
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/E70F43AC210A11F193291E4B223D8C67.roa
File: E70F43AC210A11F193291E4B223D8C67.roa (raw, json)
Hash identifier: VOw4usuek1XrVJzP+LQ+Yf9ZKDyU4T2tUUpYWBUgYx0=
Subject key identifier: 20:D6:D1:D0:4B:A7:E5:43:B6:C6:6E:1C:CE:69:71:4E:13:F8:29:46
Certificate issuer: /CN=A917877E/serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37
Certificate serial: D9
Authority key identifier: C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/E70F43AC210A11F193291E4B223D8C67.roa
Signing time: Thu 27 Aug 2026 06:57:27 +0000
ROA not before: Thu 27 Aug 2026 06:57:27 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154038
IP address blocks: 2402:16a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl
rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917877E, serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37
Validity
Not Before: Aug 27 06:57:27 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8fdfd6-3d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:7c:fb:aa:bd:49:1f:80:c6:2f:5d:a2:a4:
09:40:8d:97:49:c3:98:90:f9:19:53:84:9d:e3:3a:
14:d1:da:70:97:2e:8b:cd:98:6a:3e:db:cd:12:cc:
ac:bd:24:dc:36:1c:95:53:d3:13:72:dc:81:41:42:
6d:e4:de:1b:1e:87:48:99:0c:67:be:e7:df:3f:6d:
fb:7e:71:ab:c5:f4:a0:b7:b5:00:6e:c7:21:69:e9:
53:53:fd:54:a6:34:17:a9:01:05:9c:46:9b:75:91:
02:a9:bc:91:e3:ca:ce:43:37:45:d7:65:3d:90:41:
ab:1d:13:d5:35:2a:8f:60:76:4c:f4:c1:26:1d:09:
33:b2:ba:3c:18:11:16:4d:fd:24:67:a6:d3:6f:83:
9f:65:77:c9:ab:00:7b:66:36:96:c2:ba:ba:b0:8f:
92:1d:24:9a:7c:65:48:ce:0e:6f:56:70:f1:be:3c:
8e:71:4c:f7:d7:29:a6:f2:b0:e2:dd:b3:02:3f:e1:
d2:2c:14:13:bc:37:9e:95:f1:2f:e1:f2:7e:2f:c1:
cd:d5:c7:fa:64:09:c0:f8:6e:0a:f6:c0:40:4e:c3:
27:54:15:0c:b5:c9:8c:f5:71:f9:5f:06:35:1d:13:
5c:27:d3:97:c0:3a:06:e2:c3:35:44:8c:8f:43:fe:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D6:D1:D0:4B:A7:E5:43:B6:C6:6E:1C:CE:69:71:4E:13:F8:29:46
X509v3 Authority Key Identifier:
keyid:C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/E70F43AC210A11F193291E4B223D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:16a0::/32
Signature Algorithm: sha256WithRSAEncryption
07:27:22:6a:82:10:3a:75:e8:d2:c7:5f:a9:a1:c1:16:32:44:
5f:b2:bd:c8:3d:e7:8e:9c:57:6b:27:28:a7:88:8e:2c:68:97:
00:d7:cc:13:7f:13:20:72:19:19:85:69:b2:db:47:0e:8e:39:
d3:cd:b6:41:9b:73:65:a5:fa:2e:a4:1d:fe:b9:4c:5c:be:f7:
77:bb:5c:2e:13:82:41:d4:2b:b2:fe:59:a5:e4:91:5f:ce:2a:
cb:1b:8e:34:ee:ff:db:f0:4a:56:74:1c:25:28:18:c5:de:53:
a0:9c:18:12:97:e4:1b:c1:fa:e5:1b:e5:ed:ff:fb:77:23:0e:
ab:0c:2e:4d:4c:f1:c6:a2:76:c5:0a:d1:c8:8a:7a:f7:e6:42:
e3:15:ed:58:24:af:8c:35:84:ba:6b:dc:7f:fe:0d:0f:27:01:
bb:47:35:c6:88:73:00:67:97:ac:20:32:d2:b4:3d:36:d7:9c:
2a:bd:60:06:65:ec:a5:01:5f:04:f1:be:72:a0:36:bd:69:12:
16:ab:f8:f4:78:ac:9d:f0:ec:c6:fb:80:d1:f2:54:ec:ae:39:
5c:48:cb:40:18:2a:d8:87:4b:15:0f:c3:53:8a:f7:ae:98:5a:
6e:6e:e4:3f:00:f9:59:be:d6:d2:b6:0f:7b:c0:1c:45:4d:5d:
7e:d8:4c:b0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg3N0UxMTAvBgNVBAUTKEMzOTc4QjZCNjc5QkZBRDcyMkY1Rjg3OUNDMTQ2QzBC
QURGQUNCMzcwHhcNMjYwODI3MDY1NzI3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThmZGZkNi0zZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSt8+6q9SR+Axi9doqQJQI2XScOYkPkZU4Sd4zoU0dpwly6LzZhqPtvNEsys
vSTcNhyVU9MTctyBQUJt5N4bHodImQxnvuffP237fnGrxfSgt7UAbschaelTU/1U
pjQXqQEFnEabdZECqbyR48rOQzdF12U9kEGrHRPVNSqPYHZM9MEmHQkzsro8GBEW
Tf0kZ6bTb4OfZXfJqwB7ZjaWwrq6sI+SHSSafGVIzg5vVnDxvjyOcUz31ymm8rDi
3bMCP+HSLBQTvDeelfEv4fJ+L8HN1cf6ZAnA+G4K9sBATsMnVBUMtcmM9XH5XwY1
HRNcJ9OXwDoG4sM1RIyPQ/4rXQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFCDW0dBL
p+VDtsZuHM5pcU4T+ClGMB8GA1UdIwQYMBaAFMOXi2tnm/rXIvX4ecwUbAut+ss3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODc3RS80MUQ1M0VFRTVE
NUQxMUYwQjQ5QTc4NDdDNEY5QUUwMi93NWVMYTJlYi10Y2k5Zmg1ekJSc0M2MzZ5
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c1ZUxhMmViLXRjaTlmaDV6QlJzQzYzNnl6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzg3N0UvNDFENTNFRUU1RDVEMTFGMEI0OUE3ODQ3QzRGOUFFMDIvRTcwRjQzQUMy
MTBBMTFGMTkzMjkxRTRCMjIzRDhDNjcucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAIWoDANBgkqhkiG9w0BAQsFAAOCAQEAByciaoIQOnXo0sdfqaHB
FjJEX7K9yD3njpxXaycop4iOLGiXANfME38TIHIZGYVpsttHDo450822QZtzZaX6
LqQd/rlMXL73d7tcLhOCQdQrsv5ZpeSRX84qyxuONO7/2/BKVnQcJSgYxd5ToJwY
EpfkG8H65Rvl7f/7dyMOqwwuTUzxxqJ2xQrRyIp69+ZC4xXtWCSvjDWEumvcf/4N
DycBu0c1xohzAGeXrCAy0rQ9NtecKr1gBmXspQFfBPG+cqA2vWkSFqv49HisnfDs
xvuA0fJU7K45XEjLQBgq2IdLFQ/DU4r3rphabm7kPwD5Wb7W0rYPe8AcRU1dfthM
sA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:02:28 2026 by rpki-client