
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa
File: 6DD477BC6AD411EE8DB0AF30C4F9AE02.roa (raw, json)
Hash identifier: RVlKQKwSwk3nsu4w6BC9GjV2DssNlvytQ/0r+pU4/V4=
Subject key identifier: 32:7E:1F:69:CB:40:AF:EB:62:2A:3F:E8:EA:CE:F1:39:31:8D:DA:F8
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 107A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:41 +0000
ROA not before: Thu 22 May 2025 20:07:55 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 199436
IP address blocks: 2406:840:9990::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 19:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4218 (0x107a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:55 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493e1-9e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:9b:ff:c3:29:c3:2c:c6:c1:5c:0f:f9:b2:
b8:84:3d:dd:87:20:6a:e6:c8:ff:d9:ac:fa:a8:d2:
77:7b:98:c4:cc:1d:5b:9f:84:7f:19:49:15:33:df:
8d:82:38:4d:74:0a:30:e9:52:42:86:c1:33:f1:85:
09:dd:9a:0a:21:d5:1e:ea:b0:97:cd:9a:72:14:b2:
f3:36:b3:51:53:4b:dc:f8:cb:d7:e2:43:5b:d0:ed:
56:4e:8d:88:c4:4f:86:91:7a:54:43:40:00:6a:a1:
d0:6a:f1:e0:82:c5:c2:79:31:8f:e9:bb:8c:85:7b:
ee:da:eb:24:02:56:9f:86:2a:c0:68:c8:72:44:4f:
2d:0f:d3:7f:2d:aa:61:fc:cd:7f:54:42:39:22:9b:
ab:ac:b7:4f:6b:94:91:cd:5f:ce:11:15:f3:ee:dc:
d1:4e:6e:ae:d6:a8:b1:85:e5:bd:94:e1:ba:4e:19:
d5:47:f4:e0:ca:dc:2e:50:e9:21:61:e1:f8:02:f4:
6f:a2:d6:0f:a5:3b:65:44:01:ea:4d:5f:04:16:b0:
44:4c:5d:97:95:af:5a:44:61:bd:34:29:52:56:ee:
59:df:7a:cd:09:4b:aa:4a:03:a6:be:69:7e:e3:8d:
3a:f4:f4:e8:c0:b4:57:9f:6b:e5:9a:ae:88:ae:11:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:1F:69:CB:40:AF:EB:62:2A:3F:E8:EA:CE:F1:39:31:8D:DA:F8
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9990::/44
Signature Algorithm: sha256WithRSAEncryption
47:63:81:c6:29:9f:a7:1a:f2:ce:12:e8:83:ab:67:c2:32:5c:
d9:ee:17:b6:77:24:93:d8:f7:dc:d1:c1:68:33:c2:b3:29:1f:
7c:03:c5:8d:7d:99:ce:bb:59:f3:2e:51:91:2c:90:2b:57:c3:
50:6c:17:90:ff:fa:b3:c0:0d:6a:d9:7e:dc:c0:14:0e:d4:6d:
c0:1c:b6:ca:f2:5d:f1:67:98:aa:e5:06:dc:4c:a8:82:ea:6c:
cf:6a:b4:77:b9:34:e9:e5:6e:ea:c0:72:21:2e:01:b8:86:61:
f2:4d:64:df:07:ad:82:26:12:6d:c8:b3:c6:33:f4:33:27:c5:
be:f5:86:4a:f8:b7:49:1d:0a:e5:c0:ed:23:60:c0:38:f7:31:
c7:10:5d:7e:95:44:4d:5e:fc:f0:f6:3c:b1:64:f4:99:27:18:
67:f7:2f:71:5c:9a:d5:18:30:82:6d:af:52:07:8d:b1:27:46:
ec:16:76:e5:f7:3d:02:24:e3:a5:7c:ba:88:0a:e6:b9:ab:48:
66:78:e5:4b:86:de:82:b1:4b:14:bd:ec:75:91:c7:29:fa:eb:
3a:9e:dd:a6:41:58:fd:4d:94:83:3f:96:22:f0:2f:4e:96:3a:
9d:8d:fa:57:1f:e0:bc:f9:4f:42:00:fd:dd:7e:07:15:95:1a:
fc:50:94:fc
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTNlMS05ZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtR+b/8MpwyzGwVwP+bK4hD3dhyBq5sj/2az6qNJ3e5jEzB1bn4R/GUkVM9+N
gjhNdAow6VJChsEz8YUJ3ZoKIdUe6rCXzZpyFLLzNrNRU0vc+MvX4kNb0O1WTo2I
xE+GkXpUQ0AAaqHQavHggsXCeTGP6buMhXvu2uskAlafhirAaMhyRE8tD9N/Laph
/M1/VEI5IpurrLdPa5SRzV/OERXz7tzRTm6u1qixheW9lOG6ThnVR/TgytwuUOkh
YeH4AvRvotYPpTtlRAHqTV8EFrBETF2Xla9aRGG9NClSVu5Z33rNCUuqSgOmvml+
44069PTowLRXn2vlmq6IrhHJ+wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDJ+H2nL
QK/rYio/6OrO8Tkxjdr4MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNkRENDc3QkM2
QUQ0MTFFRThEQjBBRjMwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQJmQMA0GCSqGSIb3DQEBCwUAA4IBAQBHY4HGKZ+nGvLOEuiD
q2fCMlzZ7he2dyST2Pfc0cFoM8KzKR98A8WNfZnOu1nzLlGRLJArV8NQbBeQ//qz
wA1q2X7cwBQO1G3AHLbK8l3xZ5iq5QbcTKiC6mzParR3uTTp5W7qwHIhLgG4hmHy
TWTfB62CJhJtyLPGM/QzJ8W+9YZK+LdJHQrlwO0jYMA49zHHEF1+lURNXvzw9jyx
ZPSZJxhn9y9xXJrVGDCCba9SB42xJ0bsFnbl9z0CJOOlfLqICua5q0hmeOVLht6C
sUsUvex1kccp+us6nt2mQVj9TZSDP5Yi8C9OljqdjfpXH+C8+U9CAP3dfgcVlRr8
UJT8
-----END CERTIFICATE-----
Generated at Wed Mar 11 10:25:57 2026 by rpki-client