
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/96EE68188D7E11F196D17ADC3511F970.roa
File: 96EE68188D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier: 10zqQ/rALfSQ17lBeU/VIzCdq2eEubS/u56fdP2OO8Q=
Subject key identifier: C8:F1:27:A0:53:0E:27:1E:51:1F:CE:51:D6:00:F2:60:69:BC:42:16
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1215
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/96EE68188D7E11F196D17ADC3511F970.roa
Signing time: Sat 01 Aug 2026 07:57:06 +0000
ROA not before: Sat 01 Aug 2026 07:57:06 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152911
IP address blocks: 2406:840:fe9e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4629 (0x1215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 1 07:57:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6da6d2-7fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:ea:fc:e4:99:6a:d4:ab:18:0c:c3:23:c1:
9a:aa:af:f7:cb:9e:a8:14:32:36:60:9d:be:c4:8d:
a9:e3:46:90:b3:41:b4:da:6a:4d:05:06:97:64:68:
8f:7c:19:9a:6c:6e:6b:10:21:a2:cd:1a:3a:b6:e6:
e2:3a:17:f6:39:cf:50:3c:86:69:9c:fd:5d:00:39:
af:99:c5:f9:f4:39:16:c9:0a:9a:60:2d:01:25:dd:
fa:fd:f7:24:a7:6f:ab:38:cc:96:d8:a3:c0:07:00:
78:68:89:17:e8:28:6e:28:e5:52:b4:ab:9d:d7:ca:
7b:2c:93:d8:74:07:4f:60:20:ac:70:53:13:3f:92:
1f:e1:bf:d7:16:30:1d:41:6e:3c:c7:8a:d9:1b:e0:
d1:74:ad:35:eb:b2:22:a6:55:5e:05:32:f2:3d:50:
56:df:40:e8:77:ac:45:b2:df:de:51:20:80:ca:b2:
e4:75:78:4e:a7:da:00:10:2c:35:dd:86:6f:30:45:
9c:9b:b2:7d:83:6b:7f:8d:3e:a0:29:71:e1:e4:69:
bb:c4:76:f5:06:da:5d:21:d3:f2:0d:da:a2:1d:3a:
fa:4b:15:be:b6:a6:ba:a1:e1:02:2b:58:f1:b5:85:
f7:7a:95:3a:3b:96:94:58:e7:d7:86:08:6b:fe:20:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:27:A0:53:0E:27:1E:51:1F:CE:51:D6:00:F2:60:69:BC:42:16
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/96EE68188D7E11F196D17ADC3511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fe9e::/48
Signature Algorithm: sha256WithRSAEncryption
0a:a2:c2:35:35:62:98:13:d5:2b:7e:91:7a:c6:0d:06:06:ec:
72:00:dc:17:11:5c:a6:23:01:43:ed:8e:28:3e:1f:0e:96:40:
c9:c5:3d:c0:d2:61:31:d1:8a:f2:ff:e3:56:3c:0c:bb:3b:a5:
f6:4c:06:26:1b:66:d4:29:98:43:f5:ae:09:80:7a:c3:e8:9b:
9c:79:9f:63:3d:ea:b6:4c:17:7d:d2:60:0c:47:e2:1d:ba:25:
05:bb:77:69:39:e0:18:2d:ec:e0:36:f4:6d:3b:fa:4b:3e:d8:
33:86:0e:db:7c:c9:30:d6:73:13:e8:11:91:7c:76:ff:f4:54:
55:db:78:f7:4d:a9:8f:59:7f:71:c4:e1:4c:9a:55:ed:36:8c:
3c:87:87:46:7c:e8:15:b8:3b:ff:df:71:4e:74:18:21:8a:dd:
ba:63:7d:59:a3:67:75:f2:0d:49:d5:0b:97:f5:28:fe:24:aa:
d3:57:c5:b8:85:4c:6e:a1:7d:d6:33:ec:52:e5:08:c3:79:ef:
cd:93:f7:9b:4b:b2:a8:73:d9:9f:40:16:2a:73:35:f0:13:89:
34:ad:67:6a:ed:ba:b6:93:b6:28:97:e8:b4:ca:1b:27:fd:21:
72:78:ab:44:2f:2a:95:4b:5e:ec:ea:c1:fe:1e:bd:5e:f5:3e:
fe:94:30:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:45 2026 by rpki-client