
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CA3AFA2C3F4011EE8922E662C4F9AE02.roa
File: CA3AFA2C3F4011EE8922E662C4F9AE02.roa (raw, json)
Hash identifier: nXoiKUWcmgZ3g47E4kqeRDGprk4TgwgqpqovADfcYQc=
Subject key identifier: 48:CC:F5:16:F1:B4:AE:96:15:F3:00:FE:4A:62:76:EE:95:78:B8:84
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 119A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CA3AFA2C3F4011EE8922E662C4F9AE02.roa
Signing time: Fri 22 May 2026 20:28:08 +0000
ROA not before: Fri 22 May 2026 20:28:08 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 216452
IP address blocks: 2406:840:9ff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4506 (0x119a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:28:08 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc58-001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:60:65:33:1d:7d:bd:b6:1c:c3:61:da:77:
99:3a:23:5d:be:24:3c:ad:66:b0:5e:28:90:67:c7:
86:de:e1:72:03:a4:3b:73:af:c4:70:20:97:39:bf:
10:c0:ff:e1:43:c2:a7:f5:60:76:c2:3d:ce:0b:97:
00:14:7a:98:8d:b2:f5:72:54:46:d5:d1:b6:f6:22:
d7:0f:82:0b:17:cb:19:96:5f:4a:d7:b7:08:fa:69:
ae:62:03:5b:82:c9:17:fd:1f:17:0a:cc:7d:14:0e:
d8:7a:eb:f9:ab:5b:fe:78:b7:e8:59:fe:de:d2:66:
6a:88:72:49:02:6f:1d:70:1e:1d:13:8b:3e:ae:78:
22:62:2c:ed:a0:1d:88:58:59:19:58:31:64:b2:49:
a4:a4:5a:1e:12:2b:2c:01:96:fd:f7:f2:e7:43:94:
aa:3e:bc:16:a3:4e:12:7e:bb:5b:60:f2:26:a5:c3:
0d:e7:33:6b:dd:92:fc:4e:bd:f3:01:3f:53:db:4e:
80:97:aa:6c:10:35:1b:f2:56:9d:dc:61:96:ca:3b:
50:42:05:a3:de:9e:7b:5f:e4:1c:38:d1:70:15:8a:
69:85:3e:56:33:c0:77:4a:c0:23:13:c6:53:8d:cd:
29:57:ec:9b:02:75:d9:7f:0f:1b:96:68:d0:83:6c:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:F5:16:F1:B4:AE:96:15:F3:00:FE:4A:62:76:EE:95:78:B8:84
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CA3AFA2C3F4011EE8922E662C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9ff0::/44
Signature Algorithm: sha256WithRSAEncryption
19:cb:b6:66:72:2b:7a:21:a0:52:be:02:1f:67:ef:c0:e6:a7:
da:1e:46:0a:49:6f:d0:e6:81:37:4d:90:49:34:88:2b:04:79:
45:d6:3b:e4:59:5f:67:1f:ab:c4:b3:6f:e5:f7:61:d3:1f:9a:
2e:30:ef:ec:7c:6d:8f:50:3d:8b:e5:6c:b6:1e:57:c1:e2:fc:
7e:7d:5f:ae:a0:29:b2:a5:ec:a4:4f:f8:a0:4f:11:b0:40:8e:
ee:f0:b8:c7:e1:aa:1d:ad:32:eb:1e:b4:68:94:fd:e5:cf:fd:
f0:3c:6e:69:00:fa:39:b3:ab:ca:34:8a:d0:c5:02:7a:cd:a2:
11:22:70:f5:71:11:1b:bf:3c:2e:82:d2:ec:0e:a2:cd:1a:8c:
33:b9:2a:ff:1f:48:c5:96:dd:52:37:29:7f:fd:03:7d:93:e9:
b1:d0:45:cd:c5:77:ef:d4:1e:4f:5e:7e:a2:51:46:44:1e:7a:
b3:af:df:31:e4:13:e2:6d:47:a6:34:3b:0e:d7:96:d3:cb:02:
4d:04:1f:48:b3:d7:2b:0d:7c:38:8c:8d:d1:03:18:aa:96:66:
44:14:81:aa:ca:d6:39:da:b9:58:3d:14:c0:8f:ca:66:fd:c1:
2f:dd:2b:ff:9e:a6:14:f8:c3:c3:06:f5:c7:cb:c3:7e:b2:63:
97:a1:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:05 2026 by rpki-client