
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa
File: BB17221E211611F08D31C34DC4F9AE02.roa (raw, json)
Hash identifier: zi4/aUqGR718bniuf1jQK9sOH3knTVcJf3T+VbBiSok=
Subject key identifier: 3C:D5:48:9D:30:B5:02:F6:BA:A9:85:D6:10:3B:01:A7:A3:5B:D9:CC
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 01DE
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:21:57 +0000
ROA not before: Fri 29 Aug 2025 05:25:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 137897
IP address blocks: 2403:27c0:c02::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Aug 29 05:25:33 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a59d04-b04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:4a:c3:c7:0f:52:49:bc:b3:0a:be:03:c2:
4f:2c:ac:07:cd:fe:41:9f:45:c6:3a:9b:36:16:0c:
c7:55:a6:de:27:96:3a:ad:a8:bf:c9:ad:f6:80:c8:
be:ca:65:ce:55:5d:4e:4a:17:7a:4b:50:83:0e:07:
a2:66:0f:fb:f3:49:a9:38:50:76:b4:82:3f:1a:6b:
e2:26:d1:51:e5:be:48:ed:1b:22:b8:f1:7c:c0:4f:
37:96:4b:55:08:9c:24:44:5d:4c:3a:2a:89:e5:ec:
e0:3f:e6:1e:a0:e3:38:e2:70:5d:04:20:ef:0f:61:
ff:e3:11:de:85:77:20:90:c1:91:b4:fb:90:84:f4:
5a:e0:eb:66:d3:22:7d:9b:b9:40:f5:e2:b7:0c:04:
f9:4a:b9:f4:11:b6:80:a9:32:9e:f5:9b:ab:3b:f1:
5a:43:dc:7f:79:08:e0:3c:87:cc:7a:f1:ff:9f:d7:
0b:33:93:b7:e9:75:89:9b:c1:b0:2b:ea:74:b3:fb:
50:de:1d:54:ff:78:f4:a7:c4:52:5c:a2:50:a9:7b:
17:08:02:9f:b9:69:a6:5a:a0:48:d1:6c:99:44:22:
af:f6:42:90:f9:45:8c:99:fa:16:b8:f5:16:a9:91:
43:55:5f:f7:29:d8:d8:93:be:19:34:62:de:97:c6:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D5:48:9D:30:B5:02:F6:BA:A9:85:D6:10:3B:01:A7:A3:5B:D9:CC
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:27c0:c02::/47
Signature Algorithm: sha256WithRSAEncryption
ba:38:14:9e:8b:f7:5a:f9:08:1e:dc:8b:cf:a1:b7:ec:79:6d:
f0:a4:f4:82:a4:8e:17:7c:1e:d8:24:3d:d2:5f:d5:36:98:89:
76:3a:03:2b:e7:77:4f:4e:9a:19:25:ed:24:53:90:8b:e5:19:
24:81:10:45:5e:24:7a:97:d2:d1:35:89:af:33:77:b5:78:15:
62:3d:82:1e:a7:9e:37:a3:20:79:17:60:70:23:a0:54:77:13:
fd:98:5c:8a:30:d2:e2:e3:fe:bb:93:ab:ef:f9:41:27:40:17:
b6:5c:a3:8c:7f:51:06:e6:8a:81:a1:c3:15:39:3b:bf:19:9c:
d8:58:cb:2f:47:34:fb:bd:f9:60:16:dc:88:fa:e2:5a:8c:d4:
d1:22:95:8e:f6:ae:f4:47:47:22:af:27:ca:70:fc:bd:c4:32:
b7:c9:0a:ec:6f:27:91:ba:a3:13:a3:3d:83:be:d2:1e:ef:eb:
ac:61:1c:58:50:62:27:b9:3e:eb:83:59:4e:cb:a9:e4:dd:95:
45:04:7c:af:6f:8a:b2:dc:7c:ed:90:64:0b:99:41:22:4e:a2:
44:a2:ce:d7:85:3a:cd:ac:a0:e3:23:1d:41:86:ea:31:e0:14:
69:0d:37:25:f0:84:a6:3b:2e:90:d9:02:7f:f9:eb:f3:aa:11:
3e:0e:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:48 2026 by rpki-client