
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/672D5E3EDAFE11EE986FFF5BC4F9AE02.roa
File: 672D5E3EDAFE11EE986FFF5BC4F9AE02.roa (raw, json)
Hash identifier: G/FeGkl6/Yexk7kqcXUHtpNifl0kDlckZ0ggKIlXHPE=
Subject key identifier: 94:8A:82:73:4B:DE:D7:01:64:87:7C:04:52:34:E6:D2:6E:91:CB:19
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 115E
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/672D5E3EDAFE11EE986FFF5BC4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:02 +0000
ROA not before: Fri 22 May 2026 20:26:02 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152631
IP address blocks: 2406:840:9c00::/40 maxlen: 48
2406:840:c800::/40 maxlen: 48
2406:840:ce00::/40 maxlen: 48
2406:840:fb00::/40 maxlen: 48
2406:840:fecb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4446 (0x115e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbda-f0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e1:56:ec:20:b3:97:f2:19:69:04:cc:07:6e:
d6:dc:42:9a:8c:0c:6d:ad:96:94:85:98:4a:a4:e1:
ee:0b:74:f9:ba:14:de:1c:51:ae:d5:9d:cb:ae:80:
7a:2f:aa:89:5b:57:b3:24:b0:52:9d:a6:e7:2a:2a:
40:58:62:8f:4b:5f:f6:ae:42:2d:de:a1:d5:ab:82:
d8:72:ce:16:0c:fb:dc:25:55:15:a5:f6:14:27:aa:
c6:16:3f:2d:94:41:cb:af:c9:af:96:94:40:7c:df:
c3:b6:da:88:c0:36:dc:94:83:b8:42:ea:68:20:ed:
83:15:8c:0d:0d:1b:b0:7b:53:ae:a0:ab:d4:39:39:
46:53:2a:7d:7f:69:47:eb:b4:84:40:1a:ce:20:b6:
04:92:b6:af:27:3e:6e:a9:37:ac:e3:a1:9e:99:0f:
ea:22:51:e4:9f:75:88:0e:d6:3f:8c:16:cb:c3:20:
99:e0:f7:d0:8c:cf:3e:ee:77:7c:37:0b:43:9f:cc:
6b:1c:8a:51:90:a3:09:e8:b0:ed:ac:b9:0f:6f:64:
cc:00:d4:ab:3c:f7:0a:12:ec:6f:b9:bd:a5:94:2e:
90:c1:65:85:31:03:e1:88:7c:e5:7c:43:13:c4:e4:
89:75:68:ea:cb:fc:b1:2e:d8:d9:da:66:15:f1:64:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:82:73:4B:DE:D7:01:64:87:7C:04:52:34:E6:D2:6E:91:CB:19
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/672D5E3EDAFE11EE986FFF5BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9c00::/40
2406:840:c800::/40
2406:840:ce00::/40
2406:840:fb00::/40
2406:840:fecb::/48
Signature Algorithm: sha256WithRSAEncryption
1b:2b:ae:da:17:87:16:f5:95:e0:21:20:36:43:a7:02:2a:d2:
85:75:c3:80:b7:4d:99:2f:c3:54:65:94:6b:44:55:7d:7c:44:
37:bd:49:0f:f4:90:87:c5:eb:76:31:33:fb:d5:c5:86:24:4f:
30:54:9a:aa:d9:70:df:85:1f:40:4c:cc:dc:60:c0:bc:b0:cf:
9c:d5:0f:7d:e5:1b:bd:ac:ef:d7:f6:00:57:cd:5c:4c:e3:5d:
f9:7e:0c:a1:7d:9f:d4:0f:ab:6f:0c:25:34:69:e5:0e:91:18:
25:b5:d1:3c:bb:5e:d9:f4:4a:f6:bd:fd:57:67:4d:01:73:b0:
eb:60:5c:f7:f0:07:9d:b9:12:6e:00:62:b2:74:3b:27:7a:db:
d3:78:be:2b:31:9d:65:e9:6b:cf:f5:79:f0:72:a7:fb:78:53:
98:c6:aa:05:5d:45:f2:b8:94:51:40:c9:07:a2:11:06:dc:67:
fa:d6:46:31:fc:c5:ee:1b:6c:2f:98:47:53:22:89:2f:d1:a0:
ab:b0:23:75:a7:9f:82:f1:eb:fa:81:c2:f5:11:5c:36:97:46:
02:3a:d1:e2:e5:19:50:7c:82:27:fe:06:c7:3e:1c:6b:74:f9:
4a:86:56:f0:29:28:af:56:e8:02:5b:f3:fc:83:78:4e:d3:da:
7c:ea:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:19 2026 by rpki-client