
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FEF123F61A0B11F1AF373C2B3E3D8C67.roa
File: FEF123F61A0B11F1AF373C2B3E3D8C67.roa (raw, json)
Hash identifier: bRDmPeofRBc4dLBkJ+vVjTOXfVzhKrGEqbVZrZs8XdE=
Subject key identifier: B9:62:EF:FC:77:96:76:FD:12:E6:77:52:CB:F4:00:4B:8F:19:06:4B
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 10BA
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FEF123F61A0B11F1AF373C2B3E3D8C67.roa
Signing time: Sat 07 Mar 2026 09:57:05 +0000
ROA not before: Sat 07 Mar 2026 09:57:05 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 208753
IP address blocks: 2406:840:eeb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4282 (0x10ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Mar 7 09:57:05 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69abf671-79b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:6b:0d:00:01:81:1a:bb:5e:94:71:85:b2:
89:e9:20:f1:c8:db:99:e3:52:ef:d8:58:fc:1a:27:
a6:f0:4c:c0:87:54:0c:0f:93:3c:68:08:7c:86:ff:
db:d5:88:5f:85:7b:2a:b8:c5:da:bb:c5:2a:e1:1e:
43:49:05:a9:da:83:52:df:a4:3e:a0:02:fa:9d:61:
ac:70:57:e2:29:75:82:6b:94:9f:30:77:ad:1a:64:
3d:78:2f:1d:b2:d5:58:a1:e8:48:d4:0b:64:cf:33:
b2:3e:05:d3:9f:df:8e:7b:f8:dc:13:08:a9:10:ed:
6e:76:5b:6f:81:6a:22:f1:54:a0:36:6d:d1:7c:03:
86:0d:2a:44:16:4b:f5:b7:95:a4:6f:f3:7e:ea:64:
90:82:3e:e2:6e:c4:01:5c:71:76:56:9f:ed:e6:0e:
42:60:42:03:c3:09:29:62:3b:d9:f2:a4:48:8b:d6:
61:bc:c8:2c:8a:18:46:de:bf:e9:18:be:12:93:91:
9a:cd:1f:6f:7a:95:87:b0:74:a3:87:28:85:53:f1:
cd:3f:40:97:ee:26:43:8a:ac:27:7b:71:16:e2:99:
c4:4e:fc:6d:0f:84:e3:cd:16:31:a8:e1:ed:f6:c0:
a1:2a:1e:df:f4:ec:b0:b4:1b:f6:fc:af:7c:fb:86:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:EF:FC:77:96:76:FD:12:E6:77:52:CB:F4:00:4B:8F:19:06:4B
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FEF123F61A0B11F1AF373C2B3E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:eeb0::/44
Signature Algorithm: sha256WithRSAEncryption
57:9a:15:c4:a4:78:e3:0e:6e:0d:60:4b:27:68:eb:5e:c4:c3:
5a:9c:45:6e:ad:51:5f:9c:a3:42:58:5b:b7:3e:05:7c:38:46:
34:a6:30:01:53:0f:87:02:43:91:08:3e:c9:f3:ef:22:ab:ad:
e4:cf:72:d7:dd:45:07:03:f2:c2:87:8b:14:4e:e7:bc:d2:b7:
e1:ea:51:d0:71:e7:f4:96:26:ab:95:75:e5:b6:3d:5c:02:a7:
ee:4a:18:66:e3:44:0b:35:7e:60:14:1f:8d:69:db:20:3e:f4:
96:6a:96:9c:07:09:37:37:30:fa:4c:5b:5f:af:14:ba:28:96:
b5:b0:9b:7c:71:71:9d:b2:d0:fa:8d:0d:e5:67:c0:71:9f:ab:
d3:2b:eb:32:42:0d:c7:e0:c3:1a:da:68:57:93:0a:f8:dc:a9:
6d:15:5c:26:19:20:da:e6:47:31:32:a5:b6:a6:f6:8f:f5:f4:
a5:dd:19:db:23:16:0b:ee:1d:c4:7e:e2:c6:21:00:55:bd:63:
97:8f:3c:6c:24:e9:e1:7f:c9:c9:65:25:e8:f0:0f:b1:f8:15:
b6:6c:5c:07:e2:f0:fa:78:1f:f8:40:14:51:4b:0c:79:68:b1:
04:46:7f:c6:87:32:0f:84:8e:36:97:7e:3e:91:02:d7:67:62:
38:71:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:24:36 2026 by rpki-client