
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/979DE50A71DC11EFAC022E35C4F9AE02.roa
File: 979DE50A71DC11EFAC022E35C4F9AE02.roa (raw, json)
Hash identifier: XLSkp9KDGNM2R5U+9ddjW2+UThZIXrToMzwLGdWZl0c=
Subject key identifier: 8E:2F:81:2C:3A:01:E0:1F:D9:1A:D6:14:1C:C2:9F:0F:B8:84:C0:EF
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 114B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/979DE50A71DC11EFAC022E35C4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:26 +0000
ROA not before: Fri 22 May 2026 20:25:26 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 149510
IP address blocks: 2406:840:fc90::/44 maxlen: 48
2406:840:fea7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4427 (0x114b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:26 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbb6-4a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:a1:bd:8d:71:f3:73:ef:7b:57:da:4a:49:
28:fe:91:6d:53:8c:48:de:97:dc:1b:6f:85:5a:d5:
d7:8b:53:10:8e:98:a8:f4:a7:cf:62:5a:9a:b9:61:
6d:ac:6d:89:73:b7:0f:3e:6d:11:c2:22:4b:43:da:
ab:0f:f8:88:70:1b:1f:69:df:3c:df:b0:71:38:dc:
4b:64:15:41:6a:6e:29:ef:84:f1:49:5e:f9:d4:58:
e2:7d:6d:f5:f0:d5:e8:2b:8b:d6:33:d3:6e:87:f5:
74:a9:4b:50:e9:3e:a7:76:c8:25:d0:82:6f:65:1c:
9e:1f:8b:41:7a:50:b0:f8:b6:43:74:20:79:0a:c3:
b7:c7:ff:a4:15:21:7d:74:0e:08:c0:73:cd:5f:ef:
7f:61:ac:26:9c:4a:35:34:d5:d8:78:8f:4f:1b:87:
6f:bd:2a:07:26:fd:c2:19:7a:9c:49:a4:40:dc:c7:
3d:24:53:7c:04:23:2c:2e:36:09:44:ab:18:89:59:
76:43:2d:ba:d9:92:5e:39:f6:73:6e:83:fe:a9:bf:
6c:fe:a7:94:85:99:05:96:a8:84:2b:cd:11:5e:db:
c2:a1:8c:06:45:06:21:a3:47:65:64:ec:ee:9e:f0:
c3:47:d5:fa:ab:96:9a:38:38:ab:66:23:d0:b4:34:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2F:81:2C:3A:01:E0:1F:D9:1A:D6:14:1C:C2:9F:0F:B8:84:C0:EF
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/979DE50A71DC11EFAC022E35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fc90::/44
2406:840:fea7::/48
Signature Algorithm: sha256WithRSAEncryption
6e:e2:a0:f3:db:a4:25:c5:0d:3c:07:60:5c:15:bb:d9:23:8e:
53:84:b2:5f:25:2b:2c:7f:8c:fe:5e:c1:06:99:65:87:04:a4:
6e:2f:ce:c7:b0:07:81:2e:b4:42:5f:7d:38:d7:9c:ff:db:23:
ba:4f:40:ca:81:b8:e8:0a:40:76:6a:95:3b:90:ac:c6:4a:39:
72:09:87:59:d4:54:2c:39:54:1f:91:3c:d7:04:5e:63:53:74:
70:48:7d:3b:a6:4c:65:6b:71:81:e2:06:5b:f4:81:41:8a:50:
db:c7:1f:6c:c9:d6:2e:06:b7:7d:f8:9c:ee:77:c7:d2:2f:07:
0f:82:7c:8b:2e:ca:a2:2e:9f:21:71:a6:07:47:4e:67:da:51:
cf:b3:6d:91:d1:1c:6e:8d:10:81:6f:6d:35:e9:a6:52:5a:2b:
77:ca:54:58:5b:30:ed:4a:ab:d7:2d:d4:47:83:5f:5d:aa:aa:
31:19:a9:b5:76:8e:4d:c4:6b:f8:90:ab:f6:32:a3:a3:15:59:
ca:0d:a9:c9:5c:54:21:bd:37:f7:07:fe:7e:96:af:f3:1b:6b:
3c:5d:81:1b:2d:7c:f2:b1:91:ed:ec:36:dc:42:16:ac:de:84:
d2:19:ae:19:1d:b5:e6:57:db:e4:65:ba:0b:7a:39:90:09:df:
01:71:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:10:45 2026 by rpki-client