
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/95CADDEA8D7E11F196D17ADC3511F970.roa
File: 95CADDEA8D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier: jsUozS+HUD3nl2x9ZzUUDLMq8wDEsp4vsb7SGGKoINM=
Subject key identifier: 22:E3:21:7D:D1:C1:13:24:CE:D3:6A:01:00:96:EB:D2:2A:28:37:F8
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1214
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/95CADDEA8D7E11F196D17ADC3511F970.roa
Signing time: Sat 01 Aug 2026 07:57:05 +0000
ROA not before: Sat 01 Aug 2026 07:57:04 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152118
IP address blocks: 2406:840:fec4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4628 (0x1214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 1 07:57:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6da6d0-0e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:b1:ed:9c:f5:e4:ff:92:70:eb:1b:5b:be:
c7:c3:b2:04:f9:76:e7:5b:7c:17:12:b0:50:7d:e2:
d8:af:e0:56:25:e9:6a:ad:1e:79:e2:1d:4a:c2:cc:
55:a7:25:6f:53:e0:2c:9a:2b:d8:8f:e6:b7:b0:0c:
ff:14:19:c3:e6:ab:45:28:4d:f5:f8:3c:0d:6c:69:
f5:df:19:74:04:c9:38:c9:f7:a5:cb:bf:06:78:e3:
0e:36:96:fa:84:8b:3c:fc:81:89:86:46:ce:84:78:
07:9a:0f:6a:dd:ef:c6:14:7a:c8:29:c6:43:19:b2:
e3:f5:f8:1c:e9:5a:ba:34:fe:60:90:4e:86:2e:fb:
cc:0c:5b:a8:af:86:d9:f4:65:bd:d1:3e:e7:1f:90:
eb:56:dc:cc:88:41:87:b1:3d:ac:9d:da:47:2a:4b:
35:bb:96:06:d0:9b:6b:cb:96:40:21:aa:3c:af:70:
69:86:ff:b7:77:11:77:ba:e2:bb:10:ba:14:81:73:
ee:16:55:39:dc:c5:79:b1:b5:01:65:43:c7:72:4a:
cd:e0:10:da:c8:ae:fd:36:ca:be:91:05:64:20:62:
e1:81:6f:b5:42:5c:2d:06:13:2b:c7:51:7a:a8:ad:
f8:5c:55:50:81:de:5d:b0:a1:98:2c:f4:34:62:b5:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E3:21:7D:D1:C1:13:24:CE:D3:6A:01:00:96:EB:D2:2A:28:37:F8
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/95CADDEA8D7E11F196D17ADC3511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fec4::/48
Signature Algorithm: sha256WithRSAEncryption
28:4a:a9:d4:ae:1d:49:d6:5c:37:d2:5c:92:c1:5b:56:78:6a:
93:da:14:2c:d6:57:14:3b:4e:a9:04:ab:99:1f:9a:d8:80:87:
ef:cd:ff:24:13:01:fc:45:05:79:cc:42:3e:17:3f:be:7a:83:
60:d9:86:42:99:40:c5:10:cf:88:03:79:54:30:82:57:00:c2:
d7:e6:6d:a3:e7:39:0d:16:a6:82:81:b9:ec:af:fc:06:a9:56:
6a:50:70:4a:00:a6:7b:49:50:51:38:27:50:76:99:eb:f3:87:
aa:56:fe:76:f0:29:e3:26:67:4b:09:78:e8:85:55:2a:f5:e5:
a7:bf:48:00:40:37:13:f7:d7:a3:9c:69:15:4f:fa:2b:75:56:
10:37:15:33:71:91:c1:f3:b4:76:0f:ef:a5:4b:3d:88:dd:54:
cb:94:bc:97:47:31:52:4d:d1:9c:8f:fb:2a:32:c3:9d:d6:04:
95:40:44:55:23:4a:7d:e1:21:0b:b9:bd:65:f9:fa:b5:df:1d:
f8:27:7e:3b:46:d6:79:24:03:89:a3:9f:04:60:fe:6a:08:b8:
51:1a:f1:48:99:34:04:26:39:6d:a8:de:95:f7:07:f8:53:24:
22:52:ab:37:4e:9e:ec:2d:66:76:54:e9:89:6c:3c:ed:d1:3b:
cd:66:d4:9b
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwODAxMDc1NzA0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkYTZkMC0wZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26ix7Zz15P+ScOsbW77Hw7IE+XbnW3wXErBQfeLYr+BWJelqrR554h1KwsxV
pyVvU+AsmivYj+a3sAz/FBnD5qtFKE31+DwNbGn13xl0BMk4yfely78GeOMONpb6
hIs8/IGJhkbOhHgHmg9q3e/GFHrIKcZDGbLj9fgc6Vq6NP5gkE6GLvvMDFuor4bZ
9GW90T7nH5DrVtzMiEGHsT2sndpHKks1u5YG0Jtry5ZAIao8r3Bphv+3dxF3uuK7
ELoUgXPuFlU53MV5sbUBZUPHckrN4BDayK79Nsq+kQVkIGLhgW+1QlwtBhMrx1F6
qK34XFVQgd5dsKGYLPQ0YrWqqwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFCLjIX3R
wRMkztNqAQCW69IqKDf4MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTVDQURERUE4
RDdFMTFGMTk2RDE3QURDMzUxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAYIQP7EMA0GCSqGSIb3DQEBCwUAA4IBAQAoSqnUrh1J1lw30lyS
wVtWeGqT2hQs1lcUO06pBKuZH5rYgIfvzf8kEwH8RQV5zEI+Fz++eoNg2YZCmUDF
EM+IA3lUMIJXAMLX5m2j5zkNFqaCgbnsr/wGqVZqUHBKAKZ7SVBROCdQdpnr84eq
Vv528CnjJmdLCXjohVUq9eWnv0gAQDcT99ejnGkVT/ordVYQNxUzcZHB87R2D++l
Sz2I3VTLlLyXRzFSTdGcj/sqMsOd1gSVQERVI0p94SELub1l+fq13x34J347RtZ5
JAOJo58EYP5qCLhRGvFImTQEJjltqN6V9wf4UyQiUqs3Tp7sLWZ2VOmJbDzt0TvN
ZtSb
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:47 2026 by rpki-client