
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC3B8354833311F1BA84B12098A30FBC.roa
File: AC3B8354833311F1BA84B12098A30FBC.roa (raw, json)
Hash identifier: FVQ3pAghyh2rGD9FK6qMqqJlCMEccv7vcVe2eoPLTVg=
Subject key identifier: 42:CB:F3:37:C3:FC:CA:9D:06:65:14:83:3F:BA:8D:31:B1:42:87:C7
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 11E3
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC3B8354833311F1BA84B12098A30FBC.roa
Signing time: Sun 19 Jul 2026 05:35:38 +0000
ROA not before: Sun 19 Jul 2026 05:35:38 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152631
IP address blocks: 2406:840:fecb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 19:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4579 (0x11e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Jul 19 05:35:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a5c622a-9635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:d2:ab:f6:d2:01:b5:f9:3c:e5:51:0d:67:
79:86:4b:9a:18:cf:fd:4e:16:e2:9d:ab:98:28:f1:
65:d0:7b:18:0c:60:31:1a:6a:02:d7:1c:24:0e:5e:
09:c9:b0:11:10:e4:45:8e:f8:45:41:c9:a7:7d:23:
e6:f3:7a:d3:33:da:5a:f0:91:98:53:57:4b:17:89:
68:4a:3f:ab:5c:5b:2b:8e:94:e5:43:44:a2:d4:c1:
0e:3e:17:42:57:7a:5f:30:31:3d:6b:9a:78:9b:70:
20:85:0b:c2:56:36:8d:28:fc:91:d4:63:1a:15:a0:
74:d2:e8:2c:66:04:92:91:31:55:d9:0a:0e:81:fc:
b9:7f:ab:03:b8:d3:df:30:09:1f:24:31:5d:2f:64:
d6:cd:33:58:12:76:3c:61:7d:06:2e:89:e6:16:96:
0a:e6:de:67:97:3a:78:38:36:07:ba:14:19:1b:17:
2a:6f:fe:a7:be:4d:2e:99:75:82:df:a6:b2:24:b9:
1e:5d:b4:c3:b9:3a:28:1b:cc:e8:e5:26:64:d6:46:
50:4d:7a:62:2f:34:10:a5:38:1f:2f:49:02:94:c4:
b1:60:18:c0:30:8e:84:dc:88:b4:70:1f:99:54:3e:
e3:df:f4:12:e9:58:d3:4e:37:c4:f8:ef:71:6b:ef:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:F3:37:C3:FC:CA:9D:06:65:14:83:3F:BA:8D:31:B1:42:87:C7
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC3B8354833311F1BA84B12098A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fecb::/48
Signature Algorithm: sha256WithRSAEncryption
09:49:91:64:1d:55:ca:7b:40:51:7e:de:ac:61:48:bc:f6:a2:
33:44:79:b4:02:db:11:81:6c:e4:f7:51:f7:e9:ef:fc:6a:93:
bd:43:32:98:fa:47:db:ab:8c:6c:10:2f:9e:a9:2e:c0:a3:35:
2e:9a:87:60:3e:a0:16:78:9b:41:42:7c:59:57:88:bc:4f:c7:
d4:c1:6c:9c:6d:54:7c:3c:9a:71:df:fa:89:2a:81:27:fe:30:
71:a2:be:7b:f1:32:d7:e8:e4:73:29:aa:d3:71:da:31:4e:96:
d3:4d:bb:11:7c:c2:8b:f4:8e:8e:88:5f:1e:d1:ac:dc:b7:db:
5e:04:3f:c1:36:e9:c4:9b:e6:27:e5:4b:80:d6:ff:6e:4c:ac:
e9:3c:40:d1:29:5e:dd:60:9c:1b:2e:32:30:8a:99:e6:df:f4:
eb:7b:83:9f:54:46:d5:72:21:01:be:c3:a8:d6:02:63:ac:a5:
a0:a2:8e:fe:16:e5:7d:dc:fa:78:49:e6:a4:4c:94:82:64:ad:
60:c3:0a:30:62:6d:5a:92:1a:68:50:87:08:0d:7d:0e:d2:1a:
de:89:c4:67:a4:33:f9:c2:20:d5:40:69:11:bf:ca:73:77:4b:
a5:fd:5f:eb:1b:0e:22:0b:03:c8:bb:f8:b4:15:12:99:cb:e8:
4a:2a:1d:b3
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNzE5MDUzNTM4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVjNjIyYS05NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvM3Sq/bSAbX5POVRDWd5hkuaGM/9ThbinauYKPFl0HsYDGAxGmoC1xwkDl4J
ybAREORFjvhFQcmnfSPm83rTM9pa8JGYU1dLF4loSj+rXFsrjpTlQ0Si1MEOPhdC
V3pfMDE9a5p4m3AghQvCVjaNKPyR1GMaFaB00ugsZgSSkTFV2QoOgfy5f6sDuNPf
MAkfJDFdL2TWzTNYEnY8YX0GLonmFpYK5t5nlzp4ODYHuhQZGxcqb/6nvk0umXWC
36ayJLkeXbTDuTooG8zo5SZk1kZQTXpiLzQQpTgfL0kClMSxYBjAMI6E3Ii0cB+Z
VD7j3/QS6VjTTjfE+O9xa+/GwwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFELL8zfD
/MqdBmUUgz+6jTGxQofHMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQUMzQjgzNTQ4
MzMzMTFGMUJBODRCMTIwOThBMzBGQkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAYIQP7LMA0GCSqGSIb3DQEBCwUAA4IBAQAJSZFkHVXKe0BRft6s
YUi89qIzRHm0AtsRgWzk91H36e/8apO9QzKY+kfbq4xsEC+eqS7AozUumodgPqAW
eJtBQnxZV4i8T8fUwWycbVR8PJpx3/qJKoEn/jBxor578TLX6ORzKarTcdoxTpbT
TbsRfMKL9I6OiF8e0azct9teBD/BNunEm+Yn5UuA1v9uTKzpPEDRKV7dYJwbLjIw
ipnm3/Tre4OfVEbVciEBvsOo1gJjrKWgoo7+FuV93Pp4SeakTJSCZK1gwwowYm1a
khpoUIcIDX0O0hreicRnpDP5wiDVQGkRv8pzd0ul/V/rGw4iCwPIu/i0FRKZy+hK
Kh2z
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:27:12 2026 by rpki-client