
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6AAAAC74834011EB953B4B16C4F9AE02.roa
File: 6AAAAC74834011EB953B4B16C4F9AE02.roa (raw, json)
Hash identifier: 8qD20NFTVvQuCKJfFdcbnyVgXXvOL0GgxnUvvu3XwZI=
Subject key identifier: 2E:EC:AA:02:B7:4C:A1:B1:68:B3:F8:58:91:4E:85:B8:F8:23:10:50
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1140
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6AAAAC74834011EB953B4B16C4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:06 +0000
ROA not before: Fri 22 May 2026 20:25:06 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 141776
IP address blocks: 2406:840:e080::/44 maxlen: 48
2406:840:fef9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4416 (0x1140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bba2-0c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:44:92:71:1f:ee:6e:23:61:b3:d7:37:4a:
38:06:11:8d:d1:62:fc:ac:51:eb:cc:ab:02:33:bf:
b7:f0:c3:26:ca:24:2a:a2:b0:1c:3d:86:01:90:a0:
bf:20:34:3c:03:12:56:a0:93:9d:da:ab:40:43:24:
57:3c:1d:9f:f7:a4:24:b9:ef:98:2f:2e:97:aa:67:
74:75:cf:9b:17:eb:fa:fb:bc:0d:43:b6:49:97:8e:
df:71:f7:02:f3:8a:d9:6b:38:84:ee:6d:5d:86:12:
9f:dd:55:bb:42:20:03:30:58:63:96:fd:32:bb:64:
c2:01:76:64:86:87:08:5e:48:fe:de:05:a3:31:26:
61:2e:31:c2:95:9b:c0:0a:00:d5:db:e3:0c:8e:b0:
e4:b4:6f:28:22:14:fc:0e:0c:e6:39:97:1b:5b:58:
9d:87:89:2d:46:1a:e6:aa:dc:1e:e5:7d:a9:df:a1:
c4:de:74:9e:dc:cf:a4:c5:20:40:36:95:67:6c:fa:
57:3c:95:b1:0d:31:96:6d:0b:39:97:2d:00:b5:38:
ff:f5:79:33:ef:d7:32:49:dd:2c:9b:32:14:e1:c5:
27:0f:20:08:76:47:54:08:76:c9:52:77:7b:66:19:
b4:48:fd:3f:58:0c:89:2f:cd:0e:1b:aa:27:e2:13:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:AA:02:B7:4C:A1:B1:68:B3:F8:58:91:4E:85:B8:F8:23:10:50
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6AAAAC74834011EB953B4B16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e080::/44
2406:840:fef9::/48
Signature Algorithm: sha256WithRSAEncryption
1c:9c:c6:ae:f9:bb:07:20:9a:87:d0:e4:f7:82:1e:f6:b1:26:
e4:1b:fd:f7:17:34:46:27:10:46:fe:43:53:e7:20:14:82:e5:
6e:23:f3:59:76:7a:80:12:2e:e8:e5:3d:ab:e5:4d:69:a6:f1:
04:01:ad:6d:ec:ff:3c:f1:ff:f7:5b:39:26:35:3e:4b:89:98:
1d:e4:f4:1d:b3:d1:04:a6:86:d7:54:ff:3f:00:f7:c3:e1:31:
02:84:15:29:6d:55:32:28:85:ce:d5:e7:a8:88:58:2a:f8:42:
c5:c6:81:ff:b3:f1:6f:37:40:47:a1:f7:f8:ff:e8:e7:08:fb:
20:97:18:c3:67:af:7f:0c:8f:bd:88:be:b4:12:6c:d9:21:b1:
9b:10:93:34:05:75:3d:11:58:ac:bf:42:bf:52:65:2e:b8:7e:
05:2e:55:67:5b:ab:13:0e:cd:80:8b:98:c3:1e:2e:02:18:b4:
30:ae:d3:7a:eb:58:60:16:5f:c5:58:3c:07:bb:48:90:4b:ac:
21:e0:8e:f5:1f:80:c4:06:b8:33:2d:e3:c6:b3:2b:e1:9f:50:
56:bb:62:f5:3d:bd:63:92:58:93:c8:71:7c:0f:f2:d3:db:47:
44:eb:cf:e7:57:bf:e3:04:8c:a1:97:29:f1:02:3e:41:94:7e:
89:ca:96:68
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICEUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNTA2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmJhMi0wYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1VEknEf7m4jYbPXN0o4BhGN0WL8rFHrzKsCM7+38MMmyiQqorAcPYYBkKC/
IDQ8AxJWoJOd2qtAQyRXPB2f96Qkue+YLy6Xqmd0dc+bF+v6+7wNQ7ZJl47fcfcC
84rZaziE7m1dhhKf3VW7QiADMFhjlv0yu2TCAXZkhocIXkj+3gWjMSZhLjHClZvA
CgDV2+MMjrDktG8oIhT8DgzmOZcbW1idh4ktRhrmqtwe5X2p36HE3nSe3M+kxSBA
NpVnbPpXPJWxDTGWbQs5ly0AtTj/9Xkz79cySd0smzIU4cUnDyAIdkdUCHbJUnd7
Zhm0SP0/WAyJL80OG6on4hMfyQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFC7sqgK3
TKGxaLP4WJFOhbj4IxBQMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNkFBQUFDNzQ4
MzQwMTFFQjk1M0I0QjE2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAYIQOCAAwcAJAYIQP75MA0GCSqGSIb3DQEBCwUAA4IBAQAcnMau
+bsHIJqH0OT3gh72sSbkG/33FzRGJxBG/kNT5yAUguVuI/NZdnqAEi7o5T2r5U1p
pvEEAa1t7P888f/3WzkmNT5LiZgd5PQds9EEpobXVP8/APfD4TEChBUpbVUyKIXO
1eeoiFgq+ELFxoH/s/FvN0BHoff4/+jnCPsglxjDZ69/DI+9iL60EmzZIbGbEJM0
BXU9EVisv0K/UmUuuH4FLlVnW6sTDs2Ai5jDHi4CGLQwrtN661hgFl/FWDwHu0iQ
S6wh4I71H4DEBrgzLePGsyvhn1BWu2L1Pb1jkliTyHF8D/LT20dE68/nV7/jBIyh
lynxAj5BlH6JypZo
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:24 2026 by rpki-client