
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
File: 6579B1188F5811F0BE083D3DC4F9AE02.roa (raw, json)
Hash identifier: HH9ky92fQzGNTYsX0+VQPTLNrW/aQl3+AElKQhw1OdM=
Subject key identifier: EC:F5:B6:B6:02:5E:86:15:9C:C4:1E:42:CA:6C:14:B6:19:61:45:3D
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: 9E
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
Signing time: Fri 05 Jun 2026 08:39:47 +0000
ROA not before: Fri 05 Jun 2026 08:39:47 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 15224
IP address blocks: 2406:fb00:1000::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: Jun 5 08:39:47 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a228b52-becd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:cf:c8:d3:ed:ff:00:51:f4:7d:44:92:8c:
1a:07:94:5e:a6:ab:d2:fb:66:39:a6:29:77:27:17:
b8:93:40:ff:7e:73:cf:e5:23:0a:a6:93:03:c8:48:
2b:63:96:e9:19:15:0e:3a:27:99:85:05:3d:52:ac:
f3:41:b3:9f:93:13:72:d4:22:c1:b1:17:ba:f3:e9:
24:80:9c:04:aa:b5:07:8b:c1:51:28:16:de:8f:4e:
0c:34:70:ac:ec:43:18:fe:2b:2c:e5:e7:2f:ab:52:
95:53:23:07:c8:f3:21:1e:76:4c:fc:ed:59:ed:bc:
20:3d:3e:71:0e:64:32:b4:92:57:07:a2:c5:0f:40:
91:39:95:e4:7a:48:5e:75:6d:a2:ef:8a:4a:a8:91:
3b:ca:2a:6b:c8:cd:7b:0a:36:88:14:55:05:54:de:
d2:bc:ae:dd:31:c1:70:59:02:43:69:57:f4:51:d4:
c9:56:1f:e1:cd:5c:5b:82:79:0d:62:57:2a:1f:44:
6b:4b:a7:b4:72:c3:7c:6f:f2:81:85:5d:0d:64:6f:
c4:8e:5e:56:78:b2:45:95:0f:92:fc:95:cb:5c:27:
05:f6:3b:25:77:bf:c1:cb:03:33:2d:78:57:a7:49:
df:e8:bf:75:dc:80:96:f3:80:ad:ba:1c:96:65:0d:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:B6:B6:02:5E:86:15:9C:C4:1E:42:CA:6C:14:B6:19:61:45:3D
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:fb00:1000::/47
Signature Algorithm: sha256WithRSAEncryption
93:aa:26:69:3f:e6:58:ff:fb:6b:a9:27:03:79:53:2f:5a:60:
7e:c1:2e:81:1c:d5:89:d4:ff:07:d2:56:9a:ba:12:b8:04:40:
5a:08:ad:aa:8c:d7:4c:f1:8f:8a:ad:de:55:56:c2:d4:bc:3a:
d4:a2:8f:61:74:e6:9a:cc:e9:2b:bd:98:23:a1:d3:b2:21:07:
63:57:7e:94:db:55:47:77:b3:11:e2:fc:6f:1c:0e:c6:ba:ea:
84:a9:d9:e1:54:74:e8:43:86:9c:06:e2:e4:c9:a4:6a:71:87:
ab:0c:b9:85:4b:2e:73:2c:73:10:a6:e4:1c:a4:35:ea:85:8d:
45:b1:4c:e3:26:cf:2a:fb:90:ad:8a:a5:6b:1c:a8:e2:79:0c:
a0:14:b1:d6:08:ec:87:c8:1f:bf:1f:59:7b:2a:3d:5c:4b:d1:
ab:5d:d1:c3:ba:91:e8:ac:f6:5a:e7:d9:fb:09:1e:65:07:82:
b1:8f:c2:2d:2c:07:80:3a:14:a2:80:76:95:38:6b:bd:28:75:
db:4e:f8:d5:07:ee:ac:4e:a4:c3:cb:b6:5d:84:ba:fe:10:1d:
9e:4b:ac:3c:d5:85:16:40:d6:da:c5:aa:93:bd:a3:25:c5:63:
75:b8:9f:c7:53:67:29:8a:7a:ae:d0:12:d3:a3:c4:a5:ae:00:
99:85:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:59:10 2026 by rpki-client