99:AC:3F:6C:BD:C1:27:1E:D3:A8:0D:8B:0D:EF:E0:01:30:CD
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e800::/44
Signature Algorithm: sha256WithRSAEncryption
47:4e:3e:28:54:c3:d6:5d:e3:6e:a3:78:41:97:9e:25:06:05:
d5:42:df:4f:3e:b5:f8:a8:6c:51:cf:50:df:c7:93:4a:47:f5:
58:e6:f0:10:77:6b:9e:4d:fa:42:c0:c8:c4:ba:d4:e4:8a:87:
cd:13:ce:ed:61:30:2c:77:53:d7:b0:79:7c:73:e9:b1:3d:87:
c6:87:63:c2:b4:bc:5e:87:ef:a5:af:0a:a8:e5:e5:eb:ea:f6:
fb:c4:2d:e2:40:99:a1:34:60:de:23:15:fe:4f:7a:5d:2d:18:
49:ac:8f:f6:12:4e:be:3e:00:22:72:5c:71:08:df:d5:d2:8c:
27:54:e6:fa:98:c5:a4:20:36:b1:9a:b5:15:09:cf:b1:c6:ca:
3a:9d:4f:e8:9e:e3:54:c1:a5:60:6a:62:d6:cf:47:32:af:17:
5a:3b:22:03:19:fb:3c:d5:6c:40:86:4e:2a:33:94:90:bd:9b:
7c:16:28:db:ef:10:2e:f1:ac:3b:d8:39:fe:df:dc:45:99:01:
a5:f8:0e:2a:0d:b8:b3:17:a2:12:60:66:8b:c7:f4:aa:fb:c4:
e7:de:7d:11:1b:36:fc:cf:cc:cb:ad:d7:7b:ac:18:75:81:6e:
e6:4f:f2:49:cf:77:ff:0a:b3:8e:32:09:2b:f6:0a:c0:a9:a8:
9c:fd:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:15 2026 by rpki-client