
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
File: A1A37268814211EDA138A00AC4F9AE02.roa (raw, json)
Hash identifier: Ep6IdXmlj/gdM9M2rX2zSkLBWeixOEjJE4Q1LUniZzQ=
Subject key identifier: E6:2C:1E:DC:82:DD:85:86:56:B8:1B:BA:4D:E0:13:DC:1B:F6:F5:40
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 107E
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:45 +0000
ROA not before: Thu 22 May 2025 20:07:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 203472
IP address blocks: 2406:840:9840::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4222 (0x107e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:59 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493e4-2174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:96:2b:53:db:57:49:f8:ff:04:b9:f1:02:
99:a2:c5:eb:93:22:28:ea:75:d3:3e:56:ae:a3:cd:
d0:70:37:71:09:47:39:c2:04:53:52:b1:9a:ed:d9:
12:9e:d4:28:56:15:b9:73:e8:6e:dd:6b:97:65:67:
f5:16:af:71:49:a8:ba:11:7d:a8:85:1e:8a:ca:28:
15:65:b2:28:8c:ce:c3:db:07:af:78:6f:eb:d6:2b:
87:8f:96:db:8d:00:74:0e:0a:76:c0:c6:28:e4:ff:
43:19:d2:37:b5:52:97:c1:ee:dc:49:5f:ed:24:a5:
97:d4:10:22:18:93:78:36:8d:0d:9d:dc:6e:54:be:
c8:f0:a7:73:c5:48:f8:0a:38:64:49:c0:b7:df:e1:
a9:79:ad:54:61:ef:fc:7f:a3:2c:42:d0:ed:51:6b:
68:c9:da:3e:92:fd:78:ee:e5:58:5e:a1:41:c8:7d:
fe:a7:1a:a3:92:b3:e3:30:78:65:dc:1a:d6:29:38:
ed:0b:e6:fd:47:c8:24:64:7c:6a:9b:16:ce:78:4a:
95:7b:73:c9:e0:f5:1a:3d:df:f3:44:9b:88:86:4d:
4d:0a:9a:02:f0:0e:41:0b:27:64:29:59:1d:0c:91:
4f:89:f8:03:f8:17:a5:3a:7b:48:db:cf:0c:16:a7:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2C:1E:DC:82:DD:85:86:56:B8:1B:BA:4D:E0:13:DC:1B:F6:F5:40
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9840::/44
Signature Algorithm: sha256WithRSAEncryption
53:b5:b5:82:1d:1b:b3:29:05:32:04:59:ac:f3:5d:da:5f:4f:
9a:ae:2a:5c:8a:c5:57:e4:8a:c3:b3:99:b7:fb:b3:a1:bd:93:
6e:e5:13:82:64:42:6d:b5:77:d9:e5:0f:c9:45:68:90:5e:18:
e3:76:db:69:b4:e2:f9:86:60:a2:7b:a2:9e:8e:10:44:da:92:
ce:6b:57:96:86:4b:7d:7c:14:88:a9:1b:a4:f3:aa:ac:e0:cc:
bf:f0:c2:2f:e8:6d:bf:e3:09:f7:e1:66:d0:38:f7:83:f4:89:
70:c2:4c:ac:9d:c3:b2:c3:17:62:ea:55:8c:d8:fb:b4:2a:73:
7a:1a:08:2f:ee:12:04:9d:5e:37:11:07:18:f3:f1:40:e4:d8:
87:fd:2a:43:40:a7:7a:68:73:a8:a1:77:17:a5:bd:15:0c:e8:
19:ad:ed:83:b1:8b:ed:8b:ba:d4:c0:c8:a9:81:ff:1a:18:17:
43:96:84:79:83:39:d3:70:9a:3b:b5:bd:7d:3a:5a:02:1b:02:
61:62:8c:0d:3b:5e:4e:e4:9c:2a:08:4e:c9:f8:fc:f2:43:f2:
3e:66:33:16:e0:d8:a7:7f:c8:0b:f8:46:81:6d:0b:57:82:43:
6f:6a:56:df:fb:c3:b4:30:35:a4:31:78:7d:bd:9a:66:65:fb:
b3:7a:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:47 2026 by rpki-client