
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
File: E884E4DE42CD11EFB80CD237C4F9AE02.roa (raw, json)
Hash identifier: radaWHY8W+KCZv5iuPVvuk4Sx8fAV+ooYjaGVRQV7hE=
Subject key identifier: C2:C6:F3:BC:01:21:47:4B:50:7F:51:32:F9:A8:51:99:0B:A0:C3:8B
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1169
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:23 +0000
ROA not before: Fri 22 May 2026 20:26:23 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153168
IP address blocks: 2406:840:fd50::/44 maxlen: 48
2406:840:fe9a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4457 (0x1169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:23 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbef-f71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:ea:e1:d3:80:4c:fe:22:fb:79:18:c7:74:
5d:7d:44:73:57:15:45:03:cd:c3:35:2d:ed:fe:8c:
e2:11:0f:d9:6c:38:bc:bd:85:c6:31:d6:db:f5:38:
d6:e2:ca:1a:9c:8f:33:14:19:37:fc:4b:49:f1:c0:
92:3e:bd:0f:d0:f2:f9:a1:0e:b7:6b:80:b7:b5:bc:
79:44:7a:72:fd:76:0c:a7:c1:90:80:fc:1b:73:05:
eb:7f:0a:d6:85:ff:17:dc:da:f9:4b:2d:e2:84:05:
61:9c:76:75:89:e9:76:87:6e:a5:61:fa:4d:bf:e4:
e3:0a:23:ef:88:e3:0b:cf:67:86:48:2e:3b:ad:23:
e0:09:ef:56:8a:3f:ed:e6:e0:aa:be:5f:5e:a7:ad:
3d:52:5d:91:46:b9:3f:4f:62:b5:6d:e1:c9:09:07:
17:c3:bd:55:4b:40:47:7a:64:40:a0:72:c0:81:56:
4a:01:38:07:90:5a:82:9d:33:0e:dc:08:e1:2a:56:
03:33:44:10:9b:11:87:9a:9c:99:d5:53:f6:27:27:
b6:63:32:54:ae:fa:2e:cf:d9:7e:23:48:e0:d0:25:
e3:39:26:bb:7f:59:1d:a2:95:32:fe:fd:b6:7c:39:
b0:b1:c6:a9:66:a5:4d:cc:ee:2b:f8:27:57:46:fd:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:F3:BC:01:21:47:4B:50:7F:51:32:F9:A8:51:99:0B:A0:C3:8B
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fd50::/44
2406:840:fe9a::/48
Signature Algorithm: sha256WithRSAEncryption
79:75:f0:28:95:7e:da:ce:a1:0e:20:d5:30:aa:e4:f1:00:66:
78:5d:96:46:4d:f5:92:c1:40:94:d5:83:32:3f:70:40:24:41:
f0:4b:6d:8b:f4:85:9e:56:de:3c:0f:99:3e:fa:c3:fe:fe:e3:
4d:5e:fb:4a:66:58:ca:1b:78:d3:26:eb:14:df:b8:73:8a:c1:
1d:00:31:f3:0c:fb:95:aa:b7:87:24:1b:60:90:56:81:52:7b:
58:56:24:f2:62:86:ab:83:63:40:46:1e:90:3b:f7:96:66:3c:
71:8c:05:10:b0:1e:af:d6:f7:2e:b9:f8:a9:b7:12:9f:71:10:
99:40:37:db:a4:11:39:93:5f:a3:63:b6:6a:22:08:e4:c5:76:
09:77:35:bc:0a:62:61:d0:01:27:bc:6d:4a:b0:7f:04:18:ee:
92:f9:2d:ce:19:5a:3c:6b:be:a8:c9:4b:d6:8d:b1:69:2b:19:
62:42:ee:76:16:c1:3d:2c:e3:fb:a4:62:22:eb:bb:ef:c2:7d:
b0:a2:ec:77:95:dd:75:8b:f3:3d:8d:3c:28:3d:e6:74:d4:d7:
5c:79:98:00:51:3c:81:08:a1:17:6b:d2:bf:e9:1a:ce:b9:1f:
fc:8f:df:11:ca:02:ef:17:46:f1:ec:40:ec:c2:d0:84:00:18:
6c:e9:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:58 2026 by rpki-client