
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa
File: 7DE7E76AF80D11EBAE08AF82C4F9AE02.roa (raw, json)
Hash identifier: ed7nzC7cPREXzWohYjHtJfclY+L7xWUnyAaNZKBfqVQ=
Subject key identifier: 3A:F2:81:9D:6C:07:D9:14:6A:DD:67:A0:65:AF:E6:B4:CB:97:A2:48
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1088
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:54 +0000
ROA not before: Thu 22 May 2025 20:08:12 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 211843
IP address blocks: 2406:840:e666::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 16:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4232 (0x1088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:08:12 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493ee-0da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:20:83:34:d6:d6:b0:94:f2:5e:35:b1:f8:
52:90:2b:7b:d9:35:0e:84:37:76:96:96:19:ff:59:
5b:bb:3f:33:b8:1e:f2:a7:b9:1f:0a:35:cc:18:7c:
12:e1:f5:21:8a:47:2c:c0:d5:de:9f:8e:df:7e:70:
a2:26:3a:eb:12:41:9f:1c:3c:7a:20:80:ba:39:47:
59:41:2c:2b:35:c2:07:93:98:88:3e:6e:7c:b5:4e:
3e:fb:fa:c9:4a:b9:aa:e9:e0:ff:a7:60:19:0a:73:
7d:b5:51:02:d9:f1:a2:be:ab:f1:23:4b:53:c4:4d:
49:73:61:e2:53:9f:90:d5:60:01:61:f2:eb:5e:44:
cd:bf:7f:8b:01:45:af:00:d2:1d:32:7c:9a:e5:9f:
c2:34:2c:52:d6:ce:f3:66:9f:f4:3c:4e:48:2e:9b:
e3:d3:90:e7:34:1f:dc:dc:65:d6:d9:3c:44:3f:6e:
b1:f6:bd:23:36:52:cd:fa:48:82:e0:8d:81:af:f3:
a8:8d:48:27:8d:c2:06:3a:6e:5b:54:64:42:83:66:
6b:f7:51:5d:06:ec:b2:5e:4f:c9:36:54:c7:86:a0:
34:74:06:ed:91:fc:1c:8c:7a:c1:b2:07:d5:d0:f7:
9e:43:4c:7f:bf:93:c0:86:bf:99:cd:b2:30:cd:1f:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:81:9D:6C:07:D9:14:6A:DD:67:A0:65:AF:E6:B4:CB:97:A2:48
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e666::/47
Signature Algorithm: sha256WithRSAEncryption
45:1a:60:3d:d5:e9:46:21:c9:bc:e3:22:33:18:6e:de:56:e5:
94:db:a0:aa:a4:eb:bc:dc:5a:02:0e:7a:b7:d5:9c:14:1e:7c:
4d:1b:fa:6a:fb:0e:79:dc:c4:27:4c:fa:a3:99:1d:35:d1:ea:
1b:ad:f0:81:5d:63:ac:46:dc:c7:5c:7b:42:4c:76:28:a3:3b:
f4:60:f8:e0:b1:4c:fe:62:90:95:41:d8:35:f0:3f:a7:32:78:
d4:86:01:db:b4:28:6a:21:3a:b6:bb:96:eb:4a:33:9d:24:a9:
ff:45:e5:7e:96:06:59:f7:1d:c5:32:0f:91:51:4b:ed:22:e7:
56:38:d0:8f:db:43:12:5f:df:f9:2c:5a:1c:6c:64:2c:3b:22:
77:c2:dc:45:54:ac:01:33:6b:2e:d0:7a:e6:34:f7:c8:4e:f8:
be:d5:1c:da:bc:78:44:4d:77:77:18:61:81:90:fe:ea:ec:10:
be:9f:55:64:db:14:37:78:27:11:0a:66:58:4e:c8:10:f1:de:
f2:60:81:07:26:92:a9:e8:f4:98:f6:c5:90:a8:a9:d8:0b:14:
0e:f2:a0:96:7d:5a:fb:4e:b4:9a:d8:1c:70:09:94:6e:0d:40:
97:4a:a4:f0:23:25:f4:00:c2:f6:b8:bc:d9:a5:31:e5:40:77:
4a:14:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 16:16:56 2026 by rpki-client