
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa
File: 69AC1BDC2E5011EFBBA04110C4F9AE02.roa (raw, json)
Hash identifier: LaPfH6mQ4H5loGeiO4tVvYmmgWhcCCDmWdZhCFVbcOs=
Subject key identifier: F6:E4:6A:2F:B1:B9:51:BA:98:19:2B:EE:3B:3E:F5:ED:76:2A:A0:DB
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1062
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:19 +0000
ROA not before: Thu 22 May 2025 20:07:33 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152922
IP address blocks: 2406:840:fd90::/44 maxlen: 48
2406:840:fe90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4194 (0x1062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:33 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493cb-b355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:9f:c2:8f:d1:be:5e:1a:9b:b5:17:e6:53:
d7:30:b8:de:c6:4c:74:b5:98:9d:4c:5c:fb:91:19:
64:eb:af:25:a3:42:9d:9a:9f:f4:90:cd:9d:18:99:
a2:9c:3a:be:a9:71:c1:62:ec:ce:32:a5:f4:f9:06:
b0:a9:87:59:18:ff:ee:ef:ac:45:89:01:84:93:c9:
ee:94:4b:dd:1b:1c:55:ff:ca:e0:b0:2f:87:7b:97:
ae:45:2d:82:2e:b3:7c:ed:eb:3b:4b:d9:4a:f5:b6:
f3:b3:17:26:77:89:12:f6:08:91:4b:d5:9a:5d:c0:
08:84:58:52:21:0d:c9:91:9d:ad:0a:4f:8e:f8:07:
c9:3c:dd:40:25:2f:e6:30:14:ec:22:cb:74:31:3f:
5b:7c:83:2b:d1:e8:97:3a:1c:89:a3:44:b9:fd:5b:
b4:a6:cb:69:10:0f:ce:d9:62:a2:c3:ae:8c:ae:b4:
7f:1a:f8:0f:e4:f3:f1:e7:6b:4f:a8:b6:12:10:12:
51:18:87:da:45:8e:97:32:2b:8f:03:ac:79:78:7c:
9b:ed:2d:09:64:d2:ae:cc:9d:e2:33:8a:0a:0c:51:
1b:05:7b:35:55:d9:1e:30:52:da:96:75:e3:7a:c8:
7b:dc:16:14:de:e1:6d:79:05:24:b4:1f:02:ba:09:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:6A:2F:B1:B9:51:BA:98:19:2B:EE:3B:3E:F5:ED:76:2A:A0:DB
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fd90::/44
2406:840:fe90::/48
Signature Algorithm: sha256WithRSAEncryption
0e:33:0e:f9:8d:e8:7e:14:9e:1a:82:c1:3b:2e:0f:e0:19:d7:
f3:eb:8f:0b:5c:27:e1:d8:c0:73:13:b9:66:2f:ba:d5:fe:a8:
09:9c:4c:53:5c:3e:68:72:93:db:c5:e1:e8:30:5d:24:7f:d6:
81:c3:fa:fc:4d:b6:f4:04:5d:5d:44:aa:4d:a8:3e:ca:02:8f:
fe:2f:71:a2:98:01:7b:0e:c5:a7:59:9b:03:ab:d7:8d:02:7b:
23:df:aa:3d:66:7b:b6:4c:9f:81:4d:84:6c:d1:7b:ac:9d:6c:
cc:d9:fe:e1:ff:ae:85:ed:5f:24:e0:9a:68:9e:a3:09:e2:92:
cc:7e:84:25:5d:42:b4:22:24:75:5d:cf:8b:08:7a:f8:dc:9f:
8c:c4:dc:3f:4f:b5:03:22:3a:8f:ca:b5:22:c7:4d:f5:7b:a7:
d1:d8:ce:16:00:39:71:41:a1:24:f7:18:ea:3e:92:b1:52:b8:
32:2f:45:8d:29:ed:b1:48:d0:36:8e:99:74:94:82:21:09:ae:
06:4b:c8:48:95:73:42:e3:34:6c:98:35:d2:88:74:2a:47:45:
e6:e4:a7:2a:83:22:bb:9c:84:59:da:b0:14:fe:58:a3:58:e5:
f2:e0:24:8f:5e:44:f3:62:a9:c1:f6:00:0c:cf:7b:d5:03:ab:
7d:d4:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:23:46 2026 by rpki-client