
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9D6A9DA42CD11EFB80CD237C4F9AE02.roa
File: E9D6A9DA42CD11EFB80CD237C4F9AE02.roa (raw, json)
Hash identifier: IHwDZwsN7Mvmfk8zJtC8ujhBP0r7aL+PxzaXRCcraj8=
Subject key identifier: ED:04:C6:FF:47:AE:11:50:F8:AA:02:CC:FF:F3:B2:14:3F:B3:E2:5B
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 116B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9D6A9DA42CD11EFB80CD237C4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:26 +0000
ROA not before: Fri 22 May 2026 20:26:26 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153171
IP address blocks: 2406:840:fd70::/44 maxlen: 48
2406:840:fe99::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4459 (0x116b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:26 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbf2-3183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:50:d5:7d:94:6a:0a:b7:cc:73:b7:4c:7f:
5b:f9:cd:42:29:7e:8b:42:01:1c:2d:ee:02:e2:83:
20:ee:83:dc:38:46:ee:06:31:34:c9:fb:05:37:e4:
78:c9:89:60:b5:76:18:0d:77:60:bb:bd:3c:b1:da:
4e:6f:0e:3c:10:9d:96:41:81:4d:e5:70:ad:e3:00:
44:15:76:66:13:32:71:14:c2:1b:59:b2:14:11:87:
7e:60:d3:47:52:1f:16:c3:ca:ff:5a:0a:ea:15:0c:
7d:0c:3c:4c:3e:35:3f:80:7e:e8:d7:d0:c5:5e:68:
a5:8e:aa:d2:43:2f:3f:fe:36:2d:60:04:ef:f4:2d:
b6:a9:33:d3:86:20:e0:fe:3e:9c:e5:31:44:2b:73:
22:cd:aa:73:a4:fc:3e:5a:53:93:af:69:3d:f6:4f:
ca:c6:82:77:e3:81:f6:9a:d7:9c:93:f4:95:8b:88:
b2:a0:5b:a8:8c:e1:43:c2:f8:a5:8e:8b:50:ba:8d:
f5:c0:a4:f0:c9:ba:36:b7:a5:b8:82:6c:9e:c8:99:
7b:62:69:c1:44:9b:6a:41:2e:a5:08:c1:c4:03:5a:
0a:92:b7:e4:29:c1:9d:8a:57:0c:56:28:54:dd:02:
d5:39:15:b1:d8:90:15:db:3c:d2:a3:10:35:bc:f9:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:04:C6:FF:47:AE:11:50:F8:AA:02:CC:FF:F3:B2:14:3F:B3:E2:5B
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9D6A9DA42CD11EFB80CD237C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fd70::/44
2406:840:fe99::/48
Signature Algorithm: sha256WithRSAEncryption
34:12:06:24:0a:54:0a:c3:d5:6e:bd:21:41:42:06:c8:98:79:
4e:4b:8c:f0:f4:20:8e:e7:e2:3f:3b:30:63:c5:d6:d5:cc:64:
c5:33:e2:6c:41:10:e1:45:4e:18:c4:6e:03:92:87:b2:c6:6c:
62:f9:af:1d:79:d7:3e:7f:76:1e:48:15:83:39:7e:07:16:76:
6d:9a:71:3b:26:41:e2:b1:f7:b3:56:4b:ad:8a:13:f6:de:fa:
8c:5d:c0:94:cb:a4:3e:b5:df:bb:85:b4:bc:e8:e3:96:52:b0:
90:62:fb:2e:d8:5f:fa:e6:45:ac:9d:f7:67:79:cc:b1:7d:64:
84:c8:05:4b:2a:9d:4b:4e:75:a3:52:a2:33:f9:99:5f:c0:e5:
a9:66:c4:25:9e:25:e3:5c:d8:8b:d5:42:56:b5:3d:67:1e:95:
9c:6d:0f:16:80:d4:20:41:70:38:d3:a6:a6:d8:c5:59:33:07:
6a:4a:ee:ac:2a:1b:7d:54:68:72:6c:1e:cc:d0:aa:c4:49:ee:
53:65:f4:90:fd:8b:a1:4b:97:66:0a:5d:ac:c9:e3:05:47:c1:
35:a2:23:67:19:15:83:78:46:22:37:60:04:07:5c:62:ea:90:
2e:07:d7:bc:de:d0:bf:6d:88:cd:24:70:bd:ec:91:e1:45:5b:
df:9f:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:38:35 2026 by rpki-client