
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B0EF9E5E838711F1AB00BD8171A30FBC.roa
File: B0EF9E5E838711F1AB00BD8171A30FBC.roa (raw, json)
Hash identifier: NhFg4Na9NLNIq0pcbrqmt9dhlkm8zCCRF+XKWK3yZPs=
Subject key identifier: 0E:E1:D6:EC:B3:C2:A4:52:53:8B:6F:74:57:3D:30:CE:1B:E9:0A:91
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 11E6
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B0EF9E5E838711F1AB00BD8171A30FBC.roa
Signing time: Sun 19 Jul 2026 15:37:04 +0000
ROA not before: Sun 19 Jul 2026 15:37:04 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153332
IP address blocks: 2406:840:fea3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 19:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4582 (0x11e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Jul 19 15:37:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a5cef20-a238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:28:88:e9:05:7f:32:7a:7f:6f:91:e6:07:
e4:7c:30:7a:82:75:7b:4f:5b:c7:b6:7f:d1:04:25:
e5:19:6c:33:a4:f1:d0:80:32:2e:e4:4c:09:4c:5f:
24:3b:5f:c6:b5:f5:b6:44:3f:25:10:34:a5:8b:82:
87:c3:96:00:bc:61:83:d9:b0:2f:eb:ab:1e:65:9a:
1a:4b:42:d8:2e:dc:0d:14:a9:d4:14:36:89:b8:21:
30:03:57:89:a5:8b:b0:13:84:53:04:e9:0b:b3:47:
23:de:8b:2a:df:c3:12:c8:e5:1b:9d:9a:e8:eb:d5:
d9:a3:37:5f:88:9d:2a:81:e3:f9:b3:cb:40:7a:82:
29:02:ac:f9:a7:41:2f:f6:70:fc:98:af:ea:2c:ab:
71:5f:dd:53:d4:b3:c6:63:0a:b5:7f:2d:f5:5c:6c:
d8:6c:af:78:5e:c0:cd:78:13:bb:3b:8d:33:7c:05:
5d:57:0f:e5:41:7b:22:e0:61:21:d1:5d:1d:88:17:
56:bd:cc:b7:0d:5c:10:9f:38:22:4d:4c:c1:9e:ad:
f1:86:02:2e:2f:17:c5:f6:02:fb:48:50:bd:81:ed:
cd:f4:22:46:6f:d1:33:26:1a:be:d8:c7:02:97:fa:
cd:06:f1:1c:a7:fc:ac:a4:2f:95:39:8e:2e:4b:c0:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E1:D6:EC:B3:C2:A4:52:53:8B:6F:74:57:3D:30:CE:1B:E9:0A:91
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B0EF9E5E838711F1AB00BD8171A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fea3::/48
Signature Algorithm: sha256WithRSAEncryption
6a:44:3a:8d:8a:9e:89:c9:e8:2d:24:37:52:95:0c:a0:65:d2:
c4:47:f4:81:23:0b:59:39:36:73:89:b2:a7:8a:be:54:fe:0c:
4f:6e:52:92:1c:fe:9d:32:dc:21:d5:f2:23:71:13:40:0e:0a:
83:af:2f:28:a9:1d:9a:4b:02:33:e4:3e:82:7b:d4:a4:6a:80:
43:51:44:6e:e7:60:f3:6a:5e:4b:9c:ac:ab:0f:76:0e:fa:e8:
e7:02:85:52:a1:88:d3:67:05:ac:15:ed:3d:e1:2f:a1:1b:0e:
88:2e:49:da:f1:ab:d8:54:5b:55:f8:82:6c:0a:93:a9:71:f2:
a9:eb:5f:07:ed:f3:47:ab:3f:98:49:6e:1b:b2:ff:08:9a:ed:
94:7f:a2:67:20:68:51:ad:e7:00:73:99:58:37:cd:62:4f:07:
e2:8f:82:82:89:25:52:bd:8c:82:48:05:9f:a8:82:83:15:19:
f5:3c:76:a1:ce:bd:06:e8:8b:62:79:b9:01:c3:87:47:17:3e:
1c:00:2d:c0:e6:a2:37:77:01:37:54:0a:be:e1:6f:ea:ec:d7:
3f:b0:a0:40:bd:66:af:7b:6d:d1:84:2f:79:f9:0f:d7:2f:49:
73:ad:d2:2a:2d:57:0f:dd:78:61:2d:2b:97:4f:d7:0b:44:8c:
d1:de:86:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:27:10 2026 by rpki-client