
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8C3FFF5ED31D11EDA062A43DC4F9AE02.roa
File: 8C3FFF5ED31D11EDA062A43DC4F9AE02.roa (raw, json)
Hash identifier: xy49p1WpQMwNrDOIsi4fSnaCTeursQiJTslXnJxk/cY=
Subject key identifier: 09:D4:85:87:7F:05:7D:D8:A7:65:C5:34:96:17:C7:15:A0:23:EB:A6
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1079
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8C3FFF5ED31D11EDA062A43DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:40 +0000
ROA not before: Thu 22 May 2025 20:07:54 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 199310
IP address blocks: 2406:840:9680::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4217 (0x1079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:54 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493e0-b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:ae:52:3d:7f:05:d2:77:86:93:3a:57:64:
1e:2a:08:22:f9:73:eb:a6:b8:4e:b4:0c:b6:e8:8a:
5c:f7:9d:9b:5c:b9:7e:ae:cd:40:2a:a0:82:2b:91:
ea:6a:95:4f:e9:6d:e8:3c:e9:25:0b:91:4c:6e:c7:
4e:a0:ba:b5:9f:7e:42:b1:1a:28:99:ee:31:c9:a2:
b0:2d:13:04:4a:b3:13:64:f2:66:41:13:0c:81:31:
ee:18:5a:4c:2f:55:b9:b1:2b:ec:6a:b5:e9:61:14:
a7:aa:d9:7e:47:f0:43:e9:89:29:9b:9a:14:39:74:
d0:d4:b4:65:ea:db:98:e1:1d:16:2b:6e:13:02:dd:
db:8a:9e:91:ac:8b:c4:8f:ec:bf:82:b9:0a:52:79:
8f:ea:48:dd:dd:71:4d:22:7c:42:72:e5:a3:76:8c:
0d:53:3d:3c:77:9f:36:be:e7:21:a4:51:b0:90:41:
3a:4e:ad:f4:56:4d:04:47:c0:27:57:2a:dc:c4:d6:
af:13:ab:70:9e:6e:81:fa:47:4d:fd:4f:1e:c0:98:
63:ad:86:c9:87:71:7c:fa:13:91:cb:51:9c:52:d2:
f2:ed:4f:ad:cd:ef:60:98:88:83:0a:8e:fb:1c:a5:
85:0e:ca:29:3a:3b:8a:5c:01:3b:d5:64:5e:0b:70:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D4:85:87:7F:05:7D:D8:A7:65:C5:34:96:17:C7:15:A0:23:EB:A6
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8C3FFF5ED31D11EDA062A43DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9680::/44
Signature Algorithm: sha256WithRSAEncryption
5b:09:5c:0f:37:29:49:4a:62:d4:7d:87:31:75:f6:90:1c:d2:
1d:f1:63:10:d4:7f:e4:53:d6:2e:c8:ff:26:1f:d6:44:a1:b7:
88:09:ce:a8:69:f6:e7:44:9b:07:f6:4a:c8:a2:f9:d2:36:24:
c4:2d:b4:c9:00:03:65:c2:41:af:46:e4:56:4e:35:6a:59:98:
b0:82:06:19:f0:b6:b7:54:62:34:42:7d:92:b9:de:fe:d8:2c:
a8:a2:d1:6a:2d:a2:4d:64:23:14:c7:c8:0a:5b:ef:44:7a:73:
c1:f9:9b:ea:c9:ef:e4:8b:41:1b:d2:ca:a8:3a:83:fd:9e:9b:
38:4d:b2:75:11:33:25:ff:0f:5f:83:ba:70:48:f7:25:4f:27:
be:98:17:03:0e:30:3c:b9:b2:c0:c0:f6:7b:a4:e7:a9:cf:ea:
48:31:0b:ec:eb:02:74:28:33:96:5d:ff:78:87:3c:26:5b:29:
01:55:31:bb:3d:38:fc:84:6a:ae:e3:86:ca:3e:79:45:8e:4b:
30:d0:96:14:e7:bf:89:99:e8:0d:00:b3:e4:1d:c1:98:e3:0d:
98:09:68:d1:02:12:dc:b3:3a:40:05:c1:0c:67:ff:60:4a:5a:
b4:13:7e:d0:e5:0b:90:bd:7d:d3:50:7c:bd:7a:2f:41:dc:06:
0d:ee:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:28 2026 by rpki-client