
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa
File: E2D92650FE1A11EEBD74AE3AC4F9AE02.roa (raw, json)
Hash identifier: eyAmBi5gl61pEG2YxbJOlWjC80oigModvH2yULhKMEY=
Subject key identifier: B8:90:43:5D:AE:03:A5:15:B0:D6:1B:E8:05:A8:21:1F:F2:A9:96:95
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1146
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:16 +0000
ROA not before: Fri 22 May 2026 20:25:16 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 142586
IP address blocks: 2406:840:ed00::/40 maxlen: 48
2406:840:fde0::/48 maxlen: 48
2406:840:fece::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4422 (0x1146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbac-a59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:78:20:4d:3b:55:6d:c1:85:51:1a:ff:90:
fb:d4:a7:04:5d:1a:9a:1b:18:8d:a6:d7:42:43:03:
52:68:a5:8c:2a:2a:dd:25:e5:35:91:f4:4f:92:82:
80:ff:03:2a:bd:56:b7:80:36:de:7d:ef:4a:2b:a1:
74:3a:ed:99:b1:11:0e:50:63:a8:7f:af:5e:61:b1:
03:eb:b1:c8:1a:e6:56:e9:db:8a:d1:40:f9:ba:82:
66:8a:b6:ef:92:58:a9:a4:d9:77:b2:1f:14:8b:5e:
87:9c:ec:03:a4:59:bd:43:6c:91:78:c9:5f:ca:40:
5f:ef:46:c4:45:b5:17:76:27:94:57:ff:72:ba:cd:
e0:6d:10:19:5a:d2:05:f1:86:be:a7:82:68:e4:4b:
ac:75:6d:8b:46:94:0b:2e:54:18:89:cd:5e:a4:1b:
76:33:8e:26:54:ed:1b:43:d6:95:72:f7:57:ea:f4:
3e:31:92:5a:ac:04:3e:2b:88:73:df:d3:91:41:67:
7a:fa:fb:3a:e1:2a:de:78:5b:75:8e:7e:d3:ef:34:
17:d4:47:d2:4b:b5:53:0f:6e:c1:10:2e:e5:5a:96:
7e:7b:8c:f9:81:7d:d8:9a:e8:c3:6e:50:62:05:c4:
f2:c6:d7:ff:c7:74:3f:1e:0c:1e:4c:3f:af:7e:6e:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:43:5D:AE:03:A5:15:B0:D6:1B:E8:05:A8:21:1F:F2:A9:96:95
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:ed00::/40
2406:840:fde0::/48
2406:840:fece::/48
Signature Algorithm: sha256WithRSAEncryption
78:19:df:80:ca:40:30:96:0d:5a:3c:5f:f7:fc:dd:39:74:ac:
6d:59:8a:8c:04:0a:3f:51:eb:36:83:b1:aa:19:4e:e7:bb:d7:
83:f2:d0:af:41:40:01:d8:ae:9a:d1:1e:88:a0:d8:72:ad:a5:
c1:00:3e:f2:a9:4b:66:8d:03:97:37:5f:0a:09:78:78:8b:3f:
bf:e8:75:21:4e:94:d6:7d:5c:8c:29:fb:a6:b8:a0:51:1d:3e:
03:38:c9:16:be:64:aa:f6:15:53:fd:a6:4f:30:bd:7c:4b:da:
eb:78:05:a4:c2:7f:50:8a:a5:b6:32:1d:5f:da:5e:09:11:c1:
f0:66:00:39:d8:d8:9a:8a:c6:37:07:25:83:d7:46:15:7f:bf:
e3:05:56:0c:f8:a3:5f:17:79:47:cf:b3:58:5e:50:2b:e7:7a:
d9:8f:84:8d:fa:8b:b7:38:08:0a:58:9d:48:84:fa:99:2b:ef:
13:f1:18:85:67:66:fe:53:9b:97:51:17:02:9b:5f:fe:8b:25:
20:f3:b0:a5:e3:06:36:6d:73:cd:d5:d9:de:32:49:1c:94:0b:
3d:c9:ee:0f:1d:12:8f:4a:26:53:7e:47:78:1a:8c:10:5a:01:
43:37:7f:26:a7:6a:9a:f2:70:54:1d:4f:7c:f9:ba:91:4c:31:
ee:a5:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:58 2026 by rpki-client