
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E17A1F3A1BA011F18233F5FF033D8C67.roa
File: E17A1F3A1BA011F18233F5FF033D8C67.roa (raw, json)
Hash identifier: K1ZCtO2oBCR63GUM9AvzMfAWmcp0oxRwdOYeJ1z9CXk=
Subject key identifier: A0:2B:25:BF:13:07:41:EF:AB:06:02:25:AB:CE:F2:6A:38:9F:3D:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA3F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E17A1F3A1BA011F18233F5FF033D8C67.roa
Signing time: Sun 31 May 2026 17:42:36 +0000
ROA not before: Sun 31 May 2026 17:42:36 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152524
IP address blocks: 2001:df3:f8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59967 (0xea3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:42:36 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c730c-3705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:03:df:90:77:69:cc:cf:f4:bd:d9:b2:30:6a:
e5:bf:8e:ca:8e:c9:40:e3:97:62:ab:b4:80:0d:32:
d7:e9:2a:c5:8b:07:d7:f9:2b:ca:65:ba:10:67:ee:
25:75:e2:ae:8e:28:6b:22:dc:5f:53:40:c9:ea:a3:
a0:67:c3:cf:47:45:e3:c0:1a:53:0b:90:1c:0b:35:
2f:9d:bb:9e:07:c9:37:d6:22:1c:8a:f9:ad:b6:2b:
8d:f0:d8:1b:e4:95:43:18:a1:af:29:60:5e:b5:87:
7f:cc:0f:57:36:de:52:a2:e0:a5:64:31:6f:89:ea:
e4:8c:c0:e9:4a:9a:60:ff:27:df:c4:f5:2b:73:72:
75:08:98:58:71:18:7f:51:e0:7a:08:a0:ab:2e:04:
ab:39:5b:fd:01:83:3f:ea:3e:74:66:74:8b:8f:07:
f3:0d:13:76:94:c1:74:ad:ab:11:ba:f3:97:98:70:
16:dc:ae:7e:be:b0:39:92:0d:28:d5:02:ee:b3:d9:
18:4a:61:24:88:34:0d:25:04:64:d8:67:78:bd:04:
d1:10:29:c9:f4:fe:a2:50:4e:8e:d6:81:78:d5:71:
f7:23:8e:80:f7:5c:39:98:62:ab:aa:e4:d0:78:09:
62:6e:f7:59:15:76:c4:cd:ee:93:66:57:ee:31:1c:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:25:BF:13:07:41:EF:AB:06:02:25:AB:CE:F2:6A:38:9F:3D:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E17A1F3A1BA011F18233F5FF033D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:f8c0::/48
Signature Algorithm: sha256WithRSAEncryption
73:c7:d6:65:75:03:04:bb:39:22:e4:5d:64:cd:11:59:f0:39:
db:61:c8:82:40:ba:69:77:1f:23:72:53:ac:42:e1:b4:43:ee:
83:f2:ee:38:87:ce:81:ab:a5:9a:9b:fc:d7:32:65:c8:60:fb:
de:13:7e:d4:8a:80:f4:ea:72:40:93:13:ba:78:63:ae:18:9e:
ca:85:9b:7a:82:1d:41:d8:12:4b:8b:93:64:f8:6a:f4:97:4d:
60:ec:c6:ea:fb:f3:52:0a:cb:9f:33:b3:27:55:c3:9a:e8:e6:
30:6a:7b:56:92:4a:05:3c:83:5f:68:56:41:6a:4f:5c:ed:bd:
79:5d:7f:ae:55:61:63:5f:d9:5a:6e:45:39:13:ed:83:89:17:
db:52:93:19:cf:1f:93:8b:99:3c:7f:bb:07:56:ce:61:34:6c:
6e:89:70:b0:07:a6:35:2f:0d:47:a1:a0:43:80:12:f5:ee:43:
02:39:54:6e:75:af:84:37:20:1f:9b:b9:64:31:43:63:3f:70:
7b:a5:38:0d:bc:05:55:95:a4:5a:5d:4b:e7:26:14:e8:c0:91:
1e:62:9c:3e:82:d1:12:55:d5:5f:3f:9f:9b:d2:c2:88:88:5c:
09:32:45:e8:b9:44:38:3e:e7:f2:e2:57:63:eb:06:f2:b8:b1:
1d:53:1f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:15 2026 by rpki-client