
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/D2EE35C00D6F11ED90569286C4F9AE02.roa
File: D2EE35C00D6F11ED90569286C4F9AE02.roa (raw, json)
Hash identifier: dFw38LjTNy0pJvinEvZxbTKLXzPmhkPTBUPoHBOl/KM=
Subject key identifier: 14:AA:1E:B4:14:F3:9A:8F:FD:AF:AD:18:1C:8F:0B:08:75:C6:D4:33
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1181
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/D2EE35C00D6F11ED90569286C4F9AE02.roa
Signing time: Fri 22 May 2026 20:27:08 +0000
ROA not before: Fri 22 May 2026 20:27:08 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 203804
IP address blocks: 2406:840:f230::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4481 (0x1181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:27:08 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc1b-73f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:0a:f5:14:73:78:cd:ed:51:d8:27:55:94:
61:b2:0d:7a:91:dd:56:f8:19:31:cd:0d:c9:57:e2:
b3:a0:8f:fe:2b:b1:8a:97:9e:30:49:d0:49:39:c1:
29:ee:38:32:7e:c1:ed:73:53:82:a4:d4:7b:b3:31:
f3:a6:1a:ba:23:98:51:0e:59:21:81:24:52:60:28:
24:df:53:7a:12:d9:b4:20:21:1c:3f:9f:e0:b8:2b:
bb:7e:ea:ed:93:85:53:03:17:0e:65:9f:5b:75:6f:
f1:cf:f1:c0:3b:bd:2a:cc:9b:9a:8f:0f:4a:49:28:
44:6d:4c:4a:c2:fe:00:01:b8:4a:3d:4d:50:e0:ab:
9a:38:43:32:e2:9a:da:f6:a3:6d:22:32:a4:f2:56:
f4:44:40:df:0e:2e:a5:65:71:80:e1:78:3f:8c:58:
28:3b:69:f6:a8:9a:2a:bf:f1:99:94:7e:47:47:9d:
24:33:2d:2f:6c:bd:6e:e5:07:93:fe:15:3a:ea:bf:
73:5b:fa:46:f0:76:42:62:9f:7a:2d:6b:f8:53:a6:
93:36:1e:02:e2:5f:95:eb:97:80:00:c9:e6:59:6c:
a0:dd:a3:af:16:39:03:d0:9f:84:1c:79:12:09:48:
18:f9:b8:66:46:98:32:99:5a:5d:09:aa:7b:e0:c3:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AA:1E:B4:14:F3:9A:8F:FD:AF:AD:18:1C:8F:0B:08:75:C6:D4:33
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/D2EE35C00D6F11ED90569286C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:f230::/44
Signature Algorithm: sha256WithRSAEncryption
a2:11:1e:b1:e2:bf:72:62:15:c1:08:fa:5f:b1:e4:6b:28:94:
6a:2d:4d:0e:65:3f:69:05:e4:c1:57:f9:4b:d8:ef:1c:b1:30:
67:3b:35:4b:2b:ed:9d:14:b7:30:6c:63:19:29:7b:cc:31:66:
26:76:3c:6a:88:b3:d3:b7:fb:15:e1:b3:79:40:45:97:48:2f:
19:aa:7f:26:4a:52:bf:9a:19:dd:f4:2d:02:33:24:6f:30:6e:
1d:0a:2a:0d:79:97:3e:82:ce:a5:e1:3b:fa:94:2e:c2:b9:de:
b3:eb:3f:f0:b4:5f:06:a4:27:db:24:6a:9a:bb:3c:84:6d:55:
26:44:a3:40:bb:83:38:0b:63:22:09:34:e8:2e:94:e0:f1:e1:
8a:98:0e:02:f8:4a:ea:6c:f9:d5:ef:b9:39:a7:f8:bb:e1:b5:
85:f6:4d:ce:cd:2f:ad:71:5c:1f:56:9d:e0:00:f2:72:a8:d4:
64:63:15:f3:0d:fe:58:82:89:93:6a:9b:d4:f4:d0:13:48:f0:
ee:b0:c1:b9:37:c9:6c:24:56:9a:ac:74:8a:0e:af:d9:81:4d:
91:9d:4e:ed:18:14:ea:88:98:fc:73:94:44:78:f7:10:d0:ce:
44:ac:70:47:aa:2e:4e:37:b9:07:fa:09:53:07:8f:da:b0:c4:
0a:83:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:49 2026 by rpki-client