
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa
File: 692F45942E5011EFBBA04110C4F9AE02.roa (raw, json)
Hash identifier: YnmRTl8YrqPeX955tGk9kmZCKAzUs25l2SThJmig3Xo=
Subject key identifier: AB:42:33:B7:32:F4:C3:37:8D:97:38:00:8F:D7:13:17:52:3F:77:77
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1061
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:18 +0000
ROA not before: Thu 22 May 2025 20:07:32 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152921
IP address blocks: 2406:840:fce0::/44 maxlen: 48
2406:840:fe94::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4193 (0x1061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:32 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493ca-993d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:d0:42:c9:7b:8d:b7:e0:60:2b:ec:0b:e2:
de:e2:52:f3:21:ea:b6:ae:eb:ab:a0:ae:4a:d4:d7:
21:98:88:75:d4:2d:9c:58:d2:98:bf:af:36:8f:94:
96:3b:dc:44:62:c3:69:c4:a1:0b:55:f4:49:b3:0d:
a2:3b:b0:5a:7f:87:64:84:f6:de:44:a6:f4:4d:0a:
bb:83:55:68:24:26:4f:53:60:1b:9f:15:7e:80:73:
32:16:ef:85:72:2e:c9:0f:5c:58:d2:1e:d9:dc:4a:
72:04:79:6e:da:d0:91:52:39:7e:4c:bf:c0:50:17:
cb:af:9f:5f:a6:48:1a:a9:44:b5:45:a0:dd:b4:44:
f5:87:2b:65:d3:87:c6:93:60:73:85:3f:66:5f:e1:
e8:c8:a4:74:9d:73:5e:42:23:e8:37:b1:31:e4:3c:
41:e1:eb:9b:a2:7a:7f:9a:d9:a6:5d:47:43:50:98:
4d:47:ff:fd:d2:ba:ac:44:7f:49:a9:9d:1c:e2:b6:
20:2d:db:ca:b4:e1:5c:6f:58:f7:c2:00:48:fe:96:
a6:a5:f9:a8:08:18:27:72:9b:89:1c:5f:42:75:30:
b6:8b:1b:04:54:e3:ec:ec:12:79:f7:02:b9:ac:43:
9f:6c:69:3d:2c:fb:6c:cc:b5:c0:8d:23:e8:1a:77:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:33:B7:32:F4:C3:37:8D:97:38:00:8F:D7:13:17:52:3F:77:77
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fce0::/44
2406:840:fe94::/48
Signature Algorithm: sha256WithRSAEncryption
a2:26:e5:ad:96:7c:55:64:74:f3:66:1a:24:16:50:8e:57:a3:
da:1f:58:29:ce:45:57:d5:0e:11:eb:ea:dc:8c:37:06:d4:fb:
46:fc:7b:80:28:eb:fd:4b:0b:8a:e9:3d:02:07:c1:b5:7f:63:
3f:de:e1:02:48:60:06:11:fc:2d:e4:c0:bb:5e:d9:aa:f7:59:
5d:88:3e:cb:d3:e7:30:6e:e8:cd:76:3a:11:e7:07:d6:b8:fe:
82:10:6b:4c:5d:c7:f2:aa:f3:4c:1a:8f:eb:4c:3d:e0:ac:2b:
13:df:b6:ca:96:7d:7d:42:39:9f:ec:70:c7:96:68:e6:82:02:
be:2d:c7:3e:6a:13:17:5f:96:b7:16:f4:1e:11:43:7e:7b:8b:
7e:f9:62:c4:66:bb:01:c2:51:b7:19:fa:c7:6f:74:74:77:1b:
5c:28:b1:79:ef:01:eb:8e:3b:b3:03:22:3a:d2:5f:59:f7:26:
f8:da:cc:a4:72:f0:83:ca:3b:3a:b0:b0:0f:88:03:9f:c5:75:
71:f7:41:db:4d:5e:b5:59:af:77:ce:dd:2c:61:d1:f4:82:a7:
72:fd:73:16:00:ee:b6:f9:a4:02:15:9e:75:6c:62:a2:ce:ba:
8a:1d:c9:0a:1e:76:15:6d:60:d0:eb:7e:5e:3a:8a:20:4a:cf:
78:2a:5c:70
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICEGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzMyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTNjYS05OTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWnQQsl7jbfgYCvsC+Le4lLzIeq2ruuroK5K1NchmIh11C2cWNKYv682j5SW
O9xEYsNpxKELVfRJsw2iO7Baf4dkhPbeRKb0TQq7g1VoJCZPU2AbnxV+gHMyFu+F
ci7JD1xY0h7Z3EpyBHlu2tCRUjl+TL/AUBfLr59fpkgaqUS1RaDdtET1hytl04fG
k2BzhT9mX+HoyKR0nXNeQiPoN7Ex5DxB4eubonp/mtmmXUdDUJhNR//90rqsRH9J
qZ0c4rYgLdvKtOFcb1j3wgBI/pampfmoCBgncpuJHF9CdTC2ixsEVOPs7BJ59wK5
rEOfbGk9LPtszLXAjSPoGne9jQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKtCM7cy
9MM3jZc4AI/XExdSP3d3MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNjkyRjQ1OTQy
RTUwMTFFRkJCQTA0MTEwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAYIQPzgAwcAJAYIQP6UMA0GCSqGSIb3DQEBCwUAA4IBAQCiJuWt
lnxVZHTzZhokFlCOV6PaH1gpzkVX1Q4R6+rcjDcG1PtG/HuAKOv9SwuK6T0CB8G1
f2M/3uECSGAGEfwt5MC7Xtmq91ldiD7L0+cwbujNdjoR5wfWuP6CEGtMXcfyqvNM
Go/rTD3grCsT37bKln19Qjmf7HDHlmjmggK+Lcc+ahMXX5a3FvQeEUN+e4t++WLE
ZrsBwlG3GfrHb3R0dxtcKLF57wHrjjuzAyI60l9Z9yb42sykcvCDyjs6sLAPiAOf
xXVx90HbTV61Wa93zt0sYdH0gqdy/XMWAO62+aQCFZ51bGKizrqKHckKHnYVbWDQ
635eOoogSs94Klxw
-----END CERTIFICATE-----
Generated at Sat Mar 7 02:24:07 2026 by rpki-client