
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
File: A1A37268814211EDA138A00AC4F9AE02.roa (raw, json)
Hash identifier: V/HOguBOTW6VMwKffMTF3WqC4qquQMslXkJ0U23qRbY=
Subject key identifier: BF:DB:D1:CB:A3:5F:AE:0A:CF:BD:63:34:F3:09:4F:81:92:66:7E:CD
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1180
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
Signing time: Fri 22 May 2026 20:27:05 +0000
ROA not before: Fri 22 May 2026 20:27:05 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 203472
IP address blocks: 2406:840:9840::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 19:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4480 (0x1180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:27:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc19-cd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:04:d1:fa:d8:7b:98:92:a1:24:e2:5b:65:
73:54:56:26:75:75:12:01:7f:1e:f4:37:92:a4:ea:
8b:8c:0b:4d:22:eb:20:b8:e9:3f:ff:1d:58:5f:0e:
d3:9f:7e:cd:bd:fd:9d:e5:25:c4:d1:c1:ec:fa:5d:
17:02:e1:48:77:d0:68:74:33:ff:4e:0e:0c:9a:35:
73:7d:f8:fd:b6:7f:1a:49:ef:7e:46:61:74:00:ee:
dc:48:46:47:f4:3c:8a:9a:3a:d8:aa:75:94:97:23:
5f:6d:03:1d:82:14:b1:9a:e1:42:14:51:25:bb:29:
02:ab:db:9f:3d:9b:b3:3f:b4:23:53:53:d5:f0:4e:
b1:4c:dc:34:4a:bf:74:18:98:09:27:ac:15:39:86:
52:e3:c2:51:07:a3:08:66:cd:dd:f2:0e:25:46:2e:
62:76:73:ec:16:52:e5:da:39:bd:2b:76:0d:80:61:
f8:05:9b:a0:95:8a:04:f1:e0:ac:5a:3c:db:25:cb:
0d:6a:1e:98:61:6b:11:49:d3:f3:9d:c0:db:7b:62:
d5:b5:b5:35:e7:c6:b2:ef:55:f4:8a:f6:d8:de:39:
ab:ca:d8:57:fc:20:e6:79:64:c3:15:2d:ba:36:04:
50:d4:95:2e:47:cf:cf:e8:77:b8:1e:76:d2:75:a8:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:D1:CB:A3:5F:AE:0A:CF:BD:63:34:F3:09:4F:81:92:66:7E:CD
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9840::/44
Signature Algorithm: sha256WithRSAEncryption
33:11:61:4e:b8:33:7d:67:98:fc:fc:1e:37:7a:5e:d8:c0:c7:
a4:82:9c:bb:7d:dd:7a:4d:c6:4c:5d:32:e7:86:9b:e9:08:73:
5f:e1:c8:85:0f:27:5c:2e:e6:05:ee:d0:a8:c0:43:a4:c9:2a:
77:3a:a8:75:53:1d:28:06:4c:7a:48:c0:66:ff:b4:40:3e:7b:
4d:ad:8e:76:56:f9:17:6a:d3:c5:f7:a4:e4:81:ab:cf:0b:42:
cf:ca:9b:70:84:59:f7:41:14:60:e8:8c:27:d6:6d:6d:a9:e0:
86:e6:06:2d:6e:82:58:40:71:40:aa:76:ed:5e:34:d6:5d:55:
6b:72:a7:97:ae:5d:e4:65:04:8c:03:15:41:7a:85:fc:01:57:
1b:4e:8f:17:bd:7d:2b:cd:c6:57:a1:47:9b:83:31:f0:70:2f:
62:58:b0:50:90:d3:10:41:aa:fc:90:f6:36:f1:bf:63:89:73:
b5:2c:3c:6e:53:b1:d2:1e:7d:1e:d2:78:bb:37:eb:8d:11:6d:
96:07:c1:6b:17:13:ec:da:cd:03:6d:04:5b:a5:97:76:04:98:
1d:22:ec:b8:97:4c:b0:bf:42:4f:a9:bd:0b:82:7d:5b:f4:37:
d7:71:93:7c:35:cd:42:01:eb:49:45:e3:2f:31:f5:d0:1c:d4:
d4:d3:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:05:05 2026 by rpki-client