
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2E771C4D93A11EEA15D7A7FC4F9AE02.roa
File: E2E771C4D93A11EEA15D7A7FC4F9AE02.roa (raw, json)
Hash identifier: a8geHOSlFh/ScfJLoIw1VpCRmNekStUYWMukL3zaPRI=
Subject key identifier: CB:43:B5:32:57:AD:E7:66:75:07:00:1A:7B:2E:19:48:BA:7B:FC:B7
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 105B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2E771C4D93A11EEA15D7A7FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:30:12 +0000
ROA not before: Thu 22 May 2025 20:07:27 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152598
IP address blocks: 2406:840:fecc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4187 (0x105b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:27 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493c4-a202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:2a:48:d9:52:ae:be:82:10:8f:08:c5:8a:
e1:e0:cc:c8:f9:09:a7:38:30:ee:aa:2e:82:61:c7:
d6:8b:9a:ac:b1:59:51:4f:cf:3e:79:a2:02:0d:cf:
92:b0:da:ce:24:b2:d2:67:e3:8f:d0:35:d2:59:e4:
d1:7e:a3:82:82:bf:11:91:1d:66:6d:32:ab:99:63:
52:28:2f:00:ba:ed:f8:25:c9:78:79:6c:f7:3e:2f:
ef:f0:77:58:a4:2f:ad:9f:b0:70:5a:ca:0b:f5:ee:
0d:91:45:85:65:db:0f:3a:a4:af:d3:ea:03:9e:c7:
1e:eb:ec:1e:42:f5:94:74:12:c5:e2:06:23:db:cc:
f9:b7:bc:70:f3:3a:60:71:97:91:4d:84:af:6e:7a:
6b:73:16:ef:00:eb:82:62:db:79:bc:c7:1f:d1:e2:
79:de:c6:2d:b2:8b:c8:ec:d8:b1:08:3b:c5:2b:a4:
5d:48:70:b4:98:d1:90:e4:80:02:08:8f:a5:91:d1:
d4:98:1b:5d:f0:f2:23:f0:ec:88:db:9e:4c:a2:c2:
0c:17:43:6f:68:2d:2c:dc:78:bb:76:05:a0:5c:46:
55:11:5f:16:15:7e:43:89:86:a2:c6:63:61:34:ac:
b3:9d:86:84:95:f8:52:14:8f:12:f1:d6:49:5d:29:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:43:B5:32:57:AD:E7:66:75:07:00:1A:7B:2E:19:48:BA:7B:FC:B7
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2E771C4D93A11EEA15D7A7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fecc::/48
Signature Algorithm: sha256WithRSAEncryption
58:b9:47:c4:8f:15:3d:45:90:3e:53:ac:ee:fe:1c:34:6b:8e:
94:27:bc:d9:32:a8:81:6c:63:1e:be:e7:b6:2a:35:51:94:1b:
66:45:49:f2:37:f9:8f:0c:f8:3c:03:70:14:20:36:5b:25:77:
60:f5:55:3f:e5:9f:73:4e:4f:d0:3e:f4:95:9f:20:c8:58:eb:
cc:11:6d:c2:fa:2f:49:80:69:e4:32:e6:eb:48:20:7f:a2:ab:
71:26:92:ab:ca:16:12:98:ff:1e:a5:ba:ce:44:4c:3f:09:e7:
1e:04:ae:8f:36:a1:78:33:22:7e:27:e4:a5:0f:c6:94:9e:57:
f9:19:df:a4:68:28:59:02:f7:44:b3:2a:9f:5e:14:38:65:c2:
16:d0:d4:14:8b:b3:bf:42:c4:6a:10:71:23:e9:c7:bf:ca:1d:
28:d8:63:a3:79:61:43:12:4a:74:3f:90:10:0e:c2:25:ba:95:
fe:00:76:cf:3a:53:88:10:5a:3c:0a:ed:28:6c:39:71:01:6e:
ea:51:3e:50:1c:6f:85:31:45:6b:f0:67:01:9d:0c:f9:02:9f:
0e:22:02:70:1c:ba:79:fb:30:a7:c4:8f:42:1a:e9:a0:24:03:
86:5f:58:1c:aa:35:c1:52:fb:1a:c1:63:b8:87:79:e7:2c:ca:
3b:4a:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:01 2026 by rpki-client