
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/539AFA66240F11EF8FFD251CC4F9AE02.roa
File: 539AFA66240F11EF8FFD251CC4F9AE02.roa (raw, json)
Hash identifier: P599iRtjDstsTKNSyrZ+SfbCONYK49495Kq5vxTi2x4=
Subject key identifier: 4C:7C:65:96:24:28:F1:B9:7F:40:B0:99:07:1A:86:D0:A3:EC:FB:AE
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 118E
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/539AFA66240F11EF8FFD251CC4F9AE02.roa
Signing time: Fri 22 May 2026 20:27:44 +0000
ROA not before: Fri 22 May 2026 20:27:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 210384
IP address blocks: 2406:840:9860::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4494 (0x118e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:27:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bc3f-1b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:2a:08:8c:4c:b0:e1:11:e5:5e:84:da:a9:
32:7d:7b:6e:23:f1:1c:69:fe:03:09:ce:50:54:15:
30:41:95:ba:30:18:43:ef:5f:8c:ad:07:34:16:e3:
28:cc:9d:25:6b:1d:66:06:74:26:05:27:66:ed:79:
eb:b6:74:98:96:2d:df:4e:be:5a:0a:0e:a8:f7:1a:
38:1f:ae:c6:4c:b0:a9:5f:8e:b4:0f:35:d0:85:ee:
58:96:91:86:b4:85:40:d0:02:d0:67:03:42:6e:19:
0c:b6:06:53:32:88:c0:46:80:2f:4f:7a:58:52:f4:
82:00:d0:72:9e:0f:93:28:4f:17:db:01:cb:61:f2:
76:57:36:52:49:26:86:ce:36:07:50:66:ee:44:3f:
6e:4b:24:7c:b1:f6:b9:c4:b9:58:08:c9:50:2d:c9:
e2:e1:39:09:84:18:5b:e9:97:b4:e2:63:e4:0c:44:
ec:f3:d6:4e:ec:2b:39:75:b5:da:10:0f:d6:fc:b6:
01:35:7b:33:69:5d:d4:b5:91:aa:1e:a0:3e:42:2d:
8b:68:9f:26:46:ad:6a:d3:44:47:00:b1:11:61:f7:
c6:70:e8:43:2b:78:14:52:8b:9a:73:df:4f:f2:4f:
d6:32:bd:32:70:c7:ba:b1:e0:45:e9:c0:9f:93:ed:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:65:96:24:28:F1:B9:7F:40:B0:99:07:1A:86:D0:A3:EC:FB:AE
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/539AFA66240F11EF8FFD251CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9860::/44
Signature Algorithm: sha256WithRSAEncryption
98:31:ae:e2:c4:89:93:f3:76:50:bd:21:e5:41:a0:f2:cf:4a:
9b:41:cd:9a:c2:c5:9c:0b:bd:9f:ce:ff:54:f0:52:4d:fe:9f:
c2:d2:50:53:67:3d:c6:d1:aa:c3:65:7b:1d:87:4c:11:e0:4c:
25:9f:4e:72:dc:20:c6:12:54:ab:0d:fc:b9:7e:0b:8e:b0:15:
b6:74:30:fb:3e:58:17:4e:90:ed:17:42:bb:6a:8c:d3:93:da:
71:12:3a:78:e0:b4:c0:01:7a:8e:66:9a:02:c5:6c:7f:29:c0:
75:1e:dc:c6:cc:ae:d5:de:c6:16:0c:a1:25:50:af:4e:0c:21:
3d:ed:6e:0e:65:7d:24:99:05:e9:0f:9c:8f:22:eb:6a:cc:2e:
cc:1c:ce:03:22:71:2f:57:c8:d6:f9:39:9b:e1:c3:3a:1c:01:
4b:2e:a8:99:77:e5:36:2d:a9:fc:7e:b9:76:23:50:98:8f:e1:
e0:29:59:0c:8f:b7:5d:f1:3a:d9:08:43:f5:d1:66:97:db:04:
5c:c3:37:93:55:79:34:8a:12:d9:bf:1c:ea:8e:60:22:91:16:
dd:59:89:d4:80:10:c0:1c:f0:12:23:c7:bc:0b:53:ec:c3:1e:
31:a2:39:da:89:aa:1a:24:f6:56:d5:ac:b0:f7:2c:ef:ac:3d:
05:a5:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:31 2026 by rpki-client