
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
File: E884E4DE42CD11EFB80CD237C4F9AE02.roa (raw, json)
Hash identifier: Bqb/Pk4B7GkTl0M694b1+tK4rPRHnbHiJSIXL7oCac0=
Subject key identifier: DF:A8:8D:77:96:5D:39:30:88:DB:17:42:0B:20:33:F4:20:6F:AF:12
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1067
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:24 +0000
ROA not before: Thu 22 May 2025 20:07:37 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153168
IP address blocks: 2406:840:fd50::/44 maxlen: 48
2406:840:fe9a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4199 (0x1067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:37 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493cf-61cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:70:af:29:9c:3e:88:60:6d:e9:a2:af:58:
cf:ff:2b:c4:e5:3b:ba:31:29:e6:9c:7d:98:4d:eb:
07:f7:ca:a6:d9:35:88:04:2e:87:9a:e8:b8:9d:4b:
da:28:bc:c5:1a:d6:f8:ec:bc:ae:16:ed:e0:fa:73:
81:97:15:52:9b:2d:d1:f4:c5:53:6a:a1:f1:36:23:
c7:be:cf:46:77:79:99:8d:58:24:2f:b7:9e:07:41:
29:89:b4:55:8a:b7:36:42:7a:88:7d:a3:43:70:09:
ea:ac:45:77:dc:93:90:78:60:dc:3b:6f:0b:75:f2:
8e:46:76:aa:b9:75:0f:38:d0:ba:c1:5c:f3:8c:4f:
05:38:04:5e:3e:d0:17:98:ea:88:3a:c5:75:d4:39:
8d:06:2b:4d:eb:7a:5d:f6:38:03:e5:b8:40:f6:5e:
3b:c7:65:3a:c3:04:c6:0d:3b:00:f7:60:69:3f:34:
6f:b7:17:f8:f4:5f:ae:40:b5:0b:29:d3:25:17:48:
22:cd:1d:b9:2c:b8:cb:63:45:73:fd:d3:85:7b:20:
73:e4:b8:66:da:0b:36:96:ea:d5:7a:5e:c9:93:24:
d2:54:48:21:9f:ea:bf:1f:fb:71:c9:b1:fe:74:53:
d3:04:f3:28:6b:77:57:c0:8a:1c:3d:6b:ea:a3:32:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A8:8D:77:96:5D:39:30:88:DB:17:42:0B:20:33:F4:20:6F:AF:12
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fd50::/44
2406:840:fe9a::/48
Signature Algorithm: sha256WithRSAEncryption
7c:b3:92:a7:46:f1:b6:ba:28:c0:fe:0b:73:30:c6:61:13:c6:
62:05:3a:29:9e:59:b3:9c:2d:c0:73:44:dd:77:ff:34:21:03:
d2:e2:6a:b0:3a:1f:91:d8:be:54:42:b1:f0:d1:ca:a4:7e:d3:
65:29:93:f6:0d:2d:f5:af:e8:77:3d:6e:d0:35:a7:6c:4c:f4:
49:34:aa:9a:47:ee:a9:00:41:c4:2d:08:c3:26:ea:25:fe:89:
90:91:88:7e:2a:ab:12:ae:a2:cb:22:13:b1:a3:35:02:9d:ad:
23:0a:82:22:f9:0d:c3:0d:23:2b:2c:50:a7:c9:6a:9b:cb:7a:
0e:ed:c2:0b:47:6b:93:56:cc:06:ed:c9:61:42:f9:cf:08:96:
8c:5d:64:f7:49:a5:09:58:3b:11:ec:ef:b7:47:f8:66:c7:ff:
34:30:c7:d4:85:8f:b4:f4:11:ca:d1:aa:af:65:76:0a:d2:88:
25:fa:6f:ae:3f:4a:d2:ce:2e:df:f4:af:6c:39:8b:78:25:65:
77:eb:0f:11:48:79:7a:ed:da:8c:0a:80:03:4c:7a:c5:a8:66:
fa:c2:48:36:89:a4:06:88:ff:44:25:6c:f3:1a:3b:13:58:91:
7e:58:f4:29:83:90:52:c7:45:67:9a:09:88:65:32:66:f4:69:
7b:89:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:56 2026 by rpki-client