
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EC31F29ABEFC11EC82FBEC0AC4F9AE02.roa
File: EC31F29ABEFC11EC82FBEC0AC4F9AE02.roa (raw, json)
Hash identifier: L/U5QkTeqGTEfb30zsPIQn5FJjQMuOKhAx8+uvQ6QZA=
Subject key identifier: 77:5D:BB:DE:D0:CC:29:A4:93:5A:80:CF:51:76:3C:3B:13:0E:85:00
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 114A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EC31F29ABEFC11EC82FBEC0AC4F9AE02.roa
Signing time: Fri 22 May 2026 20:25:24 +0000
ROA not before: Fri 22 May 2026 20:25:24 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 149475
IP address blocks: 2406:840:e666::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4426 (0x114a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:25:24 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbb4-0701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:cc:5e:74:d9:77:e4:d2:da:74:a5:88:e3:
15:88:10:d1:2f:6d:3e:47:8a:57:ac:23:6b:d9:f9:
6c:fa:a3:69:a7:f6:fc:13:81:19:7a:bf:f6:d2:a4:
9f:c2:70:fe:d7:30:fa:26:cc:7d:59:ec:62:4f:29:
97:fe:fc:8c:08:1e:bc:d5:cf:ac:67:95:ec:43:6c:
a1:6f:84:02:e2:26:8d:74:0a:30:4f:88:bc:94:7c:
c8:93:2c:d2:ef:67:5e:2a:0b:af:d3:93:e6:fc:36:
27:3e:a7:66:66:3c:01:64:9d:c7:8f:a1:98:1a:42:
68:22:c3:b4:d7:61:4f:2e:24:95:14:58:cb:25:62:
60:6c:5d:72:69:10:04:e0:6d:90:fb:88:e0:fb:83:
d3:0e:10:31:ba:57:f1:9f:fb:51:ef:87:e0:38:3a:
80:3f:0a:20:7d:a1:c5:d8:51:70:32:19:05:33:15:
62:5e:49:62:53:74:5a:42:be:04:f3:d8:2e:b6:1d:
e5:e9:20:3a:27:a4:f0:12:b4:59:0a:19:d3:ad:74:
b8:ee:c3:91:3c:3f:f9:9e:a4:01:dc:75:49:cd:33:
88:a2:23:8d:66:67:a5:7b:af:f8:89:fd:39:b7:04:
8f:7e:b3:26:b9:bb:b3:0f:9f:6b:e8:22:d1:77:43:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:BB:DE:D0:CC:29:A4:93:5A:80:CF:51:76:3C:3B:13:0E:85:00
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EC31F29ABEFC11EC82FBEC0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e666::/47
Signature Algorithm: sha256WithRSAEncryption
73:b3:49:a3:e6:2d:4d:45:3b:ee:3c:3b:90:b1:39:ce:68:8e:
af:23:4c:be:db:48:73:6d:c6:c4:56:5e:9f:93:16:44:51:9e:
9f:d1:c1:82:4e:60:bd:c8:3e:88:d7:3a:0c:69:97:15:2f:bf:
b4:ea:56:b7:e8:a2:4e:b2:22:9f:2c:04:43:19:be:b5:0b:c7:
1b:dd:fd:74:68:3e:bd:89:7c:b7:93:bd:c3:c0:2d:8d:36:c2:
32:e9:bc:2a:55:9b:6e:96:ce:38:b6:5c:2a:7c:2a:a1:dc:fc:
43:64:c4:c9:ee:b6:d9:43:14:81:cc:8d:a7:cd:af:66:a4:a7:
df:a7:e8:42:d8:1e:ec:72:82:6e:97:13:ac:da:a2:0b:e8:9a:
9b:fb:11:99:7b:17:30:97:8f:44:12:25:76:c1:d2:5a:45:f5:
77:c0:30:c2:ef:43:81:b9:38:11:83:a0:19:61:0b:36:45:cd:
e7:d3:7e:ff:3e:e3:96:fc:23:1f:b5:46:3d:e0:dd:35:2c:dc:
37:c4:67:de:ca:b2:0f:58:7a:0e:ba:a4:b0:67:97:07:df:16:
0e:5f:ce:80:c7:21:61:b7:48:6e:23:ec:71:09:8d:ee:f3:50:
6f:e0:6b:57:61:af:72:c4:9b:7f:07:1b:4f:74:6a:fc:7f:55:
53:1e:18:08
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNTI0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmJiNC0wNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAln7MXnTZd+TS2nSliOMViBDRL20+R4pXrCNr2fls+qNpp/b8E4EZer/20qSf
wnD+1zD6Jsx9WexiTymX/vyMCB681c+sZ5XsQ2yhb4QC4iaNdAowT4i8lHzIkyzS
72deKguv05Pm/DYnPqdmZjwBZJ3Hj6GYGkJoIsO012FPLiSVFFjLJWJgbF1yaRAE
4G2Q+4jg+4PTDhAxulfxn/tR74fgODqAPwogfaHF2FFwMhkFMxViXkliU3RaQr4E
89guth3l6SA6J6TwErRZChnTrXS47sORPD/5nqQB3HVJzTOIoiONZmele6/4if05
twSPfrMmubuzD59r6CLRd0MoRQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHddu97Q
zCmkk1qAz1F2PDsTDoUAMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRUMzMUYyOUFC
RUZDMTFFQzgyRkJFQzBBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcBJAYIQOZmMA0GCSqGSIb3DQEBCwUAA4IBAQBzs0mj5i1NRTvuPDuQ
sTnOaI6vI0y+20hzbcbEVl6fkxZEUZ6f0cGCTmC9yD6I1zoMaZcVL7+06la36KJO
siKfLARDGb61C8cb3f10aD69iXy3k73DwC2NNsIy6bwqVZtuls44tlwqfCqh3PxD
ZMTJ7rbZQxSBzI2nza9mpKffp+hC2B7scoJulxOs2qIL6Jqb+xGZexcwl49EEiV2
wdJaRfV3wDDC70OBuTgRg6AZYQs2Rc3n037/PuOW/CMftUY94N01LNw3xGfeyrIP
WHoOuqSwZ5cH3xYOX86AxyFht0huI+xxCY3u81Bv4GtXYa9yxJt/BxtPdGr8f1VT
HhgI
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:38:36 2026 by rpki-client