
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9818EAFC71DC11EFAC022E35C4F9AE02.roa
File: 9818EAFC71DC11EFAC022E35C4F9AE02.roa (raw, json)
Hash identifier: MhkfQs7hmWLdtEvyj2gMF64ov+hyopS1z5y2Me+G9Q0=
Subject key identifier: 06:7F:26:D5:14:71:16:8A:FE:EF:18:9B:1F:FB:A2:BA:E6:47:DF:B1
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1173
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9818EAFC71DC11EFAC022E35C4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:41 +0000
ROA not before: Fri 22 May 2026 20:26:41 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153331
IP address blocks: 2406:840:fca0::/44 maxlen: 48
2406:840:fea5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4467 (0x1173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:41 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc01-a6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:26:65:05:e5:df:f1:c9:68:61:f0:70:e4:
c2:d9:c3:e1:05:4e:90:19:ef:7b:64:f2:0a:ac:05:
68:ec:96:70:6d:5a:ba:7a:b4:c8:f5:d9:e8:59:f6:
94:89:78:1e:fb:24:a9:63:da:49:2d:ee:4e:f5:6a:
b6:4d:6a:1e:52:3e:cb:bb:1e:06:39:ad:8f:da:57:
ed:3a:0c:f2:66:f9:c2:d5:8a:c7:c7:e1:21:06:48:
b0:69:70:92:ed:9e:e3:0a:ef:3e:47:a3:4e:12:18:
d0:1d:ca:df:72:7e:21:bd:24:bc:52:5a:77:84:92:
7a:f5:d4:54:d7:42:5a:c2:5b:c1:9d:96:a8:8b:97:
e8:d3:2d:cf:3a:67:dc:e6:a9:e2:85:59:d7:4a:72:
64:80:2b:bc:d8:07:09:f9:6b:ce:01:e2:7b:07:10:
8b:cb:1c:3f:e9:bd:8d:25:2e:4d:0c:e9:f0:42:1c:
8b:93:ee:79:d8:73:f9:a1:59:a3:22:69:45:77:a7:
9b:1a:67:a8:09:3e:a0:e9:7e:83:88:fd:cc:36:88:
c2:d4:a4:e3:96:d7:7e:c2:33:50:dc:ba:d5:49:11:
b3:ec:4e:03:cf:95:fe:ec:e4:f5:78:3b:fe:47:f8:
95:3b:22:14:fb:ee:ac:16:0f:6a:f8:93:69:28:45:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7F:26:D5:14:71:16:8A:FE:EF:18:9B:1F:FB:A2:BA:E6:47:DF:B1
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9818EAFC71DC11EFAC022E35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fca0::/44
2406:840:fea5::/48
Signature Algorithm: sha256WithRSAEncryption
38:09:d6:97:e6:5e:1b:b1:be:39:31:1b:f4:1e:3d:ca:5d:1d:
b1:98:49:92:29:86:54:09:f5:61:e5:be:ff:42:09:dd:03:27:
a9:8e:c6:3d:1c:36:ff:be:98:7a:51:ed:90:83:03:dc:5d:d9:
1d:60:c1:d5:d5:35:ea:e0:ff:9e:45:1e:de:52:82:97:c7:f4:
ee:2a:f6:ef:f7:39:bb:e4:cf:fe:55:35:79:f3:66:62:32:2e:
dd:8f:62:5a:b9:16:82:9e:e2:bc:43:b1:bc:aa:c7:13:d6:b4:
4d:6d:3b:c5:48:5f:2b:65:88:34:89:b1:05:ad:b3:89:f6:a4:
0d:52:b3:62:9f:88:3f:34:a0:84:ae:3b:3e:7d:a0:f0:e6:87:
7e:9d:4c:d2:08:09:ab:b3:08:f0:5f:e1:d7:13:72:85:11:74:
dd:6f:a5:55:7e:95:f3:ff:e9:8d:53:c7:d3:2c:64:c7:bb:a5:
eb:e9:e6:8f:b2:1e:57:a9:20:8f:c2:9b:c6:11:e7:fb:1a:23:
db:91:67:26:c2:a5:b0:d3:b1:43:56:4f:99:d9:43:d8:4f:71:
97:ad:f1:29:3c:3d:d5:c6:5f:d8:f8:4c:ac:8d:16:5a:3c:78:
ac:ca:9a:57:25:3a:c7:ac:56:2b:f4:df:25:dd:8c:48:c6:a7:
e6:b5:e9:67
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICEXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNjQxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmMwMS1hNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAwmZQXl3/HJaGHwcOTC2cPhBU6QGe97ZPIKrAVo7JZwbVq6erTI9dnoWfaU
iXge+ySpY9pJLe5O9Wq2TWoeUj7Lux4GOa2P2lftOgzyZvnC1YrHx+EhBkiwaXCS
7Z7jCu8+R6NOEhjQHcrfcn4hvSS8Ulp3hJJ69dRU10JawlvBnZaoi5fo0y3POmfc
5qnihVnXSnJkgCu82AcJ+WvOAeJ7BxCLyxw/6b2NJS5NDOnwQhyLk+552HP5oVmj
ImlFd6ebGmeoCT6g6X6DiP3MNojC1KTjltd+wjNQ3LrVSRGz7E4Dz5X+7OT1eDv+
R/iVOyIU++6sFg9q+JNpKEXjlQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAZ/JtUU
cRaK/u8Ymx/7orrmR9+xMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTgxOEVBRkM3
MURDMTFFRkFDMDIyRTM1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAYIQPygAwcAJAYIQP6lMA0GCSqGSIb3DQEBCwUAA4IBAQA4CdaX
5l4bsb45MRv0Hj3KXR2xmEmSKYZUCfVh5b7/QgndAyepjsY9HDb/vph6Ue2QgwPc
XdkdYMHV1TXq4P+eRR7eUoKXx/TuKvbv9zm75M/+VTV582ZiMi7dj2JauRaCnuK8
Q7G8qscT1rRNbTvFSF8rZYg0ibEFrbOJ9qQNUrNin4g/NKCErjs+faDw5od+nUzS
CAmrswjwX+HXE3KFEXTdb6VVfpXz/+mNU8fTLGTHu6Xr6eaPsh5XqSCPwpvGEef7
GiPbkWcmwqWw07FDVk+Z2UPYT3GXrfEpPD3Vxl/Y+EysjRZaPHisyppXJTrHrFYr
9N8l3YxIxqfmteln
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:48 2026 by rpki-client