
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E79DF77C273911EF99A1AC57C4F9AE02.roa
File: E79DF77C273911EF99A1AC57C4F9AE02.roa (raw, json)
Hash identifier: 4xTSCTjyH7XxVUZA7ER0NC9vrB6bw7ijVuKZuxmZL6I=
Subject key identifier: D0:36:1E:F2:9D:20:06:F7:16:22:E6:F6:14:73:CB:CE:CF:0E:77:1A
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1161
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E79DF77C273911EF99A1AC57C4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:08 +0000
ROA not before: Fri 22 May 2026 20:26:08 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152911
IP address blocks: 2406:840:fa60::/44 maxlen: 48
2406:840:fe9e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4449 (0x1161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:08 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbe0-6975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:5e:fd:d0:05:af:d3:12:3f:2f:df:40:0b:
d1:51:42:61:08:c8:4b:47:58:7c:f0:f6:9e:99:e0:
85:8c:23:ba:52:42:ed:92:0b:89:bd:e0:f7:96:c8:
80:3f:87:46:aa:39:63:fd:74:82:0d:58:07:18:02:
bc:8b:6b:62:1e:a6:41:8d:d7:22:f0:98:8b:76:1d:
43:49:87:d8:6f:08:96:78:07:ea:bd:fd:5d:a7:b2:
88:b4:6f:6d:b2:37:9d:8c:bf:00:19:cd:9c:6f:98:
eb:fa:45:38:41:35:a0:3a:76:95:97:9b:2d:4c:b6:
f9:8c:e6:bb:d2:a2:bc:61:a1:0f:62:8d:4d:e2:16:
fb:49:37:65:1c:ca:45:79:7d:ce:2e:e8:8a:f9:b0:
f1:a6:86:68:88:d9:aa:18:5c:84:0a:d3:a4:86:02:
df:43:7e:7a:8e:71:29:93:3a:0a:65:ce:4e:0f:11:
ac:f7:5c:8f:2d:81:f9:4e:8d:4e:e1:8c:cf:59:06:
d3:7a:37:02:f0:99:49:ca:3a:77:37:9c:8f:bf:9d:
c2:9c:d1:08:88:27:71:30:15:7c:57:aa:9c:df:7f:
06:ee:a1:c4:a5:17:4e:dd:6c:ad:82:48:29:17:27:
a2:3d:4c:eb:bd:bf:01:53:4d:72:31:af:37:6e:22:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:1E:F2:9D:20:06:F7:16:22:E6:F6:14:73:CB:CE:CF:0E:77:1A
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E79DF77C273911EF99A1AC57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fa60::/44
2406:840:fe9e::/48
Signature Algorithm: sha256WithRSAEncryption
64:8c:2d:73:5f:b3:f2:56:c2:25:62:70:c0:ca:0c:90:77:60:
d1:b6:57:11:8c:48:4c:7e:d3:35:87:40:8e:77:02:59:7a:b4:
0b:a2:54:35:53:85:27:91:5a:8e:7b:49:42:42:e3:69:c5:14:
b5:20:ff:9f:c2:d7:72:9b:77:a3:d7:b1:31:68:6c:d6:53:a3:
2f:ad:f2:81:0e:ff:58:bf:68:23:58:c9:8c:97:c5:f7:d4:3f:
8a:e5:f2:a6:58:f2:fc:45:ba:e9:26:52:6c:31:9d:a3:bd:28:
84:08:3f:de:67:9a:3e:05:ac:20:29:f8:91:13:c0:f4:6a:95:
0d:21:18:59:4c:6c:88:d5:a9:5d:be:de:20:ce:58:48:c8:04:
f3:9e:45:c0:31:b5:03:e1:a2:bd:d7:bb:70:a0:b8:91:29:2c:
41:e0:cf:a2:7f:d6:5b:c3:fd:c6:d9:89:7c:c9:23:83:d7:c1:
fe:6e:d8:46:1d:19:60:14:0f:03:2d:a3:a8:2d:b8:e2:95:f0:
ca:04:b8:7e:20:90:5c:a9:13:a9:46:5d:0b:af:5c:84:77:34:
d1:9e:3f:f3:2b:72:e8:11:16:01:ed:36:8f:1f:2d:b8:58:39:
63:1a:d0:18:af:3c:24:00:64:8b:8f:79:22:12:d9:d6:86:a2:
f5:66:46:43
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICEWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNjA4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmJlMC02OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1wZe/dAFr9MSPy/fQAvRUUJhCMhLR1h88PaemeCFjCO6UkLtkguJveD3lsiA
P4dGqjlj/XSCDVgHGAK8i2tiHqZBjdci8JiLdh1DSYfYbwiWeAfqvf1dp7KItG9t
sjedjL8AGc2cb5jr+kU4QTWgOnaVl5stTLb5jOa70qK8YaEPYo1N4hb7STdlHMpF
eX3OLuiK+bDxpoZoiNmqGFyECtOkhgLfQ356jnEpkzoKZc5ODxGs91yPLYH5To1O
4YzPWQbTejcC8JlJyjp3N5yPv53CnNEIiCdxMBV8V6qc338G7qHEpRdO3Wytgkgp
FyeiPUzrvb8BU01yMa83biI43wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNA2HvKd
IAb3FiLm9hRzy87PDncaMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRTc5REY3N0My
NzM5MTFFRjk5QTFBQzU3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAYIQPpgAwcAJAYIQP6eMA0GCSqGSIb3DQEBCwUAA4IBAQBkjC1z
X7PyVsIlYnDAygyQd2DRtlcRjEhMftM1h0COdwJZerQLolQ1U4UnkVqOe0lCQuNp
xRS1IP+fwtdym3ej17ExaGzWU6MvrfKBDv9Yv2gjWMmMl8X31D+K5fKmWPL8Rbrp
JlJsMZ2jvSiECD/eZ5o+BawgKfiRE8D0apUNIRhZTGyI1aldvt4gzlhIyATznkXA
MbUD4aK917twoLiRKSxB4M+if9Zbw/3G2Yl8ySOD18H+bthGHRlgFA8DLaOoLbji
lfDKBLh+IJBcqROpRl0Lr1yEdzTRnj/zK3LoERYB7TaPHy24WDljGtAYrzwkAGSL
j3kiEtnWhqL1ZkZD
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:49 2026 by rpki-client