
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4F52997C559311EFA7997A57C4F9AE02.roa
File: 4F52997C559311EFA7997A57C4F9AE02.roa (raw, json)
Hash identifier: LPIu/XOolu65BpqbONk4TyVOGZhvqp79Tot637AhJ0k=
Subject key identifier: A9:B3:37:96:6A:98:B7:54:2F:F9:FE:C4:FB:2B:03:7B:E0:72:CB:2E
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1070
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4F52997C559311EFA7997A57C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:32 +0000
ROA not before: Thu 22 May 2025 20:07:45 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153195
IP address blocks: 2406:840:fe9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4208 (0x1070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493d7-310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:28:a3:f2:c7:da:8c:1d:fd:82:e9:cc:f1:
b5:b8:d7:07:ea:a1:bf:73:89:bb:0c:d6:18:a6:20:
8c:4f:03:72:40:73:5a:7a:b8:e3:0c:70:1a:2e:00:
10:41:e9:e6:0e:3a:5c:e0:28:4a:44:c3:3a:36:0d:
b8:79:9b:72:9c:78:10:35:cb:6b:08:5c:17:d1:32:
45:17:f9:45:5b:6b:a9:0a:e6:73:59:91:d2:35:af:
68:cf:b4:d3:39:75:12:ec:2c:62:d7:7e:8b:30:4e:
e4:49:d2:27:ca:74:1a:f4:6d:e6:f7:18:5e:03:aa:
8f:92:40:42:e7:42:a3:e5:98:cc:52:17:3d:62:90:
25:db:13:b6:d9:e1:24:b6:a6:18:36:38:21:3a:4c:
63:41:3b:3f:65:bb:69:0a:2f:9a:96:00:8b:66:0f:
da:89:1f:31:8a:2c:24:1c:3d:d5:ab:bc:50:98:0a:
3b:78:58:7c:49:c7:e1:ef:26:30:52:36:f2:ee:7d:
6e:ae:30:30:a8:47:5a:27:6b:14:ba:bb:60:9b:4e:
2e:6b:5b:2b:67:cc:be:bc:f3:db:7f:44:54:ab:d2:
f7:e7:a1:8d:fb:01:97:86:11:b3:ec:c8:74:78:fd:
ce:0a:54:3b:42:0e:ba:f9:2b:38:ee:33:0d:05:f7:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:37:96:6A:98:B7:54:2F:F9:FE:C4:FB:2B:03:7B:E0:72:CB:2E
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4F52997C559311EFA7997A57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fe9c::/48
Signature Algorithm: sha256WithRSAEncryption
83:80:7e:33:0c:d9:b4:41:0f:64:97:53:aa:6c:b5:25:b8:48:
4c:c6:48:d8:6c:3f:9a:71:67:1b:de:e5:90:f7:67:06:e6:69:
79:e7:8d:20:46:e0:ca:ea:d4:79:c0:29:5b:33:0f:6c:22:5e:
bf:81:e9:9f:21:cc:dd:75:3d:41:e2:7e:6e:4e:8d:36:f1:a8:
be:f8:ea:94:3b:e4:97:75:bd:52:99:16:f3:34:39:58:54:43:
c6:fd:13:88:ca:df:01:e7:a6:2e:0a:19:cd:b7:0a:36:fa:56:
65:6f:81:63:1b:24:ee:cb:99:33:10:95:2a:dc:30:cd:a2:98:
ea:fd:9e:4d:97:f5:79:1a:66:7a:e3:a5:7d:9b:62:86:cc:d3:
05:fb:18:89:9a:6f:92:12:64:4d:66:ae:d8:1b:a0:00:4b:de:
40:d3:7c:a2:ce:0a:98:66:70:c8:24:6b:71:23:49:3c:96:4c:
30:01:56:cf:bf:34:24:f5:9b:36:ea:ff:c0:08:c3:4d:ae:97:
dc:ba:f9:4a:20:8e:3c:2e:fd:91:6b:01:f5:f8:1e:1c:a8:3c:
9c:9b:54:23:af:14:4a:02:a2:68:87:8f:d7:51:0f:ea:1f:ac:
b8:1d:a4:96:b5:69:5d:d0:70:4b:20:28:29:0c:36:6d:2f:c1:
30:36:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:20 2026 by rpki-client