
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
File: 567C85C0B34111F09BB3B84DC4F9AE02.roa (raw, json)
Hash identifier: A/hMDy4/Q25pYERZr0/x4bMaaCfAwnC+EKZAl13VH9I=
Subject key identifier: 2F:E8:B7:00:27:DF:69:56:9A:8F:4F:6A:64:12:89:78:F7:F6:4C:20
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1129
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
Signing time: Fri 22 May 2026 20:24:24 +0000
ROA not before: Fri 22 May 2026 20:24:24 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137264
IP address blocks: 2406:840:fcf0::/44 maxlen: 48
2406:840:fedd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4393 (0x1129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:24:24 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bb78-3729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:7f:9c:27:e9:5a:87:32:d1:1b:0c:89:48:
e1:46:f2:b3:3e:b7:a6:c1:f7:83:7f:e2:36:72:93:
6a:15:8f:41:14:23:20:5e:a9:f4:95:2e:a4:15:92:
9c:3c:48:e8:f8:6f:e4:3b:a9:5b:74:0f:40:b7:da:
e5:ed:ab:7b:b7:7c:08:34:0b:8b:bc:4d:67:92:d7:
6b:ba:a6:ac:25:a2:52:d2:da:42:5c:dc:0c:4c:e0:
94:af:3f:39:a0:24:14:4f:9d:19:72:84:e0:ad:6d:
4c:ef:19:f0:64:2c:15:8d:dd:38:05:03:6c:68:c7:
57:8c:c6:25:65:51:b1:09:2b:90:45:bb:1d:fa:29:
5c:96:f0:f7:0f:d7:31:55:66:bd:e1:5f:0a:8b:5e:
e6:71:08:9c:8c:de:2f:d6:01:eb:70:fa:f1:87:c6:
b9:01:f8:92:aa:62:0f:1f:86:27:2b:c3:85:c6:77:
f3:2d:12:3e:f0:70:e3:37:21:05:1b:2b:59:23:ab:
10:01:83:7c:b9:57:9e:ff:ea:a7:ce:8e:92:fd:62:
95:89:88:45:0a:99:94:f9:28:42:98:dc:fb:69:b6:
b4:b5:d1:22:aa:35:9c:a0:e1:b7:bf:6c:5c:dc:f9:
3c:c3:57:18:67:79:8e:a2:ee:4d:de:27:93:89:71:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:B7:00:27:DF:69:56:9A:8F:4F:6A:64:12:89:78:F7:F6:4C:20
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fcf0::/44
2406:840:fedd::/48
Signature Algorithm: sha256WithRSAEncryption
45:6a:f0:5f:bf:a1:e8:b9:99:61:6b:03:07:b0:d0:a5:d4:cb:
c3:71:60:8f:c0:6c:a6:f5:da:f3:88:c2:58:bf:28:62:e2:40:
3a:2c:44:52:43:52:aa:61:b1:65:7c:41:95:fb:ac:96:60:cd:
b1:10:2f:73:63:65:e1:50:0e:97:b7:51:a7:65:16:9b:b0:cd:
cb:3d:c4:fe:b6:71:ae:2b:70:dd:7f:26:76:15:31:34:08:6c:
6f:62:7b:30:cf:35:55:b4:35:12:6f:c6:1e:95:69:2a:26:28:
1d:c4:36:0b:5b:fd:da:c5:ee:81:06:85:4e:dc:a3:ec:d5:30:
0c:fa:35:3e:50:5c:a4:8c:1e:9f:a5:33:31:61:88:ed:25:3e:
42:57:f0:51:5f:f9:f5:65:93:90:37:18:47:a8:be:89:16:4c:
0a:51:10:fa:4f:10:5a:f3:de:d6:9e:07:c6:4f:f1:5d:b4:fd:
bc:a2:dc:44:85:b2:bb:34:f1:17:62:2c:e5:94:2c:cd:ea:6b:
a1:91:a0:2b:2a:f0:90:2d:d5:58:97:de:c1:af:4a:c2:96:d9:
ac:b7:79:df:e7:7a:6a:3f:e6:4c:a6:65:92:38:66:2b:25:44:
34:40:ca:c6:2f:24:19:a3:df:83:94:e8:6b:35:56:a3:bd:4e:
d6:e2:17:d1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICESkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNDI0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmI3OC0zNzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiMB/nCfpWocy0RsMiUjhRvKzPremwfeDf+I2cpNqFY9BFCMgXqn0lS6kFZKc
PEjo+G/kO6lbdA9At9rl7at7t3wINAuLvE1nktdruqasJaJS0tpCXNwMTOCUrz85
oCQUT50ZcoTgrW1M7xnwZCwVjd04BQNsaMdXjMYlZVGxCSuQRbsd+ilclvD3D9cx
VWa94V8Ki17mcQicjN4v1gHrcPrxh8a5AfiSqmIPH4YnK8OFxnfzLRI+8HDjNyEF
GytZI6sQAYN8uVee/+qnzo6S/WKViYhFCpmU+ShCmNz7aba0tdEiqjWcoOG3v2xc
3Pk8w1cYZ3mOou5N3ieTiXEaOwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFC/otwAn
32lWmo9PamQSiXj39kwgMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNTY3Qzg1QzBC
MzQxMTFGMDlCQjNCODREQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAYIQPzwAwcAJAYIQP7dMA0GCSqGSIb3DQEBCwUAA4IBAQBFavBf
v6HouZlhawMHsNCl1MvDcWCPwGym9drziMJYvyhi4kA6LERSQ1KqYbFlfEGV+6yW
YM2xEC9zY2XhUA6Xt1GnZRabsM3LPcT+tnGuK3DdfyZ2FTE0CGxvYnswzzVVtDUS
b8YelWkqJigdxDYLW/3axe6BBoVO3KPs1TAM+jU+UFykjB6fpTMxYYjtJT5CV/BR
X/n1ZZOQNxhHqL6JFkwKURD6TxBa897WngfGT/FdtP28otxEhbK7NPEXYizllCzN
6muhkaArKvCQLdVYl97Br0rCltmst3nf53pqP+ZMpmWSOGYrJUQ0QMrGLyQZo9+D
lOhrNVajvU7W4hfR
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:20 2026 by rpki-client