
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F1D1A1DC324011EFB7FA4210C4F9AE02.roa
File: F1D1A1DC324011EFB7FA4210C4F9AE02.roa (raw, json)
Hash identifier: fjJUEAienYilHSOP0Hzat8aRY7MT2qiffBcLvYignzc=
Subject key identifier: FF:2E:66:A6:76:C1:6D:40:6A:C6:5C:58:EA:94:43:44:CC:AE:E2:6B
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1165
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F1D1A1DC324011EFB7FA4210C4F9AE02.roa
Signing time: Fri 22 May 2026 20:26:16 +0000
ROA not before: Fri 22 May 2026 20:26:16 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152930
IP address blocks: 2406:840:fda0::/44 maxlen: 48
2406:840:fe91::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4453 (0x1165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:26:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bbe7-3e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:99:1a:50:b1:3c:82:19:7f:6c:9d:43:50:
73:46:dd:94:f3:a7:23:a7:3c:de:34:cb:11:98:c2:
c6:cb:22:dd:9e:13:3b:92:ae:fd:35:6b:f2:2b:9d:
92:ce:e3:ee:f8:b2:a0:d5:c9:a1:11:7d:f4:00:51:
f7:19:c4:58:7d:53:3a:3f:7b:34:f2:53:d4:c2:dd:
e4:3a:89:af:94:4c:a4:18:5f:17:11:53:cd:fa:0b:
25:2d:37:9b:a4:3d:76:e2:d4:c7:83:52:5e:fa:40:
76:a4:19:05:3f:28:b9:ef:1b:a0:a9:5d:c0:10:a2:
4b:ce:fa:8e:a5:44:2d:c3:1d:92:9f:80:ac:33:88:
9d:84:2b:d2:5d:af:a7:d1:38:a0:fc:53:91:55:5b:
d4:98:27:76:68:bb:55:34:75:41:b5:f8:d8:40:44:
9b:48:b2:73:b4:0f:ff:17:4e:9d:df:0b:5d:0a:2b:
91:97:8c:ee:7c:15:a6:79:75:86:38:bf:dc:04:59:
64:8e:02:cf:0d:9a:34:2d:a8:42:57:92:88:4a:40:
a0:6b:02:44:aa:27:1d:cb:8f:99:a3:09:71:95:6d:
8e:38:e5:69:66:be:d2:27:0a:44:6b:73:94:d3:9b:
3d:52:d1:81:c5:61:da:00:8f:e6:c4:79:1c:bc:19:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:66:A6:76:C1:6D:40:6A:C6:5C:58:EA:94:43:44:CC:AE:E2:6B
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F1D1A1DC324011EFB7FA4210C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fda0::/44
2406:840:fe91::/48
Signature Algorithm: sha256WithRSAEncryption
31:da:bc:49:57:3e:7b:ce:22:e7:0f:7d:dd:67:e5:c8:9f:29:
fd:e9:f4:ab:69:fa:bd:36:64:a6:a6:57:56:9e:06:6e:3f:73:
d0:f7:59:5d:74:b8:f8:d7:50:c9:9e:fe:1d:22:5e:95:23:59:
0c:09:92:a4:1c:7c:4e:72:b4:92:a2:6d:d3:1c:77:20:e1:9d:
bd:91:02:63:8f:31:51:c2:aa:81:ec:20:80:27:bb:ca:44:0f:
64:c8:bf:8e:10:6f:cc:73:5a:5b:68:0e:fd:19:1e:9e:b1:5d:
b1:af:29:d0:31:bd:8a:35:d0:12:aa:02:26:6d:0b:77:84:22:
53:61:92:6c:15:a1:b7:3b:15:7c:37:87:9f:50:b1:cc:e7:25:
d6:96:52:cb:eb:3a:49:ff:5d:0c:17:c0:89:45:a3:23:b9:8a:
81:50:a1:5a:bb:c9:a3:e4:fc:42:bd:1c:2f:86:b1:4c:7c:37:
14:37:79:e6:8a:06:a7:b5:1b:fa:cc:45:a3:90:c5:87:ab:8e:
f6:9f:e3:59:59:84:76:55:ad:e8:6f:a2:08:af:55:3c:cc:08:
bb:f3:5a:2e:2e:15:4f:46:52:ad:1d:72:be:1c:46:3b:bf:50:
e6:1d:df:21:d7:49:ce:c7:34:9a:c6:96:da:53:8b:9b:66:9e:
0a:93:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:07 2026 by rpki-client