
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8512A03C8D7E11F196D17ADC3511F970.roa
File: 8512A03C8D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier: qT8RBhmsRLqaFHL071MTzkpt/EIqiBq5ld9430GGPA0=
Subject key identifier: E5:67:26:89:6C:C4:5C:70:16:28:2B:91:EB:6D:DD:F9:24:C1:9D:1A
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1207
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8512A03C8D7E11F196D17ADC3511F970.roa
Signing time: Sat 01 Aug 2026 07:56:37 +0000
ROA not before: Sat 01 Aug 2026 07:56:37 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137436
IP address blocks: 2406:840:fea6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4615 (0x1207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 1 07:56:37 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6da6b4-ea08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:89:d8:8b:2c:f8:c6:d6:00:87:fd:53:ef:
6f:4f:5f:8e:ba:d0:fe:07:86:dc:40:32:71:f3:8a:
fb:80:98:47:c5:3f:76:a0:aa:ef:38:44:20:3d:04:
b9:ed:9b:b0:e4:15:13:a4:0a:e6:40:f5:4e:eb:c2:
d0:83:23:97:a6:6e:ee:75:b8:e1:34:4f:1b:2b:ad:
ac:c8:21:ab:f1:3e:45:e9:1d:6c:df:d6:1f:8b:88:
e9:b7:85:25:05:df:0c:0d:0d:9c:2c:f1:49:80:8f:
5f:99:80:e9:ba:77:91:0c:2d:8d:c4:ae:45:21:48:
50:03:54:ed:bf:82:83:fb:d8:ad:2a:2b:ac:6e:ff:
23:9a:00:ad:de:0b:a1:be:d9:79:06:43:05:60:25:
98:3b:9b:92:47:93:db:7e:bd:11:1b:f4:57:87:b7:
f6:06:42:dd:65:f4:1d:fa:23:4b:e0:9e:29:fd:c0:
e4:c9:b3:89:5b:fa:41:3e:b6:84:ab:b6:eb:41:b6:
2f:1d:8a:37:76:a1:d6:65:f2:46:58:47:e6:3b:89:
27:da:92:05:4e:25:f2:32:15:2c:ff:ec:47:42:aa:
ff:14:71:88:74:c1:60:27:37:c1:0e:28:4b:69:3d:
b9:21:c5:53:23:d8:3f:5a:29:de:e4:d5:39:a1:fe:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:26:89:6C:C4:5C:70:16:28:2B:91:EB:6D:DD:F9:24:C1:9D:1A
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8512A03C8D7E11F196D17ADC3511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fea6::/48
Signature Algorithm: sha256WithRSAEncryption
25:5e:74:c3:54:a3:50:72:e6:1e:d5:8e:4d:90:e0:d3:d0:9d:
45:46:25:ea:71:ea:c8:16:06:d8:88:df:66:74:52:17:d2:1f:
97:f6:9c:63:05:a8:28:99:f1:48:11:ce:b8:09:a5:1e:4a:09:
58:a2:61:9c:a2:79:98:1d:0e:63:63:af:24:05:be:9e:17:9b:
1d:cc:bc:65:cc:8b:2b:fb:ca:1c:90:fd:62:2b:08:04:e7:c6:
b4:07:86:22:90:ba:35:c7:09:ab:27:69:e2:97:d1:1e:59:c0:
37:26:b4:6b:36:04:fb:f7:92:6d:84:d3:57:7a:1b:96:d2:7d:
cb:c3:12:6b:6a:6f:6f:7e:a5:4a:ba:10:7c:bb:69:ee:1f:93:
49:4e:7a:f6:9e:f4:ac:eb:be:34:c3:11:c1:f1:e9:b1:61:ec:
d6:2f:09:17:d6:07:84:0a:63:2d:e7:aa:02:9b:db:da:5f:f0:
d5:a0:e8:ba:93:5e:f1:33:a5:bc:8d:fc:2f:b4:9a:b3:42:60:
06:dd:86:a3:84:a1:ed:b2:19:cb:07:9e:00:31:e6:4f:a9:42:
62:c9:a6:34:d3:ee:1d:b2:20:e1:05:e7:10:ce:50:be:89:84:
d8:8a:b2:9d:79:53:68:5e:3e:8c:b4:ad:85:c5:2e:89:6b:56:
c5:56:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:48 2026 by rpki-client