
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CA3AFA2C3F4011EE8922E662C4F9AE02.roa
File: CA3AFA2C3F4011EE8922E662C4F9AE02.roa (raw, json)
Hash identifier: liW3ImDyj4DrvHDBDufs374XPj8x0YnZJ+ki5SLaeJ8=
Subject key identifier: 41:66:99:48:68:F7:5C:DD:47:DC:CA:DD:A4:DD:B8:BD:58:5C:C6:65
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 108F
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CA3AFA2C3F4011EE8922E662C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:31:01 +0000
ROA not before: Thu 22 May 2025 20:08:22 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 216452
IP address blocks: 2406:840:9ff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4239 (0x108f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:08:22 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493f4-cf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:87:42:63:b5:70:44:aa:0d:b8:0e:8e:6c:
e1:c3:f9:67:80:a0:49:53:e6:a9:14:12:d7:1f:33:
58:c4:f3:39:62:61:6d:c5:f5:53:6c:ae:78:43:b0:
7f:8e:16:c8:a7:05:14:ba:7e:45:48:68:4e:7d:bb:
9e:90:3e:3f:13:40:a0:78:3d:93:74:43:bd:76:c2:
ea:c7:7f:35:78:95:bd:01:74:b3:66:21:89:89:d9:
f0:43:da:db:db:9c:fb:2f:c2:ae:92:db:ab:5c:d5:
f4:8a:3b:20:3c:25:65:49:64:85:5e:72:7f:e6:67:
1e:f3:21:8c:9c:d4:c6:89:93:53:92:dc:f5:dd:76:
34:b8:c6:b4:44:99:49:b4:e7:fb:50:57:53:ac:3f:
1a:ad:82:7f:4f:2a:50:c2:b7:f6:70:92:d6:5f:b7:
56:0e:f4:a1:82:1b:2e:fc:12:02:29:e1:dc:e2:c1:
86:bf:a9:54:ae:be:84:4f:c0:17:76:66:7b:84:d0:
75:81:c2:8c:6f:85:c4:70:df:57:88:64:0c:7b:0e:
0e:79:3d:f5:3d:be:de:60:32:13:65:ac:da:a6:79:
e6:d0:2f:af:2b:3f:49:86:cc:8d:e6:b7:23:5b:9a:
2b:2c:08:9f:46:a3:14:ad:ef:cf:99:0f:62:a3:dd:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:99:48:68:F7:5C:DD:47:DC:CA:DD:A4:DD:B8:BD:58:5C:C6:65
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CA3AFA2C3F4011EE8922E662C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9ff0::/44
Signature Algorithm: sha256WithRSAEncryption
54:b1:67:44:8f:5b:59:e5:4d:95:b8:6d:5d:b3:2a:97:54:99:
fa:5b:69:3a:65:bd:20:76:53:e3:fc:05:08:23:fd:1b:ff:77:
89:d5:1c:d1:04:d2:0a:02:f7:d7:ba:29:0a:08:2b:8a:b9:40:
72:76:b1:fd:1d:e8:4f:ce:0e:f6:2c:d6:4e:f1:e8:a9:f3:8a:
13:cd:70:c5:48:12:ff:2e:be:cf:df:aa:7c:56:c1:90:fe:da:
64:01:80:3c:bb:26:a6:b3:a7:01:98:06:5d:96:ff:f5:50:2c:
98:31:07:0c:8c:99:00:50:bd:01:3e:ef:0d:0c:d7:ba:e9:d5:
32:21:5c:55:76:17:70:13:b8:c9:5c:86:bf:c3:c8:40:fd:90:
d7:3f:de:dd:c8:61:20:15:62:ce:79:a9:63:bb:db:ee:e0:76:
c3:dc:c6:b0:ff:f7:39:ca:2e:34:f3:f4:b2:2a:ee:86:bb:00:
1d:75:3b:1a:90:6e:b3:fb:ec:06:e7:43:b0:ba:2d:99:8c:4d:
2c:70:3a:e0:84:55:bd:e5:d7:0d:4b:18:16:e7:46:50:8a:5a:
56:8c:92:f4:38:13:8e:b1:75:d6:d5:4b:3b:42:63:c1:c7:f8:
b5:7c:b8:fd:ed:9a:12:78:bb:7f:6a:65:b3:22:60:c9:21:e6:
ed:46:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:25:28 2026 by rpki-client