
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/886506628D7E11F196D17ADC3511F970.roa
File: 886506628D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier: HRAXn4bDGRdAZNY5dw02wryMPULU1obSejPl8hJBUm8=
Subject key identifier: 34:2E:5B:E4:BE:9E:97:60:EC:2A:85:DA:E5:97:6D:26:16:4B:B1:6C
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1209
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/886506628D7E11F196D17ADC3511F970.roa
Signing time: Sat 01 Aug 2026 07:56:42 +0000
ROA not before: Sat 01 Aug 2026 07:56:42 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 138401
IP address blocks: 2406:840:fea1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4617 (0x1209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 1 07:56:42 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6da6ba-157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:30:dc:4d:94:06:e5:81:30:00:c3:ff:63:
34:99:16:42:7f:5c:7b:f9:9a:f4:11:af:31:1b:98:
e2:d2:81:3e:5e:39:79:c9:5c:5d:d1:a4:b8:80:8a:
62:48:52:63:84:c5:d9:ff:4d:81:7b:96:5d:e8:a5:
a2:27:3c:48:47:e9:c7:95:9e:34:65:cb:0e:19:8e:
42:64:75:32:8d:8f:18:ed:1d:87:6c:84:04:fb:ad:
c2:0e:90:88:b5:1e:8d:04:11:a9:1d:39:6f:be:8e:
93:eb:c2:e7:01:a4:70:81:1a:09:f9:63:d2:3c:c9:
87:a9:96:b9:7e:41:9e:52:a2:10:90:24:bf:b1:9d:
43:be:a8:7d:61:f0:20:fb:21:46:f6:dd:83:bc:96:
94:74:87:74:76:f8:bf:bb:e4:0b:fa:b5:38:d5:2d:
11:f0:7a:c0:cc:2a:e1:b5:ce:5a:b7:7f:89:c5:40:
e8:c5:2e:6a:c6:5a:85:40:9e:b1:b3:18:a5:f7:b9:
bd:64:81:4d:14:76:f5:de:01:02:72:a8:b8:d7:6d:
0a:1c:67:e4:e2:74:60:25:90:2c:bb:a6:cd:06:08:
58:0c:13:d8:54:7e:01:65:81:4a:be:19:87:32:42:
37:70:12:1b:69:ca:0c:c0:85:e0:e9:39:14:1c:4a:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:5B:E4:BE:9E:97:60:EC:2A:85:DA:E5:97:6D:26:16:4B:B1:6C
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/886506628D7E11F196D17ADC3511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fea1::/48
Signature Algorithm: sha256WithRSAEncryption
0f:5d:0e:0e:af:38:48:91:91:62:86:74:14:89:ec:b6:4b:81:
f0:3f:a4:8c:9a:37:5f:d2:1a:03:40:23:6d:8e:c7:be:89:cc:
0c:51:9b:a7:b1:b5:9f:5a:bb:43:5c:18:12:6f:93:15:6b:fb:
5b:2a:c1:76:78:a2:09:f5:bb:80:80:aa:cc:86:e2:a4:0b:50:
61:25:03:64:a1:09:a7:63:38:a1:c9:b8:e3:c3:34:8c:bb:5f:
ad:1d:f2:40:ce:b5:3a:18:a2:ee:b1:81:9d:44:0f:7a:f5:58:
a3:a5:0d:31:1f:f1:74:07:ec:52:96:84:1e:d9:ba:14:a2:fc:
34:f6:c6:a2:60:e3:4c:af:16:6b:cb:ad:a0:e4:12:eb:63:eb:
f8:73:8c:44:5d:d1:7c:9b:93:c1:9e:fb:a9:93:ce:e3:3d:09:
b6:fb:1a:d2:77:66:81:cc:08:b8:b1:f9:b7:2f:28:39:0f:74:
c6:b2:40:bc:5d:dd:60:5b:e4:38:0d:6d:9b:67:a4:95:90:e3:
0f:96:87:bc:d1:69:ff:dc:00:69:2e:5a:93:9b:78:ce:2d:f2:
d4:a5:38:f5:6d:44:b0:c8:33:c8:7b:cf:2e:93:a0:97:b6:99:
8b:89:e6:20:2e:63:08:dd:3c:b1:dc:ea:3b:90:37:9f:ca:bd:
49:9c:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:37 2026 by rpki-client