
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
File: 567C85C0B34111F09BB3B84DC4F9AE02.roa (raw, json)
Hash identifier: aBjPRE9V/G2l85aVgyoEFqD/H3WoUrfH5kvt5lbDj1k=
Subject key identifier: 21:72:FE:64:7C:15:F8:F4:2E:32:D4:DF:63:45:D7:84:2D:C4:66:56
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 10A3
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:31:19 +0000
ROA not before: Tue 11 Nov 2025 14:41:12 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137264
IP address blocks: 2406:840:fcf0::/44 maxlen: 48
2406:840:fedd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4259 (0x10a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Nov 11 14:41:12 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a49407-82f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:75:4f:42:40:6f:f7:d0:37:17:90:ad:59:
5a:16:21:c6:ae:be:c6:bb:12:5c:94:5b:70:34:df:
f4:aa:2e:b3:4e:98:7f:f8:21:51:f7:5a:bc:a6:e4:
59:cb:6c:45:5f:cc:c5:dc:96:f0:e0:5f:ba:06:73:
9d:4f:82:77:22:5c:cf:61:31:c7:38:47:cb:67:bf:
8b:bc:f1:3e:bf:5f:d1:cf:ba:51:bd:53:e6:e8:8c:
d5:3f:f8:5a:fe:52:e2:62:d4:8a:cd:ca:2d:46:10:
1b:de:a8:86:7b:ef:0e:51:5a:3d:0f:f7:93:06:76:
50:c6:9a:c0:49:39:17:8b:ea:6b:c2:5c:de:4a:4e:
43:7a:5c:9e:38:17:6a:e3:f1:03:b8:cb:13:c1:42:
86:56:30:f5:7d:c7:a9:27:fa:e6:a5:d2:f2:aa:d7:
53:21:b9:52:f5:77:5a:47:11:69:93:26:e1:56:df:
49:99:d2:fc:20:bb:5b:7c:e6:dd:c5:28:ac:5b:37:
37:b1:3a:33:ca:b8:a7:b9:e8:cf:fd:68:e5:68:24:
4e:3e:4a:d7:34:ae:fa:9c:18:47:d4:80:37:9f:6e:
20:60:1f:89:8e:60:0d:b1:00:55:42:78:40:d5:28:
76:18:a1:87:eb:d2:4f:b7:f6:ee:cb:fa:41:6b:b0:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:FE:64:7C:15:F8:F4:2E:32:D4:DF:63:45:D7:84:2D:C4:66:56
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fcf0::/44
2406:840:fedd::/48
Signature Algorithm: sha256WithRSAEncryption
30:ee:d1:04:a8:f6:43:fa:65:c7:a9:b5:2a:b0:3a:74:30:9f:
d3:a2:7c:9e:48:22:6d:f6:da:b8:c8:2b:8f:6e:44:e5:74:9e:
3a:af:2b:44:e0:b0:9f:7e:c0:30:5c:3a:05:16:f8:c7:af:94:
f8:91:b6:fd:30:44:c6:25:5c:ff:2d:fe:93:b3:e8:70:40:b7:
19:49:7b:cf:bf:6b:86:b4:89:7e:33:97:b6:f8:d0:d5:39:82:
d4:ab:a7:2f:f3:56:6d:76:f8:dd:55:cc:c3:42:e7:6a:ad:ae:
c8:0a:f8:e4:cb:a9:f5:54:a0:88:b5:56:b8:e9:9a:f4:3d:2d:
f8:8f:9c:2b:f8:4b:bd:9c:9b:09:7d:d9:28:6d:1b:7c:1d:39:
0c:ad:79:48:19:25:d5:29:f4:8a:4b:db:89:47:5c:12:7b:d7:
e9:a1:a6:af:ba:54:cd:2c:4b:21:2f:a9:ee:cf:46:f4:19:35:
74:80:66:a3:14:7e:27:29:29:71:47:ef:00:f0:a0:87:22:51:
70:82:db:be:78:ac:e4:fb:57:3e:b6:86:45:ae:f6:dd:ee:a3:
38:1b:b9:0e:73:74:b6:04:ed:35:43:b3:8e:55:bf:81:40:16:
d5:a0:3d:5f:6d:8d:e9:af:f9:70:e3:99:16:4a:e5:10:e7:14:
4a:b0:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:25:28 2026 by rpki-client