
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa
File: 6E59D5EE1A3C11EE8A846877C4F9AE02.roa (raw, json)
Hash identifier: q0sQaO/GZUvSnfWu7mtENGvkFpplSMX0M4ZARkpsuQQ=
Subject key identifier: 41:42:70:E7:BC:42:38:F8:3C:D0:CE:2C:15:6E:0F:13:27:0A:47:04
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1155
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:45 +0000
ROA not before: Fri 22 May 2026 20:25:45 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 151490
IP address blocks: 2406:840:fa40::/48 maxlen: 48
2406:840:fedb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4437 (0x1155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbc9-54dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:fd:46:38:35:f6:6b:c5:aa:f7:12:f9:b6:
56:6f:3c:d8:ca:4d:d7:6a:4d:ae:9f:53:65:3e:d7:
31:1d:81:6f:a6:a2:6f:22:d1:18:cf:b2:77:a8:94:
77:e3:e8:31:ff:ab:61:6e:33:9f:aa:ef:e7:69:cc:
c0:21:44:44:42:f1:61:e9:13:9e:53:01:35:88:b8:
89:a3:2f:a0:26:7e:0f:30:41:37:6b:a8:e6:eb:c0:
09:ef:80:17:03:32:9d:57:fd:e5:bb:cd:7f:21:6e:
46:37:0b:8b:a2:a0:da:17:b1:97:6f:43:3a:19:50:
5b:7b:76:7f:fb:ff:f7:13:00:18:b5:16:b8:30:81:
51:c6:10:bc:2b:71:94:38:36:9e:33:56:ba:ca:8b:
17:78:6a:dd:62:ca:be:33:33:b4:3a:08:64:b9:44:
8a:4a:f7:38:d1:9d:4f:ac:65:17:74:f1:99:24:28:
f0:11:37:b5:05:8e:44:1e:6f:98:ad:1a:47:b9:c3:
33:7c:6f:74:a2:33:e2:65:df:67:8c:26:c5:ac:2b:
98:6b:76:99:73:45:4b:f5:30:3e:c5:cb:d2:d7:0a:
30:6c:f9:e0:f7:1a:f4:fd:6e:a0:30:ba:eb:92:28:
c9:09:65:04:9f:01:94:a8:a7:11:1a:ee:1f:66:f4:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:70:E7:BC:42:38:F8:3C:D0:CE:2C:15:6E:0F:13:27:0A:47:04
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fa40::/48
2406:840:fedb::/48
Signature Algorithm: sha256WithRSAEncryption
2b:18:d5:4b:c6:1f:d2:54:3f:bc:9f:81:09:3c:fd:89:a3:c6:
5c:39:8e:b4:4d:4f:94:4d:92:ee:a8:f7:ef:60:44:94:50:61:
24:fc:6c:c8:91:da:61:cc:5c:f0:77:50:03:c8:af:5d:3f:2b:
0c:d9:1a:e2:6b:a9:aa:14:e0:ee:5d:14:6e:c2:0d:9a:41:87:
1b:da:79:56:f8:bc:70:9a:dc:78:42:21:bd:40:5e:c1:84:d0:
20:ba:ff:e7:ec:2b:78:1c:e0:ad:6f:1d:ad:40:d2:3d:ac:15:
4a:79:eb:69:e7:92:ea:57:ae:2e:0e:7c:b7:7e:bf:00:05:07:
70:07:61:45:cc:0c:5f:19:e0:c7:c5:20:88:9e:95:e3:b6:98:
07:22:30:74:39:87:42:c6:3a:88:b7:3f:15:c3:10:f3:59:30:
fb:7b:3d:3a:5b:f5:bf:9d:63:a6:3e:c5:05:d9:77:61:d6:0d:
65:8d:45:36:c0:9e:37:d4:f9:94:14:35:8e:59:78:42:b9:2a:
95:9b:6b:58:9d:5b:f4:1a:00:50:4b:11:8e:07:1a:e9:f6:1f:
5f:5f:32:d6:f8:db:f2:07:a3:87:1f:d8:ac:90:08:88:b1:37:
1d:2b:45:88:58:20:93:d3:a4:4c:2b:2f:bc:31:87:dc:b4:66:
d9:87:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:53:36 2026 by rpki-client