
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
File: 1275EBB054C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier: rd4m/ze4ur4N9L0qDeoX0uHYip2jlp5yvrxh4AR86+8=
Subject key identifier: 84:F4:7E:67:83:E8:6B:63:62:09:1A:C1:93:A9:69:F6:A8:1D:90:C1
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0EDA
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
Signing time: Thu 22 May 2025 20:07:44 +0000
ROA not before: Thu 22 May 2025 20:07:44 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153189
IP address blocks: 2406:840:fc60::/44 maxlen: 48
2406:840:fef4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3802 (0xeda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:07:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=682f840f-2aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:e7:7a:8f:1e:eb:36:52:72:67:3c:6f:cf:
59:f0:b2:f9:45:bf:10:0a:49:28:3b:18:13:4d:4b:
d7:53:73:0e:9a:95:b3:9e:fc:2c:88:93:57:e2:3f:
45:4e:39:51:dd:de:8e:71:7a:b2:10:05:cb:b2:e4:
5a:7d:8c:a5:a3:78:f8:a3:50:5e:69:65:96:03:4a:
96:4d:48:41:2b:c7:4c:d7:4a:ce:8a:e9:90:ef:d3:
5d:3e:5c:3a:c3:98:ae:14:02:1f:8f:6c:c9:86:a9:
8c:cb:d1:45:5e:b5:ed:a0:bd:70:94:e8:86:03:de:
4a:a5:ea:a6:cc:1e:80:a0:0a:24:18:03:78:cb:f7:
50:2c:f6:b8:3f:88:65:62:8b:f2:e5:6c:5c:9c:c0:
ee:1e:4e:93:4c:c8:cf:70:de:3c:08:51:7a:e6:11:
d4:e5:03:56:21:d2:50:ce:b5:64:3e:95:67:a4:63:
98:91:6c:24:b7:4b:bd:59:36:91:68:65:6a:a0:fe:
7b:6a:44:ea:65:cf:1b:31:82:24:80:c4:e9:d2:61:
7e:a4:fa:ed:9d:31:45:be:20:a2:0f:5b:1d:58:5d:
e0:ad:9c:ba:2a:33:ff:bd:b1:f2:50:dc:98:98:2c:
c4:26:cd:1a:c5:ec:02:97:10:5e:9c:8e:91:3f:88:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:7E:67:83:E8:6B:63:62:09:1A:C1:93:A9:69:F6:A8:1D:90:C1
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fc60::/44
2406:840:fef4::/48
Signature Algorithm: sha256WithRSAEncryption
93:60:ec:dc:26:be:53:0d:52:dc:b9:42:a1:73:fc:ff:8b:79:
c4:bb:da:d0:2f:e7:99:c1:f7:6e:9e:cd:4a:71:1a:9e:94:80:
cb:3a:62:4b:20:6d:fe:79:bd:67:8b:52:2e:69:8e:9d:04:d9:
e0:ab:29:da:8e:60:49:1f:00:22:c5:1f:e8:fe:d4:b3:24:c7:
86:85:35:ee:75:7c:7f:a0:ad:0f:05:e1:ff:15:36:1d:cf:0e:
ed:91:65:b6:d6:3f:bb:21:f1:ce:30:8c:a0:d2:94:f7:b0:62:
1c:98:c7:a9:f7:b1:b3:e3:89:4a:c0:e5:85:db:53:f6:b3:34:
e6:be:c9:fc:2b:f0:fd:c7:e6:d3:d1:c6:73:a6:f6:cf:09:63:
98:7c:f7:bf:b0:55:3f:c1:8f:3f:b7:05:7e:40:a8:7d:05:f2:
c6:5a:fb:65:6e:7b:56:01:0c:79:aa:02:9a:96:1a:17:60:9f:
10:c4:6b:3f:b0:58:a7:af:14:1d:d4:38:95:37:e8:da:a9:fb:
8a:5b:5e:c9:39:01:d7:07:32:46:34:2c:2e:43:d1:8c:1c:c1:
6f:57:2d:f3:92:50:91:c8:88:f4:4d:f4:31:1c:6c:ad:09:59:
76:a9:c4:21:c5:0a:b3:36:77:a5:63:a2:71:ac:a4:51:78:73:
8c:f5:b9:96
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICDtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJmODQwZi0yYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwE/neo8e6zZScmc8b89Z8LL5Rb8QCkkoOxgTTUvXU3MOmpWznvwsiJNX4j9F
TjlR3d6OcXqyEAXLsuRafYylo3j4o1BeaWWWA0qWTUhBK8dM10rOiumQ79NdPlw6
w5iuFAIfj2zJhqmMy9FFXrXtoL1wlOiGA95KpeqmzB6AoAokGAN4y/dQLPa4P4hl
Yovy5WxcnMDuHk6TTMjPcN48CFF65hHU5QNWIdJQzrVkPpVnpGOYkWwkt0u9WTaR
aGVqoP57akTqZc8bMYIkgMTp0mF+pPrtnTFFviCiD1sdWF3grZy6KjP/vbHyUNyY
mCzEJs0axewClxBenI6RP4h68QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIT0fmeD
6GtjYgkawZOpafaoHZDBMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMTI3NUVCQjA1
NEMzMTFFRkIyOTZGNzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwQkBghA/GADBwAkBghA/vQwDQYJKoZIhvcNAQELBQADggEB
AJNg7NwmvlMNUty5QqFz/P+LecS72tAv55nB926ezUpxGp6UgMs6Yksgbf55vWeL
Ui5pjp0E2eCrKdqOYEkfACLFH+j+1LMkx4aFNe51fH+grQ8F4f8VNh3PDu2RZbbW
P7sh8c4wjKDSlPewYhyYx6n3sbPjiUrA5YXbU/azNOa+yfwr8P3H5tPRxnOm9s8J
Y5h897+wVT/Bjz+3BX5AqH0F8sZa+2Vue1YBDHmqApqWGhdgnxDEaz+wWKevFB3U
OJU36Nqp+4pbXsk5AdcHMkY0LC5D0YwcwW9XLfOSUJHIiPRN9DEcbK0JWXapxCHF
CrM2d6VjonGspFF4c4z1uZY=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:45 2025 by rpki-client