
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8ABAB9B4239E11EDAD3BA36BC4F9AE02.roa
File: 8ABAB9B4239E11EDAD3BA36BC4F9AE02.roa (raw, json)
Hash identifier: P6D31ubiMxSoATYQqNTMS9BNu81R8HXPLWqzv3XmEh8=
Subject key identifier: BA:0B:37:6F:CB:68:06:2D:1F:29:86:41:1F:C2:3B:2E:26:C8:BE:A9
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1049
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8ABAB9B4239E11EDAD3BA36BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:56 +0000
ROA not before: Thu 22 May 2025 20:07:08 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 150173
IP address blocks: 2406:840:fa00::/44 maxlen: 48
2406:840:fed1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4169 (0x1049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:08 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493b4-c58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:69:b3:ab:c0:9c:e3:d5:1c:b7:b4:99:82:
51:eb:d8:96:33:df:3e:69:99:6f:1a:81:e4:62:a9:
5e:a3:ac:ce:8b:d5:18:a9:67:bb:f2:63:f3:f4:bf:
34:b0:52:2f:36:6f:33:85:56:91:7a:f4:0f:37:73:
af:e0:90:82:bb:ec:03:2c:fd:79:7a:46:36:c4:9c:
58:e2:84:ec:cf:cb:d6:72:79:23:91:43:88:6b:d1:
7b:d7:c5:da:da:8b:05:1e:f6:9c:d3:ce:68:a5:da:
65:48:0b:d3:e5:dd:39:85:74:0c:56:77:9e:4a:6d:
8e:f4:e3:60:06:99:01:fa:f5:1b:5b:20:2d:04:15:
53:11:1b:ba:5b:fa:91:03:17:67:5c:b3:c1:31:22:
a7:7f:a5:05:cb:e5:e3:36:03:1e:49:01:88:da:1f:
38:cd:51:47:95:30:6e:32:f8:59:44:df:6b:85:21:
6a:eb:9b:27:c4:89:b3:b5:95:d0:22:b7:df:1d:4f:
90:30:9a:b6:e1:ed:67:49:ba:62:f9:86:7a:69:22:
6a:30:f9:bf:36:24:bf:4a:4f:9a:50:84:0c:25:99:
bd:1f:ab:3f:f4:75:4f:6c:67:d1:33:95:6e:d4:14:
41:e5:4e:d7:22:c0:d6:97:5f:78:d2:82:e9:27:14:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:37:6F:CB:68:06:2D:1F:29:86:41:1F:C2:3B:2E:26:C8:BE:A9
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8ABAB9B4239E11EDAD3BA36BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fa00::/44
2406:840:fed1::/48
Signature Algorithm: sha256WithRSAEncryption
3c:82:e8:82:86:f5:eb:77:2a:c8:0a:9b:a1:3b:c9:fe:93:a4:
88:02:ca:ff:6f:27:89:c6:2e:1a:0d:e9:c0:bc:ca:8b:97:6f:
bf:e1:18:c0:a1:35:39:1a:40:f7:a2:87:b8:47:52:ae:51:16:
5e:fb:25:10:7e:9d:7c:18:42:cb:01:e5:eb:81:dd:a1:32:f3:
92:bc:93:73:c8:c3:ca:16:92:1c:d3:08:e7:09:73:ac:b0:c9:
31:68:a6:6d:8a:d1:98:75:0f:ee:3e:06:f6:d5:71:d4:06:b7:
a6:96:c9:72:12:ae:c6:5f:7d:68:04:f1:fc:b5:a0:20:a0:8b:
37:a1:89:a9:36:c5:b2:b2:94:35:c1:a6:50:00:7b:3e:3c:28:
d7:fa:d8:38:e1:13:70:d1:8b:97:fe:ed:ea:46:3a:b8:6c:0c:
57:b7:e7:05:4c:ed:6c:34:a1:1f:19:e0:6c:ec:02:ed:ef:fb:
ae:cd:48:5f:51:30:53:0b:68:16:00:32:d6:51:b8:36:ee:a7:
c2:6a:66:e2:89:90:6e:25:3f:33:c7:26:e4:c7:49:d2:f2:b2:
72:18:e9:94:d6:ac:66:fb:6f:3d:91:e9:09:de:26:ee:95:f6:
97:19:40:48:c0:f7:c8:1b:3f:5f:89:a2:f2:bf:c1:68:8f:16:
38:e3:40:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:24:06 2026 by rpki-client