
$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/F8509F6A885911F1B22A50DC5811F970.roa
File: F8509F6A885911F1B22A50DC5811F970.roa (raw, json)
Hash identifier: 0ZJc6HpJQj8dHT3b0KkTTBviPLM36CJSUhPWP4NZyPg=
Subject key identifier: 76:1F:31:28:16:A0:60:64:C4:66:DB:D9:FE:30:1B:F7:2E:CF:82:B7
Certificate issuer: /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Certificate serial: 5A
Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/F8509F6A885911F1B22A50DC5811F970.roa
Signing time: Sat 25 Jul 2026 18:52:23 +0000
ROA not before: Sat 25 Jul 2026 18:52:23 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 154482
IP address blocks: 2001:df6:af40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Validity
Not Before: Jul 25 18:52:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a6505e6-1e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:6d:16:cb:66:43:49:ea:83:06:9f:e8:23:
59:a0:35:39:e4:b0:ec:8e:bf:8b:bd:66:1b:d5:9d:
9c:3e:b9:03:6c:af:e7:e4:16:d4:a2:6e:70:0f:cb:
bb:0c:31:ff:5d:23:bc:b4:07:36:48:6e:65:08:30:
48:54:64:b1:cd:34:47:2e:91:45:b5:b3:c7:db:95:
b6:b0:c8:d7:56:2c:f9:99:1b:0b:27:30:13:b3:46:
f8:3a:6f:d6:44:3e:2d:b7:1f:71:10:09:8b:13:92:
a6:b0:f7:23:84:ce:d2:e4:dd:73:80:1b:60:4f:1e:
92:fa:cc:61:75:cb:b2:86:b0:65:62:7d:0c:64:c1:
33:0e:4f:6c:29:f6:8e:ef:5d:db:06:31:82:d0:b3:
69:43:20:ff:60:a5:0a:2a:3f:77:8a:8b:ec:3e:d1:
00:42:1f:e1:3c:7e:0b:ea:6f:a0:e4:39:0c:60:04:
db:77:b5:82:b0:ec:f6:9c:70:48:71:16:a8:bd:fd:
d3:b1:3c:0e:0c:01:c2:4a:98:ee:c0:52:03:07:ea:
f6:76:b6:7f:e9:99:47:6d:05:84:89:a9:b2:3f:6a:
81:ef:2e:c5:76:c9:40:6f:d2:c6:2d:cb:62:7f:44:
5a:5f:a0:f1:73:fb:9b:48:7d:18:ab:12:19:53:73:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1F:31:28:16:A0:60:64:C4:66:DB:D9:FE:30:1B:F7:2E:CF:82:B7
X509v3 Authority Key Identifier:
keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/F8509F6A885911F1B22A50DC5811F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:af40::/48
Signature Algorithm: sha256WithRSAEncryption
11:09:30:1c:3d:49:82:c1:1f:ce:4f:1f:0d:6b:e3:12:d0:e5:
46:ba:2a:b2:09:b2:70:5b:14:22:0b:65:fa:e2:f7:b8:32:27:
9e:13:81:6c:f5:fc:b9:d2:4e:52:c1:9e:bc:62:5a:3e:e3:17:
a1:f3:02:55:31:c3:db:5f:32:84:a9:ba:98:b3:c4:65:89:54:
47:93:61:0c:55:a9:d0:70:f0:80:fe:e1:c2:65:23:bb:0f:dd:
af:70:fb:3e:6d:28:6b:68:b8:a7:e1:ff:29:5e:7a:80:b1:e8:
25:97:cf:ad:1f:48:60:12:4e:5f:56:54:05:3d:ac:d6:0a:db:
c2:e6:8b:64:ad:6e:1b:12:9d:d4:39:4b:76:94:d0:d5:41:c3:
94:56:ec:ed:99:85:70:b2:eb:8b:ed:10:69:4b:c7:4b:ae:b9:
ab:51:f4:34:ce:23:fd:3d:97:90:25:fc:36:90:ae:57:7d:84:
c1:00:a9:66:0a:47:06:6f:92:c7:ea:2f:cf:59:db:4a:a2:0f:
d1:03:5e:cb:11:d2:0c:b3:48:de:db:48:82:c1:a4:16:7b:1c:
4a:d8:6d:d0:87:33:c1:3a:87:24:2c:07:32:77:ce:02:95:22:
39:45:4d:35:31:b2:13:01:f8:e8:eb:05:71:29:b6:46:b6:be:
83:6d:e7:73
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MDQ5QTExMC8GA1UEBRMoQzk5ODUwQzhDODg2QTdGRkU0NURGMUJBMUQ2NTAyQ0I1
QTY1RUI3MDAeFw0yNjA3MjUxODUyMjNaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjUwNWU2LTFlMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGEW0Wy2ZDSeqDBp/oI1mgNTnksOyOv4u9ZhvVnZw+uQNsr+fkFtSibnAPy7sM
Mf9dI7y0BzZIbmUIMEhUZLHNNEcukUW1s8fblbawyNdWLPmZGwsnMBOzRvg6b9ZE
Pi23H3EQCYsTkqaw9yOEztLk3XOAG2BPHpL6zGF1y7KGsGVifQxkwTMOT2wp9o7v
XdsGMYLQs2lDIP9gpQoqP3eKi+w+0QBCH+E8fgvqb6DkOQxgBNt3tYKw7PaccEhx
Fqi9/dOxPA4MAcJKmO7AUgMH6vZ2tn/pmUdtBYSJqbI/aoHvLsV2yUBv0sYty2J/
RFpfoPFz+5tIfRirEhlTcxErAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUdh8xKBag
YGTEZtvZ/jAb9y7PgrcwHwYDVR0jBBgwFoAUyZhQyMiGp//kXfG6HWUCy1pl63Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzIzNjFBMDJBMDJD
QTExRjFBRDJEMjc0OTA0M0Q4QzY3L3laaFF5TWlHcF9fa1hmRzZIV1VDeTFwbDYz
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveVpoUXlNaUdwX19rWGZHNkhXVUN5MXBsNjNBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDQ5QS8yMzYxQTAyQTAyQ0ExMUYxQUQyRDI3NDkwNDNEOEM2Ny9GODUwOUY2QTg4
NTkxMUYxQjIyQTUwREM1ODExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ32r0AwDQYJKoZIhvcNAQELBQADggEBABEJMBw9SYLBH85PHw1r
4xLQ5Ua6KrIJsnBbFCILZfri97gyJ54TgWz1/LnSTlLBnrxiWj7jF6HzAlUxw9tf
MoSpupizxGWJVEeTYQxVqdBw8ID+4cJlI7sP3a9w+z5tKGtouKfh/yleeoCx6CWX
z60fSGASTl9WVAU9rNYK28Lmi2StbhsSndQ5S3aU0NVBw5RW7O2ZhXCy64vtEGlL
x0uuuatR9DTOI/09l5Al/DaQrld9hMEAqWYKRwZvksfqL89Z20qiD9EDXssR0gyz
SN7bSILBpBZ7HErYbdCHM8E6hyQsBzJ3zgKVIjlFTTUxshMB+OjrBXEptka2voNt
53M=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:10 2026 by rpki-client