
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9FB5A0B08D7E11F196D17ADC3511F970.roa
File: 9FB5A0B08D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier: 3ok9O+dyPOgSmKAmrr4NAcVILvMNlPi4T7i8WRn5ZD0=
Subject key identifier: D2:20:2C:E7:1E:AE:D8:63:DB:E0:9E:59:70:4C:82:6F:3A:F7:E5:62
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 121C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9FB5A0B08D7E11F196D17ADC3511F970.roa
Signing time: Sat 01 Aug 2026 07:57:21 +0000
ROA not before: Sat 01 Aug 2026 07:57:21 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153170
IP address blocks: 2406:840:fe98::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4636 (0x121c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 1 07:57:21 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6da6e1-7578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:e7:02:f5:59:86:57:8f:5d:fb:2c:de:7f:
cf:73:4e:c9:14:46:7c:3b:49:eb:83:7c:41:ac:f9:
77:43:84:d5:2e:23:87:b5:90:69:6f:7b:26:f9:98:
48:c8:8f:2b:b3:33:cd:1c:2d:88:71:36:02:99:c6:
0e:1c:ef:35:ba:6e:78:83:01:e6:fd:0b:df:a3:f1:
46:d9:45:d2:d8:fc:8e:99:a4:e9:4a:6a:ca:e6:97:
69:c5:e7:fd:f7:d2:89:95:f9:51:e1:f8:ec:f5:44:
83:a5:29:28:53:52:c8:c8:c3:a7:68:2f:a3:1c:76:
25:a5:7f:4c:cf:8c:ac:0a:90:1e:e6:e0:0e:38:9f:
f8:09:55:90:ac:90:1e:fc:1f:b9:be:e0:58:88:eb:
6b:f9:e6:59:f8:95:11:d5:ec:f7:79:39:06:6a:f0:
00:d5:98:16:c0:3a:1d:b7:ab:0a:b2:4a:d1:7b:73:
b6:1d:3a:8e:3b:81:ec:4e:6c:1b:26:5b:94:01:b9:
df:d8:0c:71:9c:73:4f:b1:bb:ab:cf:12:26:60:29:
b3:65:36:b0:a9:e0:04:63:b1:c1:b6:ba:32:35:c9:
a8:c3:45:38:b8:ef:bc:e6:74:22:1c:51:83:75:c4:
7b:bf:81:53:20:7f:59:2c:ef:ff:77:fc:31:e3:40:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:20:2C:E7:1E:AE:D8:63:DB:E0:9E:59:70:4C:82:6F:3A:F7:E5:62
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9FB5A0B08D7E11F196D17ADC3511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fe98::/48
Signature Algorithm: sha256WithRSAEncryption
7f:1b:6a:cb:57:ac:bd:21:2c:ce:0f:de:a2:6f:08:a4:13:45:
06:eb:3b:bf:e2:ea:27:ea:3b:d7:f6:06:8e:b3:18:97:ef:f7:
bb:eb:38:e3:92:a2:f9:ea:f3:7c:27:7a:00:ed:78:c1:c2:5c:
34:23:54:da:8e:c7:36:7e:cc:43:52:71:1e:73:81:66:8e:7d:
75:69:17:cf:83:f5:98:ee:c9:e1:ed:67:c2:ac:7e:3f:ca:a7:
01:d1:d7:ed:c4:6a:86:ff:1e:b9:c1:e2:b2:b8:cf:ea:cc:cf:
32:1b:2d:34:f7:3e:7d:f5:2a:db:88:d2:ad:65:a9:9f:3b:6d:
21:7d:7b:9e:bd:db:f4:b6:93:8c:c2:48:ba:09:ba:b5:0a:88:
58:ac:fe:09:fc:50:07:41:1a:f6:4e:c2:63:01:a2:76:9d:c1:
b1:a0:bb:53:60:23:67:70:36:b5:7f:77:4e:50:fb:18:ab:56:
8a:a4:1a:44:ea:34:e3:1e:95:d8:4f:be:4d:ca:2d:77:f7:33:
fe:0b:78:f2:60:d0:22:94:48:4a:88:c6:4c:16:02:d7:95:1f:
ca:14:11:51:64:10:49:b4:61:78:a7:ad:ae:11:69:c8:53:c3:
6c:01:38:9f:dd:b5:d6:40:f1:ab:56:39:34:bb:44:9a:b5:f6:
57:b6:76:21
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwODAxMDc1NzIxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkYTZlMS03NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNznAvVZhlePXfss3n/Pc07JFEZ8O0nrg3xBrPl3Q4TVLiOHtZBpb3sm+ZhI
yI8rszPNHC2IcTYCmcYOHO81um54gwHm/Qvfo/FG2UXS2PyOmaTpSmrK5pdpxef9
99KJlflR4fjs9USDpSkoU1LIyMOnaC+jHHYlpX9Mz4ysCpAe5uAOOJ/4CVWQrJAe
/B+5vuBYiOtr+eZZ+JUR1ez3eTkGavAA1ZgWwDodt6sKskrRe3O2HTqOO4HsTmwb
JluUAbnf2AxxnHNPsburzxImYCmzZTawqeAEY7HBtroyNcmow0U4uO+85nQiHFGD
dcR7v4FTIH9ZLO//d/wx40AA5QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNIgLOce
rthj2+CeWXBMgm869+ViMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOUZCNUEwQjA4
RDdFMTFGMTk2RDE3QURDMzUxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAYIQP6YMA0GCSqGSIb3DQEBCwUAA4IBAQB/G2rLV6y9ISzOD96i
bwikE0UG6zu/4uon6jvX9gaOsxiX7/e76zjjkqL56vN8J3oA7XjBwlw0I1Tajsc2
fsxDUnEec4Fmjn11aRfPg/WY7snh7WfCrH4/yqcB0dftxGqG/x65weKyuM/qzM8y
Gy009z599SrbiNKtZamfO20hfXuevdv0tpOMwki6Cbq1CohYrP4J/FAHQRr2TsJj
AaJ2ncGxoLtTYCNncDa1f3dOUPsYq1aKpBpE6jTjHpXYT75Nyi139zP+C3jyYNAi
lEhKiMZMFgLXlR/KFBFRZBBJtGF4p62uEWnIU8NsATif3bXWQPGrVjk0u0SatfZX
tnYh
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:37 2026 by rpki-client