
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa
File: 385FE4729A3011EA97979D38C4F9AE02.roa (raw, json)
Hash identifier: 54MoVF4yU0KV+4RDBespf7JtMRVKctM5MwzilQEjSHY=
Subject key identifier: CA:3D:73:D2:27:C3:53:BB:C4:1C:7A:4F:8C:48:3F:68:77:A0:67:48
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1193
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa
Signing time: Fri 22 May 2026 20:27:55 +0000
ROA not before: Fri 22 May 2026 20:27:55 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 213215
IP address blocks: 2406:840:ece0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 19:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4499 (0x1193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:27:55 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc4b-6505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:07:29:12:3f:28:d4:f6:d0:49:d8:63:45:
f5:5c:a9:88:43:e9:07:09:a1:1f:63:84:bb:9b:7f:
28:cb:cd:d7:ee:d7:da:2a:62:cb:24:c0:c6:00:27:
68:48:cf:09:40:cf:95:34:00:04:02:5f:d3:8f:01:
b3:9b:7c:56:55:28:db:43:5f:6a:89:f8:f2:71:d1:
9d:93:d8:d1:3a:db:52:05:73:4d:c8:11:be:30:51:
e8:36:ef:a7:16:7d:c0:84:52:c9:8d:a0:c7:4b:00:
15:45:df:7a:87:02:8f:f3:9a:78:0f:b7:ff:a1:b7:
75:89:5c:5d:5b:62:36:66:76:f8:12:d5:5a:e7:c8:
4a:3a:be:19:e4:72:e5:7b:d2:82:3a:0e:01:b6:a1:
63:6f:71:04:28:c6:e1:6d:d6:16:6c:db:80:e8:f7:
5a:0b:82:97:aa:9a:c6:ad:d0:c7:e1:45:86:df:45:
1b:15:82:76:25:e8:af:e4:6c:85:6a:2a:5a:12:6e:
fb:50:63:b1:b3:ea:66:76:29:a3:ae:a0:55:28:54:
2a:1f:dd:f7:12:5e:02:d5:69:d3:92:e2:e2:b3:13:
84:4e:a0:00:3a:72:46:05:6c:40:4e:95:4a:97:10:
9b:4d:d2:63:58:cf:59:3e:e0:6c:93:a1:11:a9:23:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:73:D2:27:C3:53:BB:C4:1C:7A:4F:8C:48:3F:68:77:A0:67:48
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:ece0::/44
Signature Algorithm: sha256WithRSAEncryption
6c:0c:a6:c5:49:b4:b0:28:33:7b:72:bc:52:57:9d:0f:20:57:
c2:0f:8e:a8:42:1f:ac:0c:c0:39:20:10:5a:75:e0:3f:59:75:
82:e2:7e:63:f4:4c:38:9d:93:8a:55:d1:95:5f:6d:34:17:cc:
9e:89:b1:18:5b:9f:81:86:37:56:b9:6d:58:2d:d3:f8:9b:62:
ea:88:08:ca:93:85:3f:43:9d:83:47:10:63:88:1c:40:38:55:
db:5c:51:10:17:ad:87:36:f0:8b:f0:77:6b:89:bf:fe:8f:f2:
6c:e3:66:17:74:d0:2a:14:dc:27:37:94:9b:f5:63:11:67:d7:
29:34:d9:ee:86:53:15:70:df:31:2b:e0:5b:af:83:f7:87:a1:
c6:9a:dc:50:d3:1a:43:09:73:9c:a6:32:3a:df:5d:7d:42:6e:
45:75:04:f9:7b:88:f7:53:b7:b3:6b:e4:a7:0e:ae:33:24:b3:
64:5e:06:47:67:46:4f:d9:f4:62:84:79:72:ef:db:dd:89:df:
ff:c0:79:e1:5b:c2:28:42:a3:c3:68:8c:cf:c7:f2:44:f0:f2:
f9:12:ba:46:fd:07:42:ff:7c:5f:ef:89:e6:5b:d0:2d:be:58:
a3:c6:9a:12:90:2d:bf:9f:0b:f9:01:65:f6:fa:fa:48:12:a3:
11:6a:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:09:05 2026 by rpki-client