
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8AFE59788D7E11F196D17ADC3511F970.roa
File: 8AFE59788D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier: YGqdFspvsxJmqtdDEpOtOh05s2uwrDOaIc95IT2lxpg=
Subject key identifier: 40:EB:61:A1:9E:6E:04:36:1E:84:C6:E1:C2:BF:9F:F9:44:3C:F0:C2
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 120B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8AFE59788D7E11F196D17ADC3511F970.roa
Signing time: Sat 01 Aug 2026 07:56:47 +0000
ROA not before: Sat 01 Aug 2026 07:56:46 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 142553
IP address blocks: 2406:840:fef3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4619 (0x120b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 1 07:56:46 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6da6be-89ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:da:20:3f:eb:18:e7:0e:ca:be:2a:89:a3:
9e:9b:29:b9:53:07:98:99:42:16:45:c7:37:4a:07:
e0:99:89:09:64:4d:6a:a6:f5:37:0f:f6:6c:ba:6f:
8e:b0:9a:39:42:67:3e:2e:74:10:8c:ba:2c:75:cb:
95:3d:12:1b:95:1c:a4:2b:91:03:b0:4e:0d:90:f2:
fc:48:c9:7f:f3:fc:f9:d9:bb:f8:92:52:89:39:0c:
24:66:bd:00:5b:9b:0c:7a:1b:fa:76:79:f9:42:b0:
44:f6:f1:06:62:83:05:5b:88:1b:10:2f:5a:29:08:
de:21:57:ac:4d:b6:54:55:f7:64:ab:ec:47:60:1a:
82:87:19:ea:c0:90:53:0e:23:8d:0c:3c:dc:39:6e:
12:87:9a:b0:cf:db:a5:83:66:a0:a3:f8:f1:d7:ca:
20:8c:d0:9a:78:7c:7d:b3:62:5e:5f:c4:61:2a:43:
6d:c7:9a:a4:ce:7c:ea:47:5a:1d:06:aa:f6:c9:80:
df:f9:0f:4a:b0:28:7e:05:15:fd:d3:fb:0f:3e:c3:
25:df:8a:a3:f6:00:2d:56:f3:84:a6:8e:b1:a8:67:
66:06:46:67:af:95:30:fc:3c:e0:50:68:1b:1d:42:
f4:a5:39:92:c4:aa:93:ca:8d:39:fa:1f:35:17:b0:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:61:A1:9E:6E:04:36:1E:84:C6:E1:C2:BF:9F:F9:44:3C:F0:C2
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8AFE59788D7E11F196D17ADC3511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fef3::/48
Signature Algorithm: sha256WithRSAEncryption
32:0a:ab:51:b4:86:bb:0b:25:59:e0:1a:1f:47:63:ea:34:f7:
5c:97:73:90:84:6f:74:e1:86:39:9e:b0:5d:e6:da:92:3b:21:
19:df:42:0c:43:c4:3a:d5:ce:2f:53:6c:11:28:5b:ce:ba:cb:
6e:f7:b4:08:55:0c:80:0b:5c:1b:cb:f2:54:d0:83:84:6c:fd:
d6:0e:e2:ed:c7:3e:61:e9:d1:57:60:70:19:14:92:7c:90:37:
6f:4a:fd:88:15:d6:92:c3:00:06:1e:02:63:48:29:73:88:f5:
2e:c2:03:74:1b:74:9a:a8:a3:31:62:cf:b8:1c:51:84:c7:21:
2e:52:f8:25:7a:29:34:18:c7:1c:51:be:84:7f:aa:ec:a4:66:
e6:fe:a4:77:3b:11:98:a7:78:89:66:80:8a:ed:0a:b5:c1:21:
80:b4:c6:62:ad:2b:80:9d:2e:17:a1:92:c3:c7:78:58:23:6b:
02:60:e5:27:54:74:26:be:1f:4d:4d:3b:86:6f:1a:25:39:35:
cc:f5:2b:fa:2c:53:8b:22:dc:a4:e3:9a:fd:fd:73:40:9e:5a:
39:12:e2:5a:8e:fc:d3:ed:d6:e6:27:58:ce:b4:29:de:31:3e:
7f:87:2b:d8:31:3c:ee:6b:a1:ef:01:d3:9a:23:51:1a:31:fd:
5e:d0:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:37 2026 by rpki-client