
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa
File: 17A651BCA40E11EEAAB83671C4F9AE02.roa (raw, json)
Hash identifier: AQCdnyWc2A0RuJ5m4pn2aOSXExDCTyUrz6gNwl8Ipp0=
Subject key identifier: D6:44:BB:F3:A9:2B:93:C7:AD:CD:ED:19:92:B4:B5:61:88:36:5E:CA
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 063B
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa
Signing time: Sun 04 Oct 2026 23:44:17 +0000
ROA not before: Sun 04 Oct 2026 23:44:17 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 47869
IP address blocks: 2401:df40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Oct 4 23:44:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2e4d0-b230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:c8:87:0c:95:87:ec:3a:c9:8f:35:8b:c5:
58:1f:5e:a2:bc:7e:98:07:e9:66:67:41:76:ee:cc:
90:8b:47:86:d2:98:5a:a7:cc:2d:9a:5d:b4:8e:cd:
0f:f9:cf:fb:e9:3f:72:6f:9a:53:80:93:7a:0c:f8:
e3:7f:d4:a6:17:db:de:a9:07:fe:b0:90:87:bc:c5:
52:45:0c:3f:f7:35:3a:22:ce:72:e4:68:0e:d7:e9:
1e:b7:45:45:6b:fb:be:c5:58:49:fe:14:0a:3a:42:
0b:1b:10:c4:5b:3a:7c:4c:d5:bd:70:27:9f:64:d1:
85:25:33:01:6a:a6:40:c2:ff:1b:ec:63:6a:7f:75:
05:6d:47:ab:ff:23:da:67:c8:b4:ee:bd:70:c9:a2:
69:a5:0d:42:82:2a:9f:47:8a:bc:6f:fa:2f:5a:75:
8f:64:f2:48:07:f1:01:e0:7d:2f:0c:06:eb:ef:2d:
db:7e:b2:c2:a2:a5:75:33:45:a4:fe:5f:f7:ce:a6:
6e:65:b7:94:0b:0b:5a:46:24:4f:98:18:5b:5f:c6:
9f:4d:66:55:91:c0:23:a1:98:ce:77:14:35:45:22:
9b:dc:5c:99:b5:3e:2b:9c:01:d2:1f:d1:10:26:5d:
ad:63:f1:78:3e:6d:08:bf:7c:9a:57:4b:1a:0e:a1:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:44:BB:F3:A9:2B:93:C7:AD:CD:ED:19:92:B4:B5:61:88:36:5E:CA
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:df40:1::/48
Signature Algorithm: sha256WithRSAEncryption
19:1a:09:1f:b5:f5:da:66:b3:26:22:76:64:e1:58:d6:d7:91:
c2:08:03:d4:de:40:8c:c8:a5:05:4a:f0:d8:a0:83:03:1e:df:
84:9d:74:1e:66:e0:2e:21:97:78:fd:e8:b6:78:e5:9f:db:28:
6e:0b:56:37:90:f0:78:ad:0d:04:2e:ea:2a:99:a8:ad:f0:a9:
31:03:28:8f:47:2f:b4:8e:fd:b0:bd:c5:3a:f5:2d:ea:dd:de:
fa:04:f2:16:52:95:83:6b:43:00:76:c7:f6:3d:53:f6:76:b9:
3e:41:2a:d1:b8:ff:f1:d3:a9:fe:18:2d:10:bb:9c:e4:65:9a:
aa:2e:9f:55:fa:10:f2:e2:bd:8c:fe:ff:85:69:8d:ec:db:f8:
c3:9f:3b:6b:64:52:d5:6e:99:50:89:34:d6:f2:a5:9f:e0:0f:
8b:f3:b2:d5:35:db:42:92:d6:bc:a9:60:20:5a:59:05:ac:b5:
2b:42:b8:84:dd:42:94:58:b6:b3:d5:8a:de:a2:be:51:b3:c4:
c5:e7:13:7d:2a:9f:60:be:12:76:42:77:54:cc:cb:b4:72:b1:
67:44:93:ae:75:6f:31:16:5d:00:95:b6:76:91:6e:aa:0c:69:
27:a3:91:3b:e7:5b:e4:8b:71:bc:a4:14:a3:6d:57:59:16:cd:
da:ce:c4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:38 2026 by rpki-client