
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/0E6E2FF4590A11F0B7FD292DC4F9AE02.roa
File: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (raw, json)
Hash identifier: ISrr8uLwckD8EVkYWSpWxTTjlYA9HTIVHlgu3H7v9b0=
Subject key identifier: 65:25:F8:F4:26:48:0F:DF:1F:F4:5B:DB:A0:27:12:32:9A:2B:D5:73
Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864
Certificate serial: 97
Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/0E6E2FF4590A11F0B7FD292DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:05:28 +0000
ROA not before: Fri 04 Jul 2025 19:06:58 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140919
IP address blocks: 2402:960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl
rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864
Validity
Not Before: Jul 4 19:06:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3e538-00d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:5f:19:9a:c3:16:59:44:f0:88:bb:46:7a:
cc:0d:40:ff:13:4f:ff:8e:b6:44:f9:28:e9:24:37:
db:8b:f8:84:d7:88:8f:fb:c2:78:d3:46:00:96:75:
d4:fc:85:ef:5d:46:8a:1b:df:11:e7:4e:d4:f7:3d:
81:a9:4a:6e:85:0c:46:cc:59:1f:2d:9a:c3:08:6f:
3d:aa:67:96:d3:58:40:4b:bb:82:d9:61:d0:b0:ea:
46:96:e4:cd:fa:6a:b8:0e:a4:b6:67:8f:21:5a:f5:
ee:6d:e9:da:dd:3a:eb:9c:cc:fc:12:c3:88:0d:9d:
ca:3a:c2:07:1f:28:86:a4:7a:83:d9:2e:b8:aa:83:
e4:17:46:00:fb:73:21:64:83:9a:b1:b3:15:0e:d6:
25:da:6b:44:0c:a0:11:9b:87:f6:30:e4:b4:02:02:
e5:44:dd:99:77:1b:c8:85:60:a2:42:6e:37:a8:c8:
92:6c:77:97:63:34:67:28:43:be:cf:df:b5:d3:41:
bc:2a:fb:06:4b:0e:7f:83:3c:78:9b:a0:6b:2d:3e:
a9:98:a8:5c:d7:17:06:98:f2:c3:b7:11:f1:e9:cb:
93:e3:87:50:ad:af:c5:24:e9:3c:d9:45:ce:f9:97:
e2:ca:be:75:9b:f6:8a:4d:bc:9d:af:bd:1b:55:4d:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:F8:F4:26:48:0F:DF:1F:F4:5B:DB:A0:27:12:32:9A:2B:D5:73
X509v3 Authority Key Identifier:
keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/0E6E2FF4590A11F0B7FD292DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:960::/32
Signature Algorithm: sha256WithRSAEncryption
5f:d8:47:3f:85:b7:00:8e:2e:f3:b6:49:be:55:5a:39:77:4b:
e7:62:56:c7:3b:78:a4:7d:5d:45:57:13:66:c0:07:a4:17:1e:
79:c6:55:d7:f3:84:84:15:46:18:21:39:90:fb:61:33:4a:72:
22:01:0c:c0:c3:e0:80:31:9c:74:b4:36:0b:5f:e4:7b:65:ee:
33:ca:2b:77:97:bb:8e:b6:7f:8c:ce:90:6b:25:ab:d1:93:de:
45:23:0b:ff:84:0e:89:cc:5d:9c:49:ee:09:53:54:dd:82:bf:
33:98:68:2e:9b:a4:1f:9c:20:2b:59:ea:17:63:d8:a9:10:1a:
11:9e:6b:f5:06:de:a4:79:e5:76:71:d5:78:fb:c4:80:93:33:
18:84:e7:9f:d2:c3:70:99:a4:2a:91:ea:3b:a3:35:0e:b8:c8:
f1:0c:50:34:cc:db:3f:80:ae:e8:7a:e7:84:c7:98:6b:e3:f9:
a3:70:e5:2a:61:af:f3:2b:d4:39:eb:be:1f:ac:cf:ed:24:40:
d3:3b:32:6b:be:b1:bd:61:26:38:38:e5:75:d2:ca:3a:69:46:
87:a3:3f:1d:3c:32:ed:d6:6f:08:bd:1d:f8:cd:f0:3a:11:d3:
5b:53:5e:b7:09:54:f4:cf:c8:e6:01:23:69:ea:63:dc:c5:66:
ec:7c:3e:a9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U0NTgxMTAvBgNVBAUTKEVGNzYyQ0M5NDIxOUUwOTkyM0ExMUIwRDNDNDMwRTdG
MzVDOEQ4NjQwHhcNMjUwNzA0MTkwNjU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTUzOC0wMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJ5fGZrDFllE8Ii7RnrMDUD/E0//jrZE+SjpJDfbi/iE14iP+8J400YAlnXU
/IXvXUaKG98R507U9z2BqUpuhQxGzFkfLZrDCG89qmeW01hAS7uC2WHQsOpGluTN
+mq4DqS2Z48hWvXubena3TrrnMz8EsOIDZ3KOsIHHyiGpHqD2S64qoPkF0YA+3Mh
ZIOasbMVDtYl2mtEDKARm4f2MOS0AgLlRN2ZdxvIhWCiQm43qMiSbHeXYzRnKEO+
z9+100G8KvsGSw5/gzx4m6BrLT6pmKhc1xcGmPLDtxHx6cuT44dQra/FJOk82UXO
+Zfiyr51m/aKTbydr70bVU2WKwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFGUl+PQm
SA/fH/Rb26AnEjKaK9VzMB8GA1UdIwQYMBaAFO92LMlCGeCZI6EbDTxDDn81yNhk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQ1OC8yN0JFODQwRTMw
RDgxMUYwQTdCRTJFNEZDNEY5QUUwMi83M1lzeVVJWjRKa2pvUnNOUEVNT2Z6WEky
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJHUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0U0NTgvMjdCRTg0MEUzMEQ4MTFGMEE3QkUyRTRGQzRGOUFFMDIvMEU2RTJGRjQ1
OTBBMTFGMEI3RkQyOTJEQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAIJYDANBgkqhkiG9w0BAQsFAAOCAQEAX9hHP4W3AI4u87ZJvlVa
OXdL52JWxzt4pH1dRVcTZsAHpBceecZV1/OEhBVGGCE5kPthM0pyIgEMwMPggDGc
dLQ2C1/ke2XuM8ord5e7jrZ/jM6QayWr0ZPeRSML/4QOicxdnEnuCVNU3YK/M5ho
LpukH5wgK1nqF2PYqRAaEZ5r9QbepHnldnHVePvEgJMzGITnn9LDcJmkKpHqO6M1
DrjI8QxQNMzbP4Cu6HrnhMeYa+P5o3DlKmGv8yvUOeu+H6zP7SRA0zsya76xvWEm
ODjlddLKOmlGh6M/HTwy7dZvCL0d+M3wOhHTW1NetwlU9M/I5gEjaepj3MVm7Hw+
qQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:53 2026 by rpki-client