
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3713C692E4C911EDB49CA55BC4F9AE02.roa
File: 3713C692E4C911EDB49CA55BC4F9AE02.roa (raw, json)
Hash identifier: rYQaWpCX7AnKMw4EtTPZ6W+AyHf/mubnoo9I1V/r8/c=
Subject key identifier: F2:42:67:98:AD:55:7E:A5:51:0B:39:85:81:AA:87:18:E0:8D:85:CF
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1152
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3713C692E4C911EDB49CA55BC4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:39 +0000
ROA not before: Fri 22 May 2026 20:25:39 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 151202
IP address blocks: 2406:840:f0a0::/44 maxlen: 48
2406:840:fe75::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 19:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4434 (0x1152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:39 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbc3-6880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:05:6d:d3:fe:96:9f:80:f8:ea:5e:4b:a7:
39:99:3c:3e:af:fc:b5:25:a4:43:3d:b4:36:10:79:
b2:0e:a6:e3:6e:9d:5d:1b:79:5e:97:32:ca:69:21:
2d:2c:a7:a2:39:10:37:2f:42:49:bb:f5:ea:e1:4e:
34:28:b0:9f:91:f1:83:86:6b:50:d2:c7:49:62:4c:
e0:94:c6:fb:58:10:6b:8a:34:d8:ad:16:34:07:27:
0e:f2:05:8f:d1:4d:53:f8:15:73:0d:18:c3:52:91:
70:a1:1b:de:d7:d7:90:ea:bd:9c:7e:f6:3a:36:a7:
65:7e:e3:3a:ca:28:a0:f4:e9:be:2b:44:44:8a:1d:
84:e7:f2:00:46:9b:98:be:1f:a2:2d:df:8c:e2:fd:
97:be:d1:38:a2:c7:6a:71:08:a6:2e:64:b4:04:27:
e9:38:bb:13:77:84:34:20:4b:a0:28:5a:1d:b2:7f:
cd:48:3e:92:ad:6d:e5:f5:7f:92:b9:51:77:48:59:
86:f0:c1:a8:b0:16:70:27:8e:da:81:3d:5e:4b:71:
07:84:98:02:a2:7d:7f:ea:68:94:73:1e:0e:b5:51:
6a:72:0d:6f:55:39:fd:1a:f1:d6:30:84:f9:24:a0:
c4:cf:4a:2e:19:50:ba:8b:c8:22:51:ad:d4:de:05:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:67:98:AD:55:7E:A5:51:0B:39:85:81:AA:87:18:E0:8D:85:CF
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3713C692E4C911EDB49CA55BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:f0a0::/44
2406:840:fe75::/48
Signature Algorithm: sha256WithRSAEncryption
8f:00:69:ac:ef:3e:4f:27:e8:2c:84:a1:2d:5f:7e:ee:60:2f:
9f:bb:80:73:3f:2d:82:8b:80:b5:28:79:a7:f4:03:92:ab:76:
18:5d:c9:96:56:e7:c8:17:22:10:64:6d:7e:88:a8:46:58:d0:
e6:17:3c:e0:ac:a2:30:4b:b9:3f:3b:97:ce:20:dd:ff:72:43:
6b:5e:26:b7:df:40:66:6e:8f:e5:9c:02:5a:ce:5b:9f:b0:a1:
81:1b:c1:c6:ea:f8:82:40:37:c1:92:da:68:53:d2:1f:c1:31:
7c:e0:35:db:2c:18:32:d0:6b:bb:fd:dd:e5:f4:dd:d6:1a:ba:
80:73:ae:27:61:bf:75:16:36:0e:b5:7a:4e:a4:78:80:7d:de:
c4:fd:48:e6:e3:8d:4e:cd:33:e2:31:17:83:02:47:48:9b:b6:
33:b1:18:6b:82:b4:9d:63:d6:54:cb:2e:ab:45:ea:09:32:c1:
d1:51:74:1a:9c:b0:d5:59:69:7c:2e:dd:d7:23:7a:1c:2e:00:
22:d9:df:a8:a2:43:b3:2b:69:40:8c:ed:95:4e:9e:75:68:e3:
e4:94:fb:d4:43:69:22:8b:78:90:8f:d4:0a:3e:ab:e7:9c:64:
48:a5:50:78:70:58:37:39:a7:3b:86:ce:92:fc:0e:09:82:b3:
84:94:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:00:34 2026 by rpki-client