
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa
File: B119B7D2D03311EBA12FCF3CC4F9AE02.roa (raw, json)
Hash identifier: ALIg6NWWDsp1hxINSJV9qgd/yALB9y/pRdbY0YbS9e0=
Subject key identifier: 2A:A0:63:EF:CF:23:68:0C:7D:F9:97:7D:12:43:C3:28:16:3D:23:3C
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1041
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:49 +0000
ROA not before: Thu 22 May 2025 20:06:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142438
IP address blocks: 2406:840:8000::/36 maxlen: 48
2406:840:fef8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4161 (0x1041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:06:59 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493ad-d46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:9f:30:1f:d4:70:2c:48:4c:12:bd:ad:fe:
9d:04:a8:dc:8b:3f:db:ff:bc:4f:ea:16:3f:a3:3c:
cd:d8:51:78:c5:65:83:13:7e:87:e1:cf:81:7c:ab:
e8:b7:2b:2e:5b:86:a6:d7:95:70:50:b3:5a:e8:e4:
17:a1:ed:9c:db:32:9c:0e:79:90:2c:c5:6a:dd:b1:
b3:c3:ac:7e:a5:fe:48:97:49:47:e3:fd:62:8c:3e:
c5:66:eb:93:db:d9:92:29:8e:a6:ac:35:b8:8a:fa:
43:eb:3b:93:96:e4:dc:58:03:59:aa:f0:1c:4a:ea:
4a:3e:f0:0b:86:26:ae:92:1a:e2:3f:c9:ba:81:f0:
91:e0:4b:62:31:15:2c:ed:4d:9f:a6:ad:24:26:d3:
d5:c9:59:71:44:f5:c7:7c:25:c2:f3:cb:c9:72:6f:
24:9c:b4:7b:b0:6e:0d:76:9d:ee:b1:c4:f3:13:c0:
af:23:e6:4a:75:b3:40:8b:82:59:9b:67:a5:ff:0e:
d2:65:60:9b:b2:a3:a9:95:9b:6f:77:ad:5c:41:bc:
f5:68:f9:64:63:8a:b7:32:54:6e:f9:c3:b5:8f:77:
5a:f6:66:2d:20:13:bb:ed:19:3a:37:be:22:c0:98:
79:74:ab:63:2a:8d:f6:bb:4c:be:e4:bc:98:59:f6:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:63:EF:CF:23:68:0C:7D:F9:97:7D:12:43:C3:28:16:3D:23:3C
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:8000::/36
2406:840:fef8::/48
Signature Algorithm: sha256WithRSAEncryption
7e:af:47:f7:a3:dd:76:7f:17:80:08:f8:ad:ef:ae:d5:80:67:
b5:a3:8d:7f:12:42:4b:93:dd:63:6a:3f:89:3b:58:77:c3:d1:
84:fb:64:59:a0:7b:38:b8:52:0e:3a:bd:2c:88:92:ef:79:24:
b9:a5:09:03:b0:63:4e:bd:de:6d:7f:61:0c:f9:0c:92:f7:32:
72:3f:e0:a9:57:40:4c:94:18:51:19:d2:d3:8e:a7:4f:fb:0e:
39:64:3c:98:37:3a:72:29:26:15:30:7e:b6:e3:fa:ab:02:d2:
ef:14:23:79:03:c5:b8:d7:a6:ae:05:6f:ff:d0:5e:57:53:eb:
0f:c4:7a:43:f6:f6:07:43:02:11:ce:80:bd:21:bd:52:ac:64:
d3:46:1e:fa:a4:8a:3e:f2:78:8e:76:66:4e:5b:0c:f6:11:6d:
07:11:58:5b:99:42:2a:6c:2b:b5:ea:fc:9d:95:5c:33:e7:88:
9f:b1:d9:d6:a6:c5:ab:ec:98:42:52:8d:e1:de:eb:18:9a:4a:
d7:5c:a6:db:30:1b:27:8c:d4:19:1a:bd:94:73:f0:6a:5a:2f:
bd:e5:cd:a6:29:45:ee:da:82:0c:41:4b:a0:e7:de:00:49:46:
2a:ed:a6:6f:3f:ee:d5:95:2d:53:af:19:98:31:07:30:57:2a:
2e:30:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:13 2026 by rpki-client