
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C7803900ED011EFABFC2A57C4F9AE02.roa
File: 4C7803900ED011EFABFC2A57C4F9AE02.roa (raw, json)
Hash identifier: kTl0QjkQNPvDVgtR8E2aro0nwtn46jvFifv6fW5ysoU=
Subject key identifier: 3B:BF:61:F3:FD:AB:48:83:DE:57:73:90:EF:83:FE:C3:09:49:81:1C
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 109A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C7803900ED011EFABFC2A57C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:31:11 +0000
ROA not before: Thu 22 May 2025 20:08:32 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 7721
IP address blocks: 2406:840:9970::/44 maxlen: 48
2406:840:eed0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4250 (0x109a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:08:32 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493ff-446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:80:96:20:ee:4b:0f:18:af:cb:aa:94:5d:
05:39:de:37:39:84:6a:30:8f:d8:24:ec:9b:71:93:
c8:af:9b:70:34:42:d9:61:92:be:ae:62:02:ad:70:
05:6f:7b:79:40:21:5a:2f:be:59:1b:fc:30:57:7e:
83:57:01:f2:3d:74:1f:3b:bd:5e:15:91:71:3e:24:
75:fb:0d:72:20:91:19:4d:7e:a6:0f:6c:dc:dd:0d:
c3:7d:25:82:71:f6:37:6e:22:3c:32:d4:3a:20:c9:
b3:5b:83:f1:4a:d4:fe:84:65:e8:f3:40:0b:b7:d0:
84:34:b7:2f:79:aa:1a:06:89:e7:b4:c6:98:0d:1e:
cc:19:5a:2e:96:5d:68:21:a1:51:cc:63:3b:14:9e:
35:f0:5c:0d:05:87:c7:01:75:1b:98:2b:0f:8a:a6:
0f:91:59:9f:bf:29:d9:67:0b:11:b4:2d:f4:54:ab:
e0:03:85:6c:fa:46:44:b1:49:7c:8c:6b:b3:87:fc:
00:0c:88:08:fb:47:96:eb:1c:8e:d0:34:57:08:c6:
6d:fa:6f:f8:e9:38:b7:f9:6e:fb:4c:75:df:3f:10:
35:4c:91:d2:25:55:03:91:a4:64:38:0c:9d:af:8b:
5f:ba:47:85:83:9a:95:ee:aa:52:d9:ad:06:dc:e4:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BF:61:F3:FD:AB:48:83:DE:57:73:90:EF:83:FE:C3:09:49:81:1C
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C7803900ED011EFABFC2A57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9970::/44
2406:840:eed0::/44
Signature Algorithm: sha256WithRSAEncryption
aa:f2:f8:6b:4a:5a:0a:78:e2:74:c7:1c:16:41:bc:42:b4:cd:
a9:17:b3:e3:8c:de:73:e3:d3:eb:02:2c:fa:d2:b7:33:44:e3:
d6:e6:5a:32:5d:a7:38:a7:47:06:d0:ff:3e:64:e9:5b:d6:82:
de:20:60:3b:62:4a:93:56:81:2c:f3:b1:f6:04:5e:bc:e5:77:
ff:8a:3e:bb:7c:e1:49:eb:14:ae:4c:55:f8:c5:f9:87:93:61:
00:e7:8f:46:0b:32:27:7a:ca:11:3e:6e:f1:c9:9e:3f:96:b7:
18:0d:e2:25:51:3c:c1:cf:0c:b9:a6:aa:1d:ed:7d:b8:cf:3f:
98:92:c5:ff:6d:4e:88:05:be:3e:c6:95:dc:f6:e4:cf:c5:1c:
86:e7:ba:97:64:00:ee:12:eb:30:20:ee:2a:5d:b0:c7:de:63:
47:cf:9f:16:08:5f:6d:fa:23:29:a6:f1:32:0f:7d:20:4a:3a:
4f:1f:24:7b:6b:b8:4c:c3:19:52:9d:c9:a5:e1:5c:f3:8a:8e:
fe:cc:38:8f:42:bd:ff:24:13:04:9d:f8:1c:63:30:49:32:0f:
83:17:ef:90:48:f8:c8:48:01:d0:7f:7c:1c:39:a7:d5:21:fc:
88:96:29:6a:3b:48:15:82:0f:f9:4c:77:78:d9:5f:78:2d:bd:
38:8b:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:15 2026 by rpki-client