
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
File: 98ABB92C71DC11EFAC022E35C4F9AE02.roa (raw, json)
Hash identifier: 1Gr1kEKQDYISOKNxaEdXt0IByhzJntrv6aVibJ2j2b0=
Subject key identifier: B5:64:14:27:28:80:87:D0:B4:CC:2D:9E:8F:DA:B9:9D:AA:CF:41:CD
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1175
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:45 +0000
ROA not before: Fri 22 May 2026 20:26:45 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153333
IP address blocks: 2406:840:fcb0::/44 maxlen: 48
2406:840:fea8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4469 (0x1175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc05-902a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:fd:a5:cd:eb:0f:98:46:80:a2:ff:f5:15:
af:1f:18:32:c7:df:14:d5:03:6b:0f:af:4f:e0:2f:
74:22:26:6b:41:98:7b:7e:2f:3c:fa:cd:05:74:18:
84:e2:19:3f:5a:0d:65:c0:69:43:b1:80:d9:d1:40:
ac:66:f3:fd:f8:6e:19:41:30:5e:5b:aa:ff:98:fd:
0c:5c:31:bd:4b:4f:5a:e9:07:43:25:28:49:42:9f:
fa:be:01:b7:0f:49:0b:60:82:48:d2:45:59:29:f6:
40:df:14:e0:58:b5:61:81:64:1c:1e:93:5c:10:bc:
89:65:8f:1a:6b:12:56:05:27:f1:02:32:45:50:2e:
fd:e7:d8:d0:17:54:f2:5e:c3:49:04:e7:d5:c9:0b:
25:67:c5:6a:3a:e8:22:13:f1:b7:65:fd:70:6f:48:
55:80:13:f7:60:dc:ba:c4:e9:59:86:46:bf:49:c2:
df:15:17:58:e2:41:ac:b2:ff:d2:73:a5:99:2e:2b:
c7:b4:57:79:2c:61:8e:6d:63:9e:45:cc:f8:5a:2e:
c4:f0:3a:25:18:eb:18:9a:a6:19:9a:a6:ef:39:00:
c9:b9:f1:ed:96:67:11:36:47:30:f3:0d:e0:f3:4e:
55:7e:03:70:e9:6b:fc:e2:d3:5b:b4:6a:93:28:13:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:14:27:28:80:87:D0:B4:CC:2D:9E:8F:DA:B9:9D:AA:CF:41:CD
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fcb0::/44
2406:840:fea8::/48
Signature Algorithm: sha256WithRSAEncryption
a0:50:a1:43:3a:cf:30:ca:03:19:3e:e4:95:06:28:d5:f8:af:
78:93:4c:04:68:ef:82:dd:8c:c3:09:e7:ce:ed:f4:6b:2a:42:
79:ae:77:15:42:ec:73:90:6e:f4:07:d5:6a:92:9a:6e:ac:58:
57:d2:9c:23:63:b8:08:e4:0b:e1:51:3e:bc:dd:0f:6c:83:fa:
34:42:18:01:0b:21:cb:cd:9c:37:ae:12:ed:d1:6c:05:b7:51:
e2:76:63:7d:a6:75:c1:ec:06:3c:8c:54:5c:80:9a:04:90:9f:
6b:81:d4:4b:85:4f:1d:13:18:de:50:83:19:d7:ed:61:ca:3b:
0e:e1:7b:20:0c:ec:60:65:d0:fd:e7:5f:d2:fb:65:14:9c:5f:
a8:2f:c2:83:6f:90:1c:92:d0:a2:78:11:41:44:6c:06:f6:92:
11:0a:c9:1c:bb:0a:42:a8:76:bd:f4:79:15:b0:06:85:50:3a:
8d:c5:33:c4:ac:a5:f5:a0:a6:9b:34:9d:7d:3c:14:8b:ab:77:
9e:37:b7:f3:51:1a:15:34:8a:30:6e:db:52:d0:03:5d:b3:d6:
89:6a:20:05:b5:8f:1a:d0:c8:9b:0a:38:05:68:9b:d8:b8:aa:
a1:88:f0:6f:38:1a:bf:16:ff:cf:4b:19:8d:14:12:07:d5:ed:
7c:e7:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:11 2026 by rpki-client