
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AA543B628D7E11F196D17ADC3511F970.roa
File: AA543B628D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier: 8ejXVM0IRe5gmir8BmG91JnlhtJ/KMWhkFLfxLMkxdE=
Subject key identifier: EE:05:0C:7E:B9:F0:E4:3C:E1:FC:5C:87:2F:73:1D:9E:F7:E1:C8:1B
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1226
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AA543B628D7E11F196D17ADC3511F970.roa
Signing time: Sat 01 Aug 2026 07:57:39 +0000
ROA not before: Sat 01 Aug 2026 07:57:39 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153376
IP address blocks: 2406:840:fead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4646 (0x1226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 1 07:57:39 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6da6f3-5ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:79:b2:28:a6:58:54:25:d9:92:08:ee:bc:
bc:32:1c:01:66:1d:a9:32:62:eb:ac:a1:fb:3a:8e:
77:f4:b6:73:8d:43:e4:6a:c5:d0:18:bb:14:8d:6b:
60:2b:18:42:47:e2:20:b8:93:a3:fa:35:be:65:8b:
cd:a4:53:81:a2:18:9e:82:63:ad:49:b5:2a:21:1d:
06:22:1d:c4:2c:a2:05:60:0f:a9:54:d0:d9:15:86:
7f:8f:e6:85:aa:2f:a7:af:b2:b1:4a:57:7b:da:cb:
5a:88:33:9d:86:85:4c:55:2c:35:65:f2:01:55:40:
59:4c:bb:f1:d7:c8:3d:3e:c9:f2:ad:f6:66:fd:57:
29:dc:de:e1:97:ce:f8:47:a8:c4:f1:80:6c:24:e7:
77:57:68:77:00:04:cc:f8:5c:8a:83:fa:f5:49:16:
57:12:a0:72:ce:be:cf:ff:9d:c6:6e:af:2c:96:33:
d4:9f:e7:ba:1e:4f:9c:05:2a:6d:8f:96:96:98:4b:
96:5c:62:de:61:11:98:19:cc:e7:90:13:c8:e1:c1:
be:b7:fc:5d:15:9e:88:b6:0d:f2:56:49:b0:0b:89:
da:90:d9:d9:58:d3:02:da:d8:59:4e:dc:49:2d:71:
1a:90:1c:70:b0:d6:3d:ae:3c:24:e5:91:8a:3e:5f:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:05:0C:7E:B9:F0:E4:3C:E1:FC:5C:87:2F:73:1D:9E:F7:E1:C8:1B
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AA543B628D7E11F196D17ADC3511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fead::/48
Signature Algorithm: sha256WithRSAEncryption
95:ec:45:96:72:c4:b4:2b:4b:bc:3b:a6:61:65:54:0c:2a:ab:
62:4f:3e:d9:3e:54:86:78:79:d4:61:3c:d6:96:b0:07:e4:4f:
11:86:2a:ea:ba:19:31:8a:e4:86:9f:87:20:73:fd:e3:f3:2c:
0b:40:fd:f1:85:b2:b8:cf:50:ce:67:bb:64:c4:75:fd:6e:a2:
57:3c:50:4b:36:36:74:6b:1c:db:c1:35:de:85:11:26:6d:8a:
a6:44:ba:96:9d:e7:0f:b9:eb:4a:7e:7d:e1:c1:48:b9:91:37:
98:41:8c:82:4f:9e:95:94:45:9e:9c:4c:3c:a5:c3:c6:53:9c:
15:b0:54:2c:44:4e:dd:18:4d:2a:1d:54:0a:51:29:4f:7b:dc:
29:2c:02:d8:87:70:4d:55:9e:6b:d7:73:93:c6:a8:a7:33:20:
71:19:c3:01:9b:91:3d:99:41:f4:c4:98:fc:bc:05:76:5b:ba:
f9:f7:56:e0:63:76:3b:bb:e8:d5:dd:76:1e:0b:cf:0c:24:fb:
ee:c0:f3:0c:31:32:3e:10:da:de:15:33:ac:f8:f1:49:95:39:
e2:bc:5d:94:28:96:82:6c:92:ac:61:ea:7e:b3:41:b7:20:73:
00:37:63:23:bb:91:f5:22:fc:40:ba:cb:52:10:52:df:b5:87:
9a:8e:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:50 2026 by rpki-client