
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E6183A42F3EA11EAB78EB945C4F9AE02.roa
File: E6183A42F3EA11EAB78EB945C4F9AE02.roa (raw, json)
Hash identifier: Oq55sUHKTTZvP92TqL+Py3ZeIV6ux+bHXY/t6LqSDD4=
Subject key identifier: 1A:75:2B:80:EC:01:EB:4D:9B:A1:94:96:E8:34:75:78:57:B1:08:99
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1030
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E6183A42F3EA11EAB78EB945C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:35 +0000
ROA not before: Thu 22 May 2025 20:06:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139231
IP address blocks: 2406:840:fe00::/44 maxlen: 48
2406:840:fefb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4144 (0x1030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:06:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4939f-741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:ea:12:dd:81:0d:28:dd:6c:df:a6:6d:ec:
f5:60:1c:30:1b:e0:55:a5:fb:ab:40:52:45:cf:05:
16:1e:05:53:8e:31:2b:bb:c4:d3:c3:d5:30:ee:95:
2c:73:ab:8a:92:2f:40:62:1f:05:a0:6b:fb:da:78:
3f:4e:d2:8a:b6:16:1b:76:65:98:1e:3a:45:65:e5:
e7:75:f5:21:50:2d:61:ba:53:71:18:55:97:af:fe:
1e:65:c3:67:91:f0:47:e9:da:96:af:ce:f8:3c:91:
56:3a:44:53:bf:c1:28:56:8c:c2:49:b1:e9:3c:46:
b7:f7:82:d4:12:af:d9:42:7e:80:52:14:90:ad:75:
5c:fb:a4:39:30:7a:ab:11:1e:7b:3d:22:4d:80:84:
27:6e:9b:ad:0a:ee:99:d2:03:e4:bb:ba:07:a2:f6:
9e:f5:55:dc:4c:20:57:60:3b:e2:81:96:55:06:05:
7e:c2:42:26:87:1a:fd:c0:a6:8d:ce:8d:53:ab:47:
d6:94:08:e9:98:00:81:da:23:0e:50:3e:54:9a:cb:
99:4d:87:c4:fe:a4:72:d8:4c:88:aa:25:7b:71:b9:
81:05:d5:fc:f4:03:6c:38:46:5d:01:73:62:27:52:
d9:3a:18:ec:d1:86:48:f2:3c:7a:06:fe:3f:b1:7b:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:75:2B:80:EC:01:EB:4D:9B:A1:94:96:E8:34:75:78:57:B1:08:99
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E6183A42F3EA11EAB78EB945C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fe00::/44
2406:840:fefb::/48
Signature Algorithm: sha256WithRSAEncryption
40:cb:c2:1d:50:fc:49:d2:54:59:fc:91:2d:1e:72:16:af:6f:
94:6c:b0:3d:e1:87:15:ab:1f:61:1a:5a:98:4c:11:dd:22:c3:
1f:96:36:1c:11:5d:ec:fb:a8:b5:0c:65:08:66:91:46:d4:e1:
66:ff:78:81:e9:73:9b:a1:29:20:0c:de:f3:9e:28:46:cf:34:
86:7e:3d:ed:a6:78:89:b6:90:5a:55:49:df:a3:49:c4:4c:84:
1a:04:ab:27:c6:2b:3c:25:64:ab:c7:a8:fc:95:08:d8:5f:98:
db:55:73:52:df:84:03:e1:fc:84:7d:35:61:42:9b:80:c7:56:
0e:74:56:37:b3:7b:c8:15:8e:e2:d4:6c:7d:86:02:1b:3b:61:
26:8e:60:ba:04:e0:aa:4e:fd:96:df:c0:8f:d8:b5:4a:93:83:
43:20:22:0f:84:0e:ed:52:06:3d:a9:bc:a2:88:c6:c2:90:83:
43:05:8a:7b:c5:25:f7:83:da:cb:ad:28:d4:5d:80:b2:aa:4b:
a5:72:ba:42:61:87:f1:84:91:39:62:28:73:c2:0a:d9:74:54:
1a:bf:07:71:58:ba:31:35:0f:e6:b0:64:3d:ad:24:c9:db:e6:
8b:31:af:18:22:83:f7:23:a4:84:20:9f:61:ac:e5:9b:48:df:
8f:8a:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:57 2026 by rpki-client