
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BD694B0C8E2511EF80780A1AC4F9AE02.roa
File: BD694B0C8E2511EF80780A1AC4F9AE02.roa (raw, json)
Hash identifier: 4NH76KtGNxoOPPVcZI1TbgMT7X3CcaQMGaO0Tpha3kY=
Subject key identifier: 92:13:12:19:AA:86:74:3E:30:0D:8A:AB:B4:6F:3C:A2:64:FA:A6:EE
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 119D
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BD694B0C8E2511EF80780A1AC4F9AE02.roa
Signing time: Fri 22 May 2026 20:28:14 +0000
ROA not before: Fri 22 May 2026 20:28:14 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 2406:840:9990::/44 maxlen: 48
2406:840:eab0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4509 (0x119d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:28:14 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc5e-bcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:4a:a9:c1:38:65:50:cd:53:4c:79:e0:1e:
30:9c:8a:0b:3f:3c:fc:af:21:32:fc:ad:3e:20:ea:
09:52:0b:ab:7f:07:cf:c6:3b:0e:a6:d7:53:1c:8f:
00:84:61:09:52:ec:de:8a:af:95:a9:4b:0a:c4:4d:
c0:50:bf:06:5b:77:5a:9a:87:73:77:4d:8b:79:ee:
4f:03:18:87:c4:63:e6:11:97:bf:01:47:95:e6:6b:
16:68:d2:12:41:e7:23:b3:01:67:54:32:5c:bb:28:
ac:06:28:0e:88:6c:fa:b5:99:f7:40:63:52:2f:00:
b1:ad:ab:52:c4:cf:2b:1d:b6:ec:e3:a6:a1:4c:27:
5f:ed:f1:9f:a0:8e:a8:ec:21:eb:86:10:28:82:9d:
82:d4:9e:99:3b:f4:c5:2f:aa:6f:0f:0b:14:d9:b7:
ed:88:2b:e8:39:46:80:ba:ab:20:6e:cf:81:5c:2c:
88:bf:3d:c2:56:db:81:61:62:4f:bb:60:19:6c:84:
1b:aa:2e:af:f3:35:d3:81:24:1d:f5:e3:e6:ec:63:
44:c9:f7:42:12:42:7f:22:cb:b4:3d:cb:e7:ee:47:
2c:df:d2:1f:14:66:13:c2:af:fc:ec:4a:47:69:1c:
45:6c:ba:3d:3c:dd:67:d8:7d:24:05:a0:6b:39:1f:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:13:12:19:AA:86:74:3E:30:0D:8A:AB:B4:6F:3C:A2:64:FA:A6:EE
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BD694B0C8E2511EF80780A1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9990::/44
2406:840:eab0::/44
Signature Algorithm: sha256WithRSAEncryption
45:69:30:c3:c8:84:fb:8a:ce:16:56:77:b9:8a:d3:75:10:e6:
5b:dd:4c:48:13:17:41:ef:0a:6f:b0:ee:77:eb:d2:c4:7e:79:
e8:60:db:62:17:bb:d5:ff:2e:93:ab:15:fa:1c:4e:92:2f:40:
52:e7:6c:36:23:f8:7d:97:28:9b:86:c6:70:27:98:90:4d:a5:
d4:b9:3d:09:d6:16:56:0b:99:1a:b1:46:9e:f9:d9:ff:2f:98:
0f:04:e7:66:92:d0:08:1c:69:15:53:13:67:14:0c:50:d3:e1:
d1:db:e7:c4:6f:df:c2:f9:15:5f:15:55:5b:0f:6d:dc:a8:e7:
63:22:1d:a8:e3:05:d0:3e:99:ce:67:07:44:bf:78:f4:1d:0a:
3d:95:8b:98:66:fc:f0:d3:9b:5e:72:1b:a0:ed:41:f5:55:e8:
ad:7f:cf:e5:aa:fe:01:47:23:5c:34:21:c3:f5:bc:15:bb:e8:
68:17:71:19:a3:b7:ad:68:ad:6d:0b:a2:f9:19:18:0f:83:e8:
e4:67:4d:50:7b:59:0e:66:4c:dc:7a:85:f0:5d:b4:e0:84:82:
ee:4a:fa:4a:53:cb:f5:48:fb:ab:d0:63:6b:77:67:85:d3:16:
07:b3:d2:ea:ae:ec:dc:d4:13:5d:60:44:8b:66:60:24:e8:25:
b2:ea:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:55:11 2026 by rpki-client