
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/981F16B8AD3711ED87EC630DC4F9AE02.roa
File: 981F16B8AD3711ED87EC630DC4F9AE02.roa (raw, json)
Hash identifier: pJvRKFPnk59eV55Ff7XmCG2CoLXiMY5qpqCol8MJUS8=
Subject key identifier: 6C:82:4D:27:FF:C5:BA:90:D4:35:B0:28:6F:42:E8:A5:A6:E3:1F:39
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1145
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/981F16B8AD3711ED87EC630DC4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:15 +0000
ROA not before: Fri 22 May 2026 20:25:15 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 142553
IP address blocks: 2406:840:eb00::/44 maxlen: 48
2406:840:fef3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4421 (0x1145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:15 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbaa-1725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:8e:4c:47:b6:b6:b3:83:ef:56:71:a7:45:
90:5f:5e:f2:a3:52:4c:90:fb:7f:08:97:20:8c:3f:
62:3b:f7:5f:97:55:a9:60:07:63:53:04:49:92:ae:
b5:5f:be:d0:2e:5e:c8:ad:cd:67:dc:9b:9e:97:f7:
73:84:1a:c2:31:ea:82:27:85:1d:de:0b:04:98:f1:
22:1f:5b:8d:2b:25:5f:5a:9e:9d:6e:05:c2:bd:fc:
26:89:0f:69:2b:92:44:87:b3:5b:c0:fb:17:f1:10:
51:59:51:e7:20:37:c8:4d:f3:9d:2b:83:52:53:54:
5b:5c:49:74:66:17:f5:58:d4:97:58:66:f0:75:19:
a5:09:90:0f:19:e8:82:a2:20:61:2d:e3:08:e4:1a:
1e:33:72:f0:b6:a4:43:05:84:47:75:ab:bb:7f:26:
c2:ad:8e:eb:f7:2e:9a:c4:c0:78:35:20:64:37:50:
ea:b9:71:cb:b8:c7:b3:7a:7e:bf:d9:91:f2:7b:0a:
16:78:1d:c4:e2:b6:18:d7:8f:ca:de:e3:92:89:22:
73:7c:27:c8:9a:6c:34:f0:49:1c:3a:14:7c:18:2d:
9a:cb:7b:d9:82:2f:bd:4a:4e:c4:51:b0:27:63:38:
02:5e:e8:5a:50:fa:1d:90:e2:e6:9b:f6:7d:3a:ca:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:4D:27:FF:C5:BA:90:D4:35:B0:28:6F:42:E8:A5:A6:E3:1F:39
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/981F16B8AD3711ED87EC630DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:eb00::/44
2406:840:fef3::/48
Signature Algorithm: sha256WithRSAEncryption
47:e4:b4:d8:9b:de:80:eb:97:90:b2:f2:5d:11:c1:ff:ed:1b:
f9:9b:ca:10:c1:0b:ae:16:7b:47:04:c8:0b:c2:84:13:e9:68:
24:58:23:ab:01:40:f7:b6:89:f8:12:ca:f5:94:76:03:ad:81:
ff:06:80:59:84:f9:59:34:0a:a9:83:53:bb:9e:06:cd:bb:40:
85:64:7c:2b:2f:65:38:e8:24:29:19:36:ad:5e:c3:09:56:37:
84:a9:cb:7e:7b:c0:33:dc:aa:98:52:2d:7d:a1:d5:bb:74:4d:
db:e7:27:ae:c7:50:07:b2:88:c6:9a:68:81:d8:80:cf:c9:53:
5f:cb:6f:b6:cf:76:da:e0:04:a9:59:26:ea:97:90:b4:76:3c:
d8:64:83:1f:6d:35:55:c5:e5:cf:c1:a9:65:81:c2:c0:53:1e:
93:5d:cc:be:99:55:d5:6d:79:9e:3c:33:56:31:11:31:c6:aa:
49:f5:77:8c:66:5c:0c:b5:1a:c8:79:0e:d9:f0:d1:b8:18:b8:
af:fe:11:6d:87:6a:7d:38:8a:d9:ae:f9:1d:d2:ad:3c:50:91:
2e:cc:7b:0a:73:ed:d9:db:ac:1b:49:54:1c:80:be:40:fb:06:
8b:bd:2c:5d:fd:91:60:43:67:6f:13:bd:c3:2e:71:b4:ae:fb:
95:fb:19:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:28 2026 by rpki-client