
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa
File: 385FE4729A3011EA97979D38C4F9AE02.roa (raw, json)
Hash identifier: jP40KZsCmOmWONSIHgKe8WMEujlaJA3ftkX2PTnkP7g=
Subject key identifier: 0F:FF:0B:CB:00:E3:D9:A7:49:1F:9D:89:06:2E:D6:C0:3A:71:18:76
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 108B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:57 +0000
ROA not before: Thu 22 May 2025 20:08:17 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 213215
IP address blocks: 2406:840:ece0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4235 (0x108b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:08:17 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493f1-9a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:da:db:da:24:a2:ee:98:ed:93:6b:d7:19:
f3:05:8c:d4:3d:68:2f:4e:1b:33:8c:d8:b5:15:1f:
b5:28:40:8f:c7:3b:c3:26:6c:8b:36:19:4e:63:a4:
74:a1:5b:ce:35:61:0e:36:44:a3:0b:7f:4a:f8:5d:
51:e5:ec:26:b4:59:de:7d:18:dd:dc:95:86:96:c6:
53:42:7b:ba:67:44:f0:f9:f1:46:0d:a2:65:b3:9d:
58:cd:b1:44:4c:49:f6:d5:9d:fc:96:8c:5f:cb:6d:
95:88:67:8b:91:4a:a5:ee:e2:20:b7:63:e3:68:94:
ba:a1:cc:63:d0:84:71:6c:61:87:0e:69:ce:e1:5c:
c1:8d:65:20:a2:92:8d:91:78:11:12:ea:72:04:87:
57:7a:ce:6c:aa:5b:4e:d9:22:0a:63:18:5a:e5:d1:
9c:08:fc:2b:5e:89:4c:41:ff:f5:59:19:8f:80:55:
af:6b:d0:bb:69:34:5e:5f:35:cf:22:74:97:b4:81:
88:21:46:78:35:83:05:0b:02:aa:50:43:72:a8:bc:
31:33:8a:21:36:14:7c:cc:43:bd:96:12:05:1f:4a:
95:89:18:85:c3:d6:40:29:4a:11:74:7d:75:8c:23:
ed:7f:b9:52:89:05:bd:e8:ba:fa:c5:cd:ea:6e:14:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:0B:CB:00:E3:D9:A7:49:1F:9D:89:06:2E:D6:C0:3A:71:18:76
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:ece0::/44
Signature Algorithm: sha256WithRSAEncryption
1a:ae:7d:54:84:18:d3:fa:6b:41:d0:17:a5:48:27:a0:57:87:
cd:0d:c1:31:00:ef:4f:e8:24:7d:ab:52:4e:f7:87:5e:ec:4f:
ae:8c:ca:c2:3c:82:e3:ac:37:b0:d9:27:d8:13:70:ee:df:a1:
40:a4:11:ef:a4:ad:52:5a:4a:b9:3f:ab:0d:e4:a4:d0:2e:4c:
48:57:b9:38:9b:78:82:9e:02:25:67:df:fb:ca:7e:1b:1c:7a:
66:45:4c:38:49:d5:30:5b:08:fc:c4:8f:97:6d:27:0c:91:42:
b4:05:52:b0:af:c8:f4:8e:ba:99:bd:98:da:79:8e:72:7e:40:
28:63:f7:73:9b:15:6e:90:f3:42:8a:93:40:5d:50:1d:6d:fb:
ef:dc:50:74:23:0e:0f:d8:48:fc:07:b5:88:ef:ea:e8:20:13:
b6:a9:92:88:22:f4:8b:47:94:41:e0:84:45:6c:0d:b7:72:2c:
ff:68:15:2c:57:02:36:3a:c8:70:02:28:8f:bc:7a:67:46:f6:
15:ee:93:68:35:1c:68:69:7d:88:86:34:77:60:25:a8:c0:2e:
84:02:cd:a6:69:6e:90:64:d7:c9:70:a9:00:16:c3:60:34:7a:
ca:54:34:9a:c9:21:6a:c2:2f:0c:d5:0c:b2:8d:86:00:86:b0:
af:98:50:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:33 2026 by rpki-client