
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa
File: 692F45942E5011EFBBA04110C4F9AE02.roa (raw, json)
Hash identifier: ELRhNWX2Ccfih+P7Rz7XQYUestUKh/Fd7HpWAA/RUJQ=
Subject key identifier: FD:EA:68:A8:3D:A3:18:B1:F5:ED:20:1B:D7:2D:1B:34:E6:B1:DA:2C
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1163
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:11 +0000
ROA not before: Fri 22 May 2026 20:26:11 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152921
IP address blocks: 2406:840:fce0::/44 maxlen: 48
2406:840:fe94::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4451 (0x1163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:11 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbe3-244b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:83:fc:a4:de:07:49:1c:93:d6:38:96:e0:
fe:b9:c0:bf:6f:49:a5:d1:0d:cd:26:01:82:b7:2c:
89:a7:03:76:80:ef:57:b3:73:f1:53:27:ad:3f:bd:
0d:e9:11:2e:c8:30:30:60:55:de:c8:fa:d9:0f:ee:
5e:5f:40:a3:54:35:30:c4:a4:ae:ed:46:9a:39:6c:
e0:49:bd:8c:09:5c:cd:eb:dd:f8:c5:55:8e:79:0a:
c8:01:99:c9:37:f1:ad:1b:66:6d:dc:8d:e4:1d:dd:
36:c8:bb:2b:2a:7f:51:06:36:66:25:ab:68:d5:76:
e2:29:f8:ee:b8:09:49:87:df:03:2e:0d:1f:9f:2b:
05:65:f8:86:84:27:95:57:e7:d7:a7:fa:fd:97:dc:
a7:e6:3e:21:37:04:f6:df:15:fc:72:f5:60:0e:b7:
1e:3b:b1:dc:08:0f:09:48:01:5b:8a:15:a4:6d:14:
2c:f5:11:cf:8b:d1:fd:9d:ab:fe:f2:bd:79:5e:e5:
96:d5:2a:c5:0c:98:1b:cc:45:dc:03:13:5a:ff:9b:
85:e0:3b:29:3d:99:7e:29:17:f4:8e:01:75:a4:eb:
0e:ff:a1:31:5d:5b:b3:46:e6:ad:6c:2e:e8:96:1e:
43:19:86:fa:71:ad:b5:ab:b4:43:fb:9c:6b:a0:91:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:68:A8:3D:A3:18:B1:F5:ED:20:1B:D7:2D:1B:34:E6:B1:DA:2C
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fce0::/44
2406:840:fe94::/48
Signature Algorithm: sha256WithRSAEncryption
88:dd:0e:41:2a:a0:18:8f:05:a6:b7:84:1c:8b:75:71:92:d5:
76:91:98:47:a5:b9:d5:cd:75:8b:34:9d:56:6c:d5:1e:88:26:
85:0d:ca:4e:2e:f3:59:a4:50:34:39:de:db:30:a8:0b:fa:5c:
f7:e9:ff:21:96:b4:5b:1f:5f:5d:2b:b5:3b:f4:f5:82:0e:86:
9e:6a:b6:52:0c:f4:7a:d0:77:eb:e5:37:66:7c:01:03:af:0d:
2b:f5:9b:41:9c:b5:f1:a1:00:e3:5c:f1:8c:8e:f0:0e:c7:fa:
05:ef:69:9d:6d:ff:36:dd:3b:02:f5:18:d5:c5:19:ad:f5:0d:
9f:20:48:2f:05:91:79:09:fc:ca:4d:74:91:cb:62:a8:85:7f:
99:0b:ba:e4:52:7c:93:ca:ea:be:50:c3:a7:2c:b7:0d:35:13:
8d:2e:66:9c:9a:b8:47:85:23:0e:97:5b:71:58:f8:9d:b7:1e:
0e:e6:e4:45:52:ac:4b:cf:09:61:98:c4:70:75:f7:33:64:02:
20:6b:c9:a0:64:02:49:ac:6a:eb:4f:8a:19:dc:25:1d:20:59:
e7:53:57:62:c9:53:7a:2e:de:de:00:b0:2e:a3:c2:15:d6:82:
9a:4f:cd:a9:69:e7:5c:ed:22:f8:55:2b:10:ed:73:cf:93:c0:
a8:f6:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:20 2026 by rpki-client