
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
File: 98ABB92C71DC11EFAC022E35C4F9AE02.roa (raw, json)
Hash identifier: E2Mp8E/gPoWrYBb3AB2St/4TDagqs/G330YrH0pXN0w=
Subject key identifier: 4A:AD:36:FF:B7:5A:8A:F4:A1:0B:14:1B:84:19:3D:C0:5C:10:7C:50
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1074
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:35 +0000
ROA not before: Thu 22 May 2025 20:07:49 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153333
IP address blocks: 2406:840:fcb0::/44 maxlen: 48
2406:840:fea8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4212 (0x1074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:49 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493db-adf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:5a:74:60:63:92:c8:cb:9c:45:cd:5b:07:
73:13:bd:dc:b2:1c:75:60:1d:b2:f2:63:25:42:ac:
82:6a:a3:a6:be:3b:91:93:33:8b:ed:26:9a:a7:a1:
52:ca:14:fb:d4:88:d7:21:19:00:77:9b:71:45:3d:
a7:5b:fe:9e:1a:64:ac:0f:fb:1f:22:8f:5b:69:11:
ba:04:e2:31:70:10:89:cc:b9:5e:7d:9d:b8:33:9f:
c9:3d:21:6d:70:ea:8d:1c:23:dd:04:2f:5f:55:54:
5f:9a:22:4c:62:83:8c:62:ad:98:6e:3a:7e:fa:1f:
f3:00:db:48:a5:bd:dd:4f:9e:4e:f2:0a:e4:a7:81:
30:17:1e:fa:69:87:a5:c6:42:bb:d6:83:92:87:7b:
81:ee:df:61:00:b0:26:e6:71:36:83:e3:8e:4e:89:
d1:09:7c:51:42:b6:b9:03:48:bc:9f:76:2d:ec:99:
dd:d3:d3:ea:1b:87:3e:9e:ff:41:b5:a3:8d:cb:3c:
4a:d4:a0:89:8f:ea:cd:85:64:2d:da:dc:a1:fb:48:
93:32:5e:f5:20:4c:4d:16:55:45:a1:34:59:b8:cb:
06:9f:c2:f0:65:e8:d0:5b:cd:97:51:9b:77:2c:b6:
0c:5e:c1:f4:5e:9c:b6:ca:a0:37:4d:d9:39:3d:2b:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:36:FF:B7:5A:8A:F4:A1:0B:14:1B:84:19:3D:C0:5C:10:7C:50
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/98ABB92C71DC11EFAC022E35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fcb0::/44
2406:840:fea8::/48
Signature Algorithm: sha256WithRSAEncryption
5f:09:26:c3:0b:fc:61:1b:18:18:33:32:bf:b2:e5:c8:c7:67:
19:06:2d:65:da:71:7a:3c:2a:b8:b9:e2:47:e6:cc:d3:fb:43:
03:36:a7:7d:38:68:a1:b7:c7:54:fd:05:b0:2a:40:6a:63:b5:
1c:c4:db:b2:6b:46:13:98:ea:e9:95:af:8e:7a:0a:18:4b:06:
6f:a5:5e:41:3a:af:bb:c9:8b:a1:ab:6f:8b:9b:0a:78:a7:73:
4a:07:3c:25:a3:ff:06:b1:d0:2f:a8:83:dd:8f:d5:45:b5:96:
6e:13:1e:fa:11:e6:de:a2:f0:06:da:ac:cd:12:ae:10:76:29:
b1:f7:91:f1:a9:27:02:6f:ad:59:4d:d5:88:63:4f:22:a8:ca:
55:3b:b2:f4:f7:4f:9e:30:c9:ba:ca:fc:2a:cc:79:88:f0:70:
bd:ce:e1:d0:2f:c3:d3:7a:d1:51:30:19:7e:8f:19:a1:84:a3:
6a:16:89:2f:8e:5c:fc:cc:a7:2f:c3:76:e7:8c:ee:9e:3d:57:
9c:3b:68:ca:82:f2:8b:ee:58:48:c5:fa:d9:0a:d5:28:7a:5e:
c7:25:ff:51:72:88:4e:06:b0:2c:04:19:74:02:3d:77:05:8f:
d4:55:09:14:81:2d:1b:3e:c7:57:03:69:a7:e8:16:b5:59:32:
05:3b:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:24:43 2026 by rpki-client