
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/6873616CCAE811ECBB89015FC4F9AE02.roa
File: 6873616CCAE811ECBB89015FC4F9AE02.roa (raw, json)
Hash identifier: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=
Subject key identifier: D9:0B:4D:25:79:31:62:5D:7A:75:0F:D3:86:A5:44:85:A2:37:A7:57
Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial: 04D1
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/6873616CCAE811ECBB89015FC4F9AE02.roa
Signing time: Fri 03 Apr 2026 00:31:27 +0000
ROA not before: Fri 03 Apr 2026 00:31:27 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135395
IP address blocks: 2400:58a0:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233 (0x4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Validity
Not Before: Apr 3 00:31:27 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cf0a5e-a8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:c3:ef:43:fb:7a:28:a9:ab:a8:c9:75:dc:
c2:a1:cd:7c:70:47:69:61:ac:04:20:00:62:a8:8b:
5c:ee:1a:e7:28:74:23:5d:5f:80:3c:b5:9c:75:e1:
c4:eb:c3:cf:71:74:40:a7:5f:bf:26:52:9c:4d:30:
2c:d4:6a:5e:5b:ab:62:b8:39:2c:57:da:82:05:8a:
8c:f2:3c:b2:1f:17:0e:55:b9:68:e7:17:49:17:9f:
24:7f:14:7f:35:ed:a9:97:23:31:9a:dc:93:cd:49:
ee:0f:7d:92:91:af:dd:49:fa:5b:c6:05:00:fc:db:
09:3f:8b:5c:52:d6:f9:15:ec:16:19:c7:18:0e:64:
95:74:ec:ca:a6:e2:f3:10:10:ef:18:ab:8f:27:76:
3d:30:a2:f8:db:c5:56:7a:5d:c2:57:fd:52:11:db:
ee:27:c1:b2:76:5e:b3:58:19:62:ca:cd:bd:01:bb:
31:ec:80:b3:1b:2c:bd:b7:3e:b0:66:0e:cd:f4:84:
58:c2:03:04:47:f4:43:38:23:18:e8:b7:4b:93:d7:
ac:dc:af:97:0d:1c:57:36:83:7f:00:90:b4:97:43:
df:dc:37:97:75:1c:f0:c4:b4:49:08:3f:68:ce:0b:
3c:5f:42:ab:a2:16:eb:0c:3d:d4:8c:20:a1:1c:46:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0B:4D:25:79:31:62:5D:7A:75:0F:D3:86:A5:44:85:A2:37:A7:57
X509v3 Authority Key Identifier:
keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/6873616CCAE811ECBB89015FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:58a0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
12:62:c1:af:c1:42:95:b6:a1:48:9d:a9:1f:3d:b3:a3:08:10:
70:a6:a8:b6:72:4b:13:05:c7:b9:5c:ea:0b:74:12:20:6c:7a:
c4:cf:3c:8f:68:c7:f3:e9:9c:f8:5f:9e:50:00:ee:9c:0e:e3:
64:ed:22:4b:53:f5:7c:c0:ba:fb:e2:07:c3:79:29:6a:39:0a:
a1:a1:1a:47:08:3b:ea:c8:46:af:26:ef:df:ed:cd:08:c9:2c:
0f:e3:8a:0e:07:3d:dc:5c:c5:bb:cc:03:fd:2d:b7:57:23:4c:
86:61:b5:98:9b:64:2c:9f:c8:31:21:bd:dd:2c:31:64:81:86:
1b:a5:51:4c:93:aa:90:91:55:75:13:26:28:5d:47:83:38:98:
3c:5f:a0:c3:c2:7b:ab:6b:2b:1c:88:a7:aa:14:49:0b:06:ef:
00:07:5c:2e:50:f4:5f:49:7f:4e:19:dc:9e:1c:dc:ff:80:11:
8d:42:b5:65:e6:2e:13:9c:d9:dc:10:b7:d1:de:1f:97:58:7c:
cf:d6:58:e4:95:94:5b:32:3d:07:a3:b7:c3:c0:ea:1f:d3:8f:
be:34:69:35:e4:48:b8:9b:4a:db:55:9e:79:e8:7a:3f:c3:fe:
f2:b7:48:3f:52:43:1a:44:5d:6e:7b:dc:50:36:8f:ef:2c:b4:
93:18:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:45 2026 by rpki-client