
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/0E6E2FF4590A11F0B7FD292DC4F9AE02.roa
File: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (raw, json)
Hash identifier: Si9syy0a10iRlCe9npjHmkK+zgQ6f2XPNBmPhKIkgHQ=
Subject key identifier: 21:F7:AB:DC:3C:32:57:AD:E8:96:D5:E3:25:A7:80:F2:F6:4A:11:46
Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864
Certificate serial: BF
Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/0E6E2FF4590A11F0B7FD292DC4F9AE02.roa
Signing time: Mon 11 May 2026 07:40:48 +0000
ROA not before: Mon 11 May 2026 07:40:48 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140919
IP address blocks: 2402:960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl
rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864
Validity
Not Before: May 11 07:40:48 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a018800-90c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:57:5d:f7:0b:0a:81:d0:2e:6f:ce:82:c4:
65:80:c6:75:00:a5:26:c8:54:18:73:82:fd:7e:ff:
60:3b:93:7a:fb:61:f3:94:d2:63:ad:8e:30:0f:05:
bf:6d:0b:8f:08:34:13:24:a5:8a:79:58:49:53:1f:
60:70:94:e8:6b:50:b9:f7:bb:f1:75:96:07:30:99:
da:1b:5a:fc:16:ac:b2:4e:f3:b5:9a:ae:e0:a8:a5:
85:35:6f:1b:61:34:fa:41:65:f0:17:f3:c0:a6:87:
6c:f7:8c:08:5d:59:fa:b2:03:d9:fd:f5:52:fa:b4:
fa:b3:fc:b1:9b:35:bc:4d:88:eb:53:46:e9:2d:56:
42:a5:60:56:0d:80:bf:f0:b0:34:c7:52:59:5b:c0:
74:8f:a6:af:cc:b7:11:2c:f0:eb:fc:bc:7b:67:98:
10:a4:b5:34:0f:a9:2b:c9:77:6a:64:5a:ee:3c:92:
00:7e:62:53:c6:0c:30:2a:d9:a1:e3:bf:2e:aa:e0:
45:97:1f:36:6e:13:25:b7:18:2d:79:b9:84:34:8f:
e4:aa:00:f5:2b:40:05:82:8d:a0:d4:bf:30:0d:25:
4c:15:38:8a:47:8d:b8:94:1f:2e:6f:21:8d:a5:cb:
aa:e0:81:13:ab:1f:08:22:08:7c:8f:88:87:4b:50:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F7:AB:DC:3C:32:57:AD:E8:96:D5:E3:25:A7:80:F2:F6:4A:11:46
X509v3 Authority Key Identifier:
keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/0E6E2FF4590A11F0B7FD292DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:960::/32
Signature Algorithm: sha256WithRSAEncryption
18:15:ca:ec:c5:5f:0e:59:98:e7:70:7a:f3:1b:26:a0:f5:8b:
7e:3c:5a:64:e9:02:f9:43:ea:c8:63:9f:42:c7:b7:c2:b6:e4:
b6:74:85:40:dd:0d:40:b3:a8:b0:23:7a:ad:ee:a4:f4:e3:83:
5e:7d:5a:db:ed:fa:e4:ab:06:c5:bd:9f:c6:92:3c:e7:66:09:
9c:66:4a:b4:1b:ce:20:94:6d:36:61:80:85:cf:da:fb:44:13:
06:ea:3d:8e:26:3e:f0:d8:f4:c0:c1:f2:af:0f:38:ad:a5:0d:
8e:ef:b9:cd:52:20:c4:81:c9:25:6e:77:fe:31:7c:5b:91:79:
80:15:0d:d9:38:03:3b:27:7a:e2:4b:80:b9:73:1f:e7:af:ba:
a2:ad:86:cf:2f:9f:8e:4a:25:5f:a3:75:19:83:a6:0a:67:9e:
e0:19:b1:52:3b:8e:f1:f5:39:76:33:28:26:47:89:16:3d:92:
88:e5:68:14:0f:8e:2b:da:c2:91:a4:b9:95:3f:fc:16:9f:63:
d6:f8:98:a2:46:42:75:a5:bd:49:53:7c:12:9e:d6:c0:0f:cd:
6a:ff:00:c9:69:00:16:79:01:20:11:a7:11:a2:1b:51:c8:5e:
d1:3a:37:3c:5d:f6:6f:f6:dd:36:87:53:42:0a:ca:92:78:b0:
62:70:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:00 2026 by rpki-client