
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9D9452588D7F11F1A8F36C833611F970.roa
File: 9D9452588D7F11F1A8F36C833611F970.roa (raw, json)
Hash identifier: mKowk35yX1b1Jl9W+h4E4TM28Is1bdYxSpMXYDIh8sw=
Subject key identifier: 7E:E4:1C:BA:C7:F7:91:77:00:16:00:70:78:03:48:FC:35:82:48:3E
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1233
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9D9452588D7F11F1A8F36C833611F970.roa
Signing time: Sat 01 Aug 2026 08:04:27 +0000
ROA not before: Sat 01 Aug 2026 08:04:27 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 138535
IP address blocks: 2406:840:feab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4659 (0x1233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 1 08:04:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6da88b-9fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:07:c6:95:94:22:4e:6d:6e:39:f8:6f:0a:
22:13:81:ff:71:13:aa:7f:a0:a2:e7:02:99:54:67:
c3:10:81:28:98:4c:e5:bf:86:9b:17:0c:04:b5:a9:
c7:56:7a:cb:ec:e2:0c:10:02:52:91:e1:69:d0:28:
f4:3e:1c:95:45:32:aa:92:17:b8:f8:88:30:b3:ed:
d1:ea:32:5f:91:12:2c:e4:47:8c:6f:16:85:9f:e7:
26:46:31:67:64:7d:10:4e:84:21:84:7c:be:6e:9c:
96:15:c3:48:f0:81:60:7f:cd:20:93:aa:b7:6e:bf:
13:27:96:01:9b:8d:d9:af:5f:1c:2b:d3:11:be:1c:
22:0a:e8:56:3f:c0:3e:20:d8:b9:e4:cc:75:8e:bb:
9c:78:93:d4:a0:20:01:b9:48:41:5c:5d:e7:9f:62:
94:d0:10:eb:47:2a:c2:4c:53:bc:6d:1d:c6:41:9a:
b8:5b:0e:dd:1d:2b:33:3a:e7:35:03:8f:dc:a0:f4:
38:02:04:a2:59:da:10:79:f1:05:10:73:18:3d:2d:
81:d4:49:3d:40:29:8e:f3:1e:50:98:68:cf:e0:73:
2f:3f:73:8d:c6:56:75:9b:39:dc:8c:52:bd:c7:0e:
09:7e:d6:e6:59:7a:2d:da:c3:9f:6e:d1:36:b0:61:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:1C:BA:C7:F7:91:77:00:16:00:70:78:03:48:FC:35:82:48:3E
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9D9452588D7F11F1A8F36C833611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:feab::/48
Signature Algorithm: sha256WithRSAEncryption
37:b0:53:3c:f5:47:3a:c9:68:59:c5:4a:b0:e5:98:23:48:40:
b7:1c:9b:02:49:cf:ec:47:50:e3:32:16:1a:c6:23:d5:2a:d2:
95:38:f0:67:85:41:a4:4b:c2:cc:47:9a:aa:5e:00:a8:d2:56:
48:b9:84:7d:24:3f:7f:f6:06:61:eb:7f:c2:2d:fb:b9:24:5c:
5a:94:1e:a1:c2:d4:e8:cb:bb:2e:71:51:c4:8f:86:ca:2f:e2:
0b:c2:f2:86:bd:89:68:fe:7c:16:8a:2e:39:5e:bf:81:a0:c8:
ea:e4:10:a6:2c:72:b8:b0:ad:9e:5d:11:01:56:e4:ea:e5:91:
64:18:39:e4:8a:a9:a6:34:51:f8:c7:7f:dd:db:df:e7:8d:cd:
54:de:94:5c:1b:02:7b:07:d9:0b:a2:36:51:6c:80:9b:9b:43:
ca:2f:99:81:96:26:47:e1:ed:ec:69:09:1f:86:7b:0c:bf:ec:
6d:71:29:56:49:64:43:16:5d:83:16:ae:39:f6:05:9c:dd:1c:
73:3d:22:be:0b:af:ed:62:47:f4:96:2b:a8:67:7d:35:10:6b:
66:5b:2f:c0:2e:9b:47:a5:44:6e:13:5d:ef:73:3c:62:58:5e:
73:77:9f:98:15:d8:18:b5:93:c6:77:2e:45:4e:49:a4:ef:12:
7d:df:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:14 2026 by rpki-client