
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/70235D8E8DC611EE89EDB22DC4F9AE02.roa
File: 70235D8E8DC611EE89EDB22DC4F9AE02.roa (raw, json)
Hash identifier: B+443TpX1zB7T+8r5LsLsuXuVw3556Nbc63dW2LjueU=
Subject key identifier: 28:7A:C5:FD:1E:82:46:FD:F7:6C:25:EE:1D:A2:F7:46:49:71:FE:66
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 115B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/70235D8E8DC611EE89EDB22DC4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:56 +0000
ROA not before: Fri 22 May 2026 20:25:56 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152134
IP address blocks: 2406:840:fec3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4443 (0x115b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:56 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbd4-eb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:80:2a:e9:db:27:ad:40:62:f2:03:45:06:
d8:e2:97:9a:a4:3f:7d:b1:7f:b1:a4:12:12:e2:4c:
77:37:4e:bb:bc:f9:ac:6b:ca:16:f8:89:07:f2:87:
8c:9c:09:bb:20:48:ad:c8:55:06:32:01:91:a5:45:
83:64:db:f6:9a:bb:8e:91:df:59:23:c2:ea:c0:d4:
6f:cf:71:e8:e1:ef:36:8d:66:44:bc:4a:14:ec:5f:
20:bc:af:cf:7c:38:52:43:62:60:9a:a1:36:ce:e8:
27:b1:ee:e1:60:ef:d3:25:73:01:1c:95:1d:5a:e5:
67:01:f2:d0:95:c4:01:4a:74:a7:07:9c:88:20:1b:
42:f5:88:01:dc:c3:fd:1c:15:75:94:e5:f5:d0:2c:
29:66:c3:03:3f:85:2b:2e:50:e5:6a:86:51:bd:8f:
a6:45:dd:59:78:de:2b:4a:da:29:57:24:04:35:f0:
8d:60:02:19:43:c6:65:06:b5:64:e7:8c:77:05:34:
36:66:b5:83:19:42:39:84:3d:c3:e9:33:74:2e:74:
64:1f:86:c1:e6:4b:fe:8e:77:b6:2a:c7:0d:ce:4f:
29:b1:0a:4f:1f:76:a9:60:94:8f:96:75:49:f9:72:
32:29:57:4f:0c:6b:69:3d:23:0e:35:7b:6a:64:f1:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7A:C5:FD:1E:82:46:FD:F7:6C:25:EE:1D:A2:F7:46:49:71:FE:66
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/70235D8E8DC611EE89EDB22DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fec3::/48
Signature Algorithm: sha256WithRSAEncryption
47:d4:31:99:b8:ad:81:7b:4e:c9:ac:60:fc:a1:e9:78:84:79:
90:e6:58:ef:82:54:23:06:61:df:15:9a:f5:9d:e9:a5:ca:14:
cd:43:6d:82:ce:b4:96:cf:77:e3:89:9a:e8:94:e0:3b:dd:c7:
6f:cc:30:eb:4e:fa:97:84:99:8b:14:85:ae:5a:05:6c:ef:f5:
f6:08:64:cc:d4:9f:7c:48:60:17:ea:54:94:67:fc:e5:3f:fc:
8a:10:9b:97:d7:32:46:fd:eb:2f:aa:00:11:6c:de:57:f2:7e:
ac:e9:42:80:64:87:84:1d:35:9f:7a:41:fb:63:00:58:87:27:
74:61:db:4d:a3:06:2b:6c:4e:c8:97:f5:4e:14:b8:63:46:f4:
22:e7:17:ac:ae:62:41:3b:b0:7f:9d:11:52:2a:7d:cc:26:0c:
d6:f9:ae:d3:fb:19:7a:91:50:1c:d5:8a:fb:68:dc:f7:0c:65:
df:3e:ed:b8:9f:43:81:ff:80:b5:4c:de:6a:93:07:b7:d6:ba:
28:a0:18:1d:ba:ae:62:a0:96:d9:5d:27:0f:13:b6:6c:f6:31:
3a:4a:4d:6a:2d:4a:c8:44:60:e2:02:13:b0:80:49:7d:12:1a:
c0:15:15:eb:b8:44:87:09:47:58:b5:d4:c4:2e:51:57:9b:42:
4b:5c:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:09 2026 by rpki-client