
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FE827E504A1D11F1999F3F88CA833773.roa
File: FE827E504A1D11F1999F3F88CA833773.roa (raw, json)
Hash identifier: 8pmY6evgF+1ol7opkvqYULrfS4NsBRCIPBjIOQpPyw4=
Subject key identifier: 0A:E9:A1:3C:6E:36:B2:27:3D:6D:CE:D0:51:8C:3A:37:4D:B4:C2:FB
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 11A8
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FE827E504A1D11F1999F3F88CA833773.roa
Signing time: Fri 22 May 2026 20:28:33 +0000
ROA not before: Fri 22 May 2026 20:28:33 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7720
IP address blocks: 2406:840:e280::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4520 (0x11a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:28:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc71-5354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:eb:ae:70:81:6d:f5:17:b5:22:a9:23:86:
e0:cf:db:03:40:2a:eb:4f:2d:26:62:c2:4f:8d:50:
71:76:f2:1f:48:64:02:1c:af:4a:e1:ab:5b:b3:a2:
f8:28:c8:10:a5:b8:5b:58:94:6c:00:0e:13:0a:17:
a7:e2:24:18:06:35:d6:6d:eb:4e:90:fd:a7:29:d7:
02:01:b8:17:8c:44:cf:c3:03:89:bf:e1:6f:ec:c1:
78:76:22:85:db:a4:02:2d:73:26:8a:57:91:ee:fb:
76:11:44:06:2f:34:44:c4:9b:5c:50:11:0a:80:6b:
1c:14:50:78:b2:dd:5e:3e:b8:bc:2a:9c:e7:8f:19:
9e:3a:62:ad:8f:0b:19:22:af:98:5f:5d:bc:3c:71:
ee:0e:94:13:c2:a0:ca:d3:48:99:75:ac:87:23:a0:
c5:20:21:b1:97:0f:d6:2f:aa:70:8f:f4:fb:50:84:
31:6e:c0:8c:03:0d:d6:c9:2c:1d:0d:1e:ff:9e:b5:
58:38:ef:4e:15:83:d4:83:d0:65:25:b5:f9:cc:5d:
bd:10:51:1b:ac:1f:57:a7:f7:9c:c4:db:b6:0b:cc:
19:6a:ff:28:cd:2d:89:b2:64:4d:78:af:33:71:02:
3d:76:87:f4:2a:d1:58:3f:a9:b5:0e:9c:c5:35:9b:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:A1:3C:6E:36:B2:27:3D:6D:CE:D0:51:8C:3A:37:4D:B4:C2:FB
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FE827E504A1D11F1999F3F88CA833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e280::/44
Signature Algorithm: sha256WithRSAEncryption
9c:af:1d:33:c5:a6:12:49:0e:fa:19:7b:ff:c2:4e:3b:fa:8c:
ec:25:c2:65:5f:8f:2a:2f:cd:66:5d:60:4a:c8:8f:f8:42:cb:
a2:97:f2:11:9f:e5:37:22:cc:42:ee:d0:1b:25:7c:00:5e:1e:
b4:66:1b:e0:1f:a0:c9:36:d7:76:0a:e2:16:29:e5:0e:9b:b6:
f3:81:66:02:a9:14:92:0e:70:bb:a1:fb:d4:5d:3d:37:93:6d:
1a:4e:16:21:be:43:c6:ac:ae:64:bd:e8:0e:e5:cd:6b:e0:2a:
2d:74:07:c2:c7:d8:ed:2d:03:a3:fb:77:0d:8f:dc:47:74:8e:
8c:85:60:af:d9:72:11:dd:33:f4:69:73:d9:f7:31:5e:ae:13:
ae:58:e1:c0:ed:bb:e2:7c:6c:24:d4:51:56:89:a1:c3:52:4a:
83:cc:dd:39:80:81:f3:4b:94:64:b8:79:8b:09:83:f6:73:d5:
b2:89:8e:01:03:7d:82:56:f9:5e:c1:3d:54:8b:3b:4b:fc:d5:
e2:59:00:98:89:28:bf:64:b6:a3:7d:c5:77:16:9a:a8:3f:3a:
4d:5e:3f:40:b2:ec:47:78:e8:5f:7a:c3:43:58:e9:a4:55:02:
d0:c0:13:85:90:b6:50:c3:07:a8:13:63:72:ef:42:eb:e3:37:
59:7f:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:14:50 2026 by rpki-client