
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
File: 6579B1188F5811F0BE083D3DC4F9AE02.roa (raw, json)
Hash identifier: obQ1muZzlSAR/yzoM3A2VB9QL7USa5r6753HXKfwqfg=
Subject key identifier: 07:6F:84:B8:0D:2F:E0:7F:07:E1:A0:91:97:38:45:F2:E9:40:F7:5D
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: 68
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:29:05 +0000
ROA not before: Thu 11 Sep 2025 21:43:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 15224
IP address blocks: 2406:fb00:1000::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: Sep 11 21:43:47 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a590a0-24cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:1e:e4:72:0a:a6:0b:e7:5d:df:24:5e:f1:
2a:e2:f7:af:6a:22:9c:7c:cd:23:58:71:e2:97:22:
1e:15:42:6d:73:bf:93:72:11:df:8a:5d:6b:d0:58:
cf:fc:d0:91:48:51:cd:6a:95:77:b6:aa:dd:08:14:
46:df:04:c4:9c:a3:3c:22:a7:b7:e3:77:e0:da:b1:
2b:a4:cd:f6:d5:d6:19:d4:73:2b:a6:52:25:f4:74:
77:6d:28:55:59:19:e0:f2:4e:49:06:a0:ba:b7:4b:
54:31:88:9d:a6:76:fc:35:d1:c8:72:5d:b6:86:cd:
93:f4:a9:6e:a3:0b:56:fd:a8:0d:6e:ad:56:af:23:
1c:79:ea:46:29:a2:cc:c6:fe:7e:4d:1c:d3:6d:24:
0c:16:b3:81:32:af:01:3b:26:35:35:52:1d:b0:05:
14:73:bf:c3:03:d6:74:89:57:78:55:b1:1e:fd:ad:
a8:34:ca:0e:5c:56:8e:fb:96:6b:29:4c:16:69:17:
95:e6:21:0d:9b:ba:45:7b:3f:bb:71:52:61:b7:76:
ad:99:c5:e9:3c:eb:9e:6c:d1:47:38:ea:78:ff:ec:
7e:43:b8:33:ab:13:7d:ff:a1:96:d0:6f:0c:57:55:
b5:c3:0c:72:be:51:29:4f:ec:8d:5c:35:ea:ea:d6:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:84:B8:0D:2F:E0:7F:07:E1:A0:91:97:38:45:F2:E9:40:F7:5D
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:fb00:1000::/47
Signature Algorithm: sha256WithRSAEncryption
bf:16:a5:d3:7c:17:17:c3:68:aa:bc:60:e5:e7:27:18:35:ec:
67:25:8e:c6:a4:8b:e2:0a:4e:ef:16:26:19:1c:ea:0c:59:de:
0e:64:96:43:74:56:dd:9b:07:03:8d:90:88:e7:33:b7:49:cc:
97:66:a4:07:12:95:7c:24:e7:06:db:3f:f7:71:84:d3:2e:92:
ae:ea:8a:04:f4:4b:62:79:1e:68:67:d7:59:a5:d0:41:a1:87:
43:08:e8:ec:62:ff:2b:b8:71:a2:b9:2b:85:8f:23:42:79:0c:
57:ce:2b:fc:f2:18:28:e0:ba:74:21:89:33:63:bf:74:a7:79:
48:23:d0:fb:a3:75:8a:25:cd:de:a6:94:9d:ab:c3:88:69:c6:
81:3e:04:73:72:6b:73:90:71:de:fb:b3:87:55:d1:e0:17:75:
b6:8e:19:45:60:c6:58:b9:46:4b:de:06:82:15:6c:41:73:13:
54:ef:7f:f8:2f:47:6b:ee:2f:47:d5:28:f3:5a:3c:44:78:18:
6d:c0:11:1b:02:19:c8:61:dc:bd:d7:80:47:2a:27:71:16:c0:
d7:32:8c:d1:75:6e:44:d9:ef:14:36:93:89:b0:75:ab:95:f3:
34:eb:41:1c:59:3c:82:41:09:e1:75:e6:77:35:26:55:5e:bc:
26:b7:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:01 2026 by rpki-client