
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68BDB38E2E5011EFBBA04110C4F9AE02.roa
File: 68BDB38E2E5011EFBBA04110C4F9AE02.roa (raw, json)
Hash identifier: Uw1aQFT+lsPlGawEv+WEeB5Ijk2qaEfz1y7EQwIdOUE=
Subject key identifier: E9:F6:AA:5B:F2:84:C6:69:CA:94:26:57:C7:08:B9:30:4D:F0:E3:53
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1060
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68BDB38E2E5011EFBBA04110C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:17 +0000
ROA not before: Thu 22 May 2025 20:07:31 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152920
IP address blocks: 2406:840:fcd0::/44 maxlen: 48
2406:840:fe96::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4192 (0x1060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:31 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493c9-60c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:f8:17:d0:9a:80:92:54:f9:47:1d:27:73:
32:22:62:bb:16:28:ea:84:d4:14:07:0b:fd:d1:d1:
c5:35:27:b2:07:9e:26:e3:1a:79:23:40:d2:69:02:
a6:f3:c7:11:14:60:0a:2d:86:e6:04:fb:5d:3c:9e:
26:98:f4:8d:ec:24:f2:5e:57:e6:f6:3a:b6:f3:01:
0f:22:5a:c4:02:6f:d6:85:bb:c9:a2:c7:13:ca:72:
a5:be:47:59:a0:fd:35:73:d4:6e:44:75:53:e1:d1:
33:58:d1:0a:9a:7d:53:00:14:a5:89:85:56:9b:3b:
a7:fc:3c:0e:b1:ed:e5:b5:a9:05:1f:55:49:a1:a7:
c6:05:89:cf:27:6e:5b:8f:26:14:9b:fe:d0:7e:43:
2c:9f:fd:54:bc:76:f8:45:de:0f:fb:7a:2a:24:98:
1f:46:f4:33:b7:c8:de:f1:9f:a3:8c:69:41:ac:4a:
cd:9e:5a:51:c3:d4:ef:01:64:fc:53:eb:67:cb:08:
63:7e:72:de:fb:0b:a3:d6:77:39:b4:66:44:14:85:
4c:6a:84:e8:2e:67:3e:e6:4a:69:88:f5:ab:1f:3f:
f8:21:2b:fc:97:89:3f:54:8e:c3:b7:29:0f:08:47:
b1:fb:8d:7c:81:f7:61:5c:c6:d0:3c:12:32:50:ec:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F6:AA:5B:F2:84:C6:69:CA:94:26:57:C7:08:B9:30:4D:F0:E3:53
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68BDB38E2E5011EFBBA04110C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fcd0::/44
2406:840:fe96::/48
Signature Algorithm: sha256WithRSAEncryption
3b:27:e3:fe:2a:79:1c:c5:d9:ee:4b:af:fc:15:97:4e:6a:26:
80:7c:fe:c8:68:5e:df:ad:c5:94:72:71:1f:81:52:2e:4c:13:
62:9c:e1:0a:d6:79:21:56:11:c9:7a:3e:70:69:c8:f7:f2:6a:
7d:73:0f:6b:bc:b9:8a:a5:ac:c1:c5:38:c5:76:82:b3:da:bd:
11:1f:98:6f:91:d5:f9:57:bf:4d:9e:b3:c2:27:a9:bc:3d:b2:
7f:df:15:01:d9:ec:1c:8d:c4:0d:82:2a:06:79:fb:a9:3d:ac:
a2:cb:79:37:f0:29:f0:65:12:39:d4:74:9d:0e:3e:98:bc:4d:
59:45:fe:aa:4f:15:fd:df:ff:07:4b:b9:20:6c:96:43:76:de:
05:e7:94:82:24:71:a1:6d:3b:36:e4:93:aa:04:dd:c8:a3:ad:
f4:ad:43:13:d8:e2:a0:0b:96:b4:f1:49:cf:49:10:21:9c:74:
42:32:9f:7c:ea:f2:05:b8:1a:08:b5:c5:31:f4:65:5a:c1:c0:
57:82:1f:b7:d6:e3:86:bc:17:cf:02:32:06:fe:7f:7c:ec:41:
df:db:7d:37:92:c0:a9:80:11:e5:0e:8b:c5:13:86:e2:c2:1f:
f0:17:b4:1e:f3:58:21:35:2b:de:22:30:ac:9d:03:c9:51:57:
66:ea:63:81
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICEGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTNjOS02MGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsMv4F9CagJJU+UcdJ3MyImK7FijqhNQUBwv90dHFNSeyB54m4xp5I0DSaQKm
88cRFGAKLYbmBPtdPJ4mmPSN7CTyXlfm9jq28wEPIlrEAm/WhbvJoscTynKlvkdZ
oP01c9RuRHVT4dEzWNEKmn1TABSliYVWmzun/DwOse3ltakFH1VJoafGBYnPJ25b
jyYUm/7QfkMsn/1UvHb4Rd4P+3oqJJgfRvQzt8je8Z+jjGlBrErNnlpRw9TvAWT8
U+tnywhjfnLe+wuj1nc5tGZEFIVMaoToLmc+5kppiPWrHz/4ISv8l4k/VI7DtykP
CEex+418gfdhXMbQPBIyUOxRxQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOn2qlvy
hMZpypQmV8cIuTBN8ONTMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNjhCREIzOEUy
RTUwMTFFRkJCQTA0MTEwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAYIQPzQAwcAJAYIQP6WMA0GCSqGSIb3DQEBCwUAA4IBAQA7J+P+
KnkcxdnuS6/8FZdOaiaAfP7IaF7frcWUcnEfgVIuTBNinOEK1nkhVhHJej5wacj3
8mp9cw9rvLmKpazBxTjFdoKz2r0RH5hvkdX5V79NnrPCJ6m8PbJ/3xUB2ewcjcQN
gioGefupPayiy3k38CnwZRI51HSdDj6YvE1ZRf6qTxX93/8HS7kgbJZDdt4F55SC
JHGhbTs25JOqBN3Io630rUMT2OKgC5a08UnPSRAhnHRCMp986vIFuBoItcUx9GVa
wcBXgh+31uOGvBfPAjIG/n987EHf2303ksCpgBHlDovFE4biwh/wF7Qe81ghNSve
IjCsnQPJUVdm6mOB
-----END CERTIFICATE-----
Generated at Wed Mar 4 14:21:55 2026 by rpki-client