
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/41B221EC862211EA87D9337EC4F9AE02.roa
File: 41B221EC862211EA87D9337EC4F9AE02.roa (raw, json)
Hash identifier: A/4vKHSt1UTOFnw9RZhZQYhWywGNvr7sVpp5xybJE50=
Subject key identifier: C8:DA:B4:89:E0:4C:17:70:31:C5:39:34:4A:12:D3:64:66:69:B1:FF
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 11A3
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/41B221EC862211EA87D9337EC4F9AE02.roa
Signing time: Fri 22 May 2026 20:28:24 +0000
ROA not before: Fri 22 May 2026 20:28:24 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 4842
IP address blocks: 2406:840:f990::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4515 (0x11a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:28:24 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc68-a7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:db:af:02:bd:76:1f:22:7a:ed:2c:07:62:
ea:d8:2c:8e:c8:00:94:32:82:0c:95:16:c2:28:3a:
f5:42:67:b2:c7:12:41:a7:01:5a:dd:97:96:1c:7a:
63:cb:70:89:e5:f7:4a:f4:43:36:fc:32:22:ab:72:
6d:08:6b:ac:52:60:c2:d3:35:c3:c5:f2:e2:5e:c4:
0b:fe:da:3c:f7:c2:0f:4b:5c:d4:72:44:0c:6c:86:
ea:3f:df:ee:28:85:f6:55:d6:e9:f3:f8:a2:b7:f0:
3c:86:75:6e:7b:a8:cc:ab:67:be:ef:c7:74:c0:6d:
e6:a3:85:06:6c:62:97:63:8a:26:f1:c5:46:42:21:
76:bf:e2:8e:f5:c3:8e:c2:a7:26:ea:37:5e:e2:e8:
b0:f4:3b:3c:ec:90:42:0d:d5:95:dc:4b:64:eb:83:
db:eb:68:3e:f1:01:65:4e:3c:e5:a4:a1:7b:f3:c5:
18:7a:de:8f:14:fd:a2:67:ef:e9:d7:10:17:04:01:
50:20:45:2c:61:e2:51:bf:92:f1:ee:e0:50:c1:29:
9f:67:1c:c6:05:6a:db:c0:f5:dd:aa:74:7a:ab:7c:
95:56:43:e5:4a:e2:60:a8:31:0b:c9:00:32:ec:2a:
8a:4c:d3:88:dc:e3:8f:b7:a7:a6:18:48:54:a1:b0:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DA:B4:89:E0:4C:17:70:31:C5:39:34:4A:12:D3:64:66:69:B1:FF
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/41B221EC862211EA87D9337EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:f990::/44
Signature Algorithm: sha256WithRSAEncryption
54:f2:20:7f:68:5d:18:35:1f:3a:a3:3d:c7:12:5b:85:0f:25:
f8:a7:23:67:cb:be:7b:39:6c:8a:02:26:8b:65:a6:02:0c:4d:
a4:fc:70:60:71:5b:c4:94:bb:9a:49:96:f3:38:bb:b3:2f:75:
c4:5b:22:42:fc:10:1a:be:2d:3b:37:6f:c7:c3:58:a5:34:14:
b8:8a:c3:fb:ec:cd:fd:25:a6:54:24:f4:0d:69:aa:3d:ad:72:
bb:4a:5f:70:77:ce:7b:d8:1c:4e:03:c7:60:1e:79:d5:85:99:
f8:fe:d0:44:da:b6:b4:7f:04:74:21:77:3f:37:e7:49:ee:e9:
67:b8:95:3c:d5:6f:03:04:11:cc:97:8d:96:02:b6:98:8c:c1:
7d:50:67:5e:7b:57:b0:f5:da:f4:d9:29:54:db:d6:0e:16:ca:
78:de:3e:7a:15:97:92:9c:7b:df:6c:e4:8b:c1:80:ea:bf:f3:
99:65:97:4d:27:43:f6:51:17:b0:89:83:65:ef:2c:2a:72:a8:
e0:1b:a0:08:5e:67:84:14:9a:aa:3c:04:e3:0c:ba:aa:90:fe:
3d:b7:74:5d:59:35:b6:93:ec:de:6d:6b:7e:14:8a:6c:d1:d8:
79:13:2b:0d:a3:c2:dc:af:31:52:e0:65:03:0d:f4:da:27:58:
76:ff:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:33 2026 by rpki-client