
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9C243B2CD6211EA809FAA19C4F9AE02.roa
File: E9C243B2CD6211EA809FAA19C4F9AE02.roa (raw, json)
Hash identifier: rym3l685Bol4TuHHPNy8lAEo0Qs3fxCuuL5uR1ZEKxw=
Subject key identifier: B4:D8:E7:96:94:9E:C0:7F:09:F5:21:42:D0:D5:1A:FC:0F:80:D9:BF
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 1039
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9C243B2CD6211EA809FAA19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:42 +0000
ROA not before: Thu 22 May 2025 20:06:51 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 140938
IP address blocks: 2406:840:fc00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4153 (0x1039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:06:51 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493a6-6dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:1d:1c:aa:18:07:58:d7:3d:b0:bc:24:9a:
e9:82:c5:93:50:6f:49:52:87:d5:63:6e:a3:99:62:
5f:a9:2a:9f:09:73:e9:ff:47:af:ad:ba:a8:84:59:
59:05:a3:3a:6b:5b:4d:b8:c1:ab:53:29:bb:2e:76:
52:75:95:52:82:5e:47:b6:0a:a1:09:a5:f4:60:00:
78:78:63:ef:d7:64:ab:74:58:63:5b:8a:94:f3:24:
1e:6e:0f:0b:be:d0:84:10:0a:41:14:b9:3d:27:0d:
12:14:92:4b:2b:c6:46:2b:c5:0e:d0:f6:d7:08:e4:
2a:0c:07:ad:68:c8:fe:35:5b:db:86:0b:03:cd:76:
94:93:4e:c5:10:af:b0:4f:e8:f3:fb:0f:50:a3:7e:
32:8b:14:b6:17:e3:29:5e:3c:f5:4d:67:97:c1:ad:
89:21:f7:8a:ea:a1:63:c6:38:80:33:86:98:a3:b4:
5d:ce:4e:ac:b0:b9:cb:1f:c4:15:8e:3c:95:19:e5:
03:bb:79:9b:30:fb:8f:c9:73:89:77:e8:ac:1c:78:
2d:a8:09:2e:66:de:ae:24:d4:40:09:95:f6:ef:cc:
38:30:73:48:43:c6:39:8b:44:1d:96:ff:7b:de:33:
ab:cd:b9:02:7c:f4:02:69:9e:e6:32:ae:82:62:a1:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:E7:96:94:9E:C0:7F:09:F5:21:42:D0:D5:1A:FC:0F:80:D9:BF
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9C243B2CD6211EA809FAA19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fc00::/44
Signature Algorithm: sha256WithRSAEncryption
45:6f:24:f5:0c:6b:b6:9b:f3:0a:d1:27:be:91:e0:ec:3c:c0:
d3:66:ef:64:94:3e:72:0c:2c:7e:8b:af:a8:27:e7:f3:e5:62:
39:85:37:f7:9a:f0:da:60:dd:8a:95:db:91:a0:b9:02:23:f0:
cd:c2:be:eb:78:e8:82:fd:99:bf:9d:4f:e5:b8:3f:24:a2:c2:
e3:09:a1:bf:25:21:24:88:40:a1:bb:bb:3e:26:90:22:d1:ab:
22:32:80:b3:68:8d:68:df:92:a7:8c:e3:3f:95:c8:7d:5d:47:
f2:67:91:29:79:b1:a8:f2:2a:f4:c2:1b:0f:da:92:3d:34:44:
83:f1:ed:db:cd:d0:82:d6:d3:3d:2e:33:86:77:e2:55:5d:7d:
db:dc:89:9b:c3:e1:af:13:c7:1a:b0:f1:37:7f:49:ca:c5:f6:
75:65:e8:dd:05:15:2d:bd:ae:41:2d:cd:d5:59:4a:a5:ad:9d:
31:09:76:c7:ca:e0:55:7f:c9:0a:9b:cb:23:01:fa:a1:18:b0:
dc:6d:c2:e3:81:e9:79:37:f6:7a:4e:a3:a5:19:a0:10:0e:7b:
37:71:f4:43:f8:cb:3c:31:f1:c0:79:92:a2:23:27:34:6e:fc:
f1:4c:0c:73:45:8e:eb:dc:cc:ab:53:b3:3a:c2:3f:9e:cb:8c:
a3:0a:33:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:47 2026 by rpki-client