
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa
File: F0C4B4D8B2C711EB897C7A52C4F9AE02.roa (raw, json)
Hash identifier: 2ynAwdjUDWBHY1oyjRDYv21g3Yj2ho4fsk5jQNcRXec=
Subject key identifier: 3E:8F:04:E0:46:65:A2:81:CC:B3:84:33:F0:F6:18:31:8A:55:A5:DC
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 103F
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:47 +0000
ROA not before: Thu 22 May 2025 20:06:57 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142164
IP address blocks: 2406:840:e140::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4159 (0x103f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:06:57 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a493ab-da59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:87:6f:2d:64:d3:ba:4c:f4:59:be:93:0e:
d2:9b:d6:19:d2:06:2c:3b:9c:46:bd:0c:75:ee:de:
08:68:24:bb:d5:f6:a7:ff:51:32:1e:8d:91:bf:2b:
14:25:8b:27:72:8e:3c:7e:0a:62:d4:47:65:f4:1e:
7f:c5:d3:4c:36:a9:2a:3e:79:63:4d:87:40:a4:c6:
32:96:7d:be:7d:26:b6:fc:f7:75:9a:82:ea:fd:0d:
59:bb:7f:c1:a1:ff:eb:06:79:1e:ca:eb:99:cf:90:
74:90:9e:8c:b8:fc:b4:6d:af:f0:33:ac:31:3c:fe:
98:e7:c9:85:7f:88:b4:22:0c:a3:5a:38:72:5b:6f:
5b:6e:fb:f8:58:9a:19:42:b2:8e:14:6e:29:62:1d:
e9:7a:b4:69:00:7b:8b:6c:45:d7:5e:ec:88:18:1d:
ba:cf:d9:7f:42:8a:1a:75:ac:35:ff:1f:b5:79:d9:
0c:43:56:7f:ea:e3:f4:0c:da:d8:0e:1d:dc:26:15:
22:21:aa:5c:f4:ad:ac:00:62:25:98:6c:ce:4c:65:
5d:04:b0:5b:42:0c:87:19:2a:81:80:6b:f5:c7:4f:
58:87:e3:41:56:b1:25:50:10:8e:14:ac:50:f3:6e:
b4:75:34:d4:2d:54:a8:ae:e7:86:cf:a1:7c:90:04:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8F:04:E0:46:65:A2:81:CC:B3:84:33:F0:F6:18:31:8A:55:A5:DC
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e140::/44
Signature Algorithm: sha256WithRSAEncryption
18:0a:c4:1b:ae:c2:2d:37:89:a3:67:8e:a6:6a:7a:37:a0:ae:
8a:c5:09:85:47:b1:db:66:b3:ae:6c:7e:00:f8:5c:33:63:75:
ae:35:2a:ea:e1:d7:c2:c3:3e:fd:0d:be:1d:93:61:c3:15:4c:
8c:d7:63:04:07:6e:2b:8c:06:b9:71:74:85:4f:4d:db:36:d8:
db:1d:fe:2c:cd:45:d4:2f:da:81:e8:29:ee:62:35:47:73:06:
5a:47:4b:85:ec:29:fb:fc:9e:f7:af:aa:89:74:3a:d9:65:57:
f6:e7:eb:16:37:3b:f6:c6:38:8c:98:da:5e:e1:de:c1:e4:76:
38:ef:75:b3:5c:eb:ba:e6:d2:2d:f4:b8:6a:0f:6f:dd:b7:a0:
96:9b:1f:ca:82:1f:8d:46:93:e3:70:95:c9:9d:d6:e0:4b:05:
50:35:6a:5d:17:b6:a1:4e:8d:6d:ab:37:83:3b:46:8b:25:aa:
61:45:83:f9:97:e4:c7:c6:e4:9e:d7:97:4a:b6:af:71:e9:9d:
cf:11:3f:ae:0f:38:12:86:0d:58:d8:e3:3c:14:15:2a:5d:e5:
5d:c4:eb:c7:d4:78:af:b4:4a:a3:62:3b:23:6b:7b:89:1c:43:
ef:4c:2c:3a:f4:7b:3c:0d:4e:dc:09:4d:a5:c3:0a:36:60:b1:
92:ef:e4:4d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICED8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTNhYi1kYTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx46Hby1k07pM9Fm+kw7Sm9YZ0gYsO5xGvQx17t4IaCS71fan/1EyHo2RvysU
JYsnco48fgpi1Edl9B5/xdNMNqkqPnljTYdApMYyln2+fSa2/Pd1moLq/Q1Zu3/B
of/rBnkeyuuZz5B0kJ6MuPy0ba/wM6wxPP6Y58mFf4i0IgyjWjhyW29bbvv4WJoZ
QrKOFG4pYh3perRpAHuLbEXXXuyIGB26z9l/Qooadaw1/x+1edkMQ1Z/6uP0DNrY
Dh3cJhUiIapc9K2sAGIlmGzOTGVdBLBbQgyHGSqBgGv1x09Yh+NBVrElUBCOFKxQ
8260dTTULVSorueGz6F8kASTSwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFD6PBOBG
ZaKBzLOEM/D2GDGKVaXcMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRjBDNEI0RDhC
MkM3MTFFQjg5N0M3QTUyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQOFAMA0GCSqGSIb3DQEBCwUAA4IBAQAYCsQbrsItN4mjZ46m
ano3oK6KxQmFR7HbZrOubH4A+FwzY3WuNSrq4dfCwz79Db4dk2HDFUyM12MEB24r
jAa5cXSFT03bNtjbHf4szUXUL9qB6CnuYjVHcwZaR0uF7Cn7/J73r6qJdDrZZVf2
5+sWNzv2xjiMmNpe4d7B5HY473WzXOu65tIt9LhqD2/dt6CWmx/Kgh+NRpPjcJXJ
ndbgSwVQNWpdF7ahTo1tqzeDO0aLJaphRYP5l+THxuSe15dKtq9x6Z3PET+uDzgS
hg1Y2OM8FBUqXeVdxOvH1HivtEqjYjsja3uJHEPvTCw69Hs8DU7cCU2lwwo2YLGS
7+RN
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:45 2026 by rpki-client