
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
File: 567C85C0B34111F09BB3B84DC4F9AE02.roa (raw, json)
Hash identifier: Ex3GVAxJWLWD960nKqXi5N3R5GiiSRyjH0XEdwCY6S4=
Subject key identifier: 4E:4A:8D:EE:10:AE:F9:4D:55:00:84:0F:C6:16:DF:C9:E8:83:62:A1
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0FAC
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
Signing time: Mon 27 Oct 2025 14:29:26 +0000
ROA not before: Mon 27 Oct 2025 14:29:26 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137264
IP address blocks: 2406:840:fcf0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4012 (0xfac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Oct 27 14:29:26 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68ff81c5-9d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:89:24:39:88:af:70:cd:99:ae:19:14:98:
6a:29:72:c3:be:ff:cc:60:7d:ec:8b:b2:b4:29:57:
55:ce:36:7a:b7:c5:70:47:c9:7e:e0:e9:8f:75:e4:
71:f1:89:0c:b2:9f:09:54:01:b4:2d:c0:72:51:43:
49:eb:95:95:94:34:2f:e2:19:7f:b7:b1:47:98:67:
0a:32:16:04:1d:cb:70:e5:47:69:d5:aa:19:b7:3c:
19:ee:1a:91:f2:fd:24:7e:80:b5:68:eb:2b:27:b9:
28:09:29:3d:af:f6:b1:d5:87:77:1b:4b:07:fd:5e:
cb:b8:73:39:3c:c4:5f:4c:8b:2c:9b:d6:1c:e1:4c:
a2:b7:5f:49:10:ec:1e:ad:45:5c:da:8c:56:8a:29:
e8:f3:92:c0:74:04:ce:fc:1d:dc:84:d3:c6:e0:7d:
51:9d:54:49:39:0e:8f:6b:42:2a:61:e3:f3:8c:51:
9b:51:8a:87:27:07:2e:8f:f9:92:cf:ac:80:ab:3d:
8e:d8:d5:5d:f8:72:5d:85:c4:12:19:13:6a:2b:5f:
fe:30:26:a2:be:f1:b2:6e:37:7f:b0:ad:13:54:be:
66:25:b3:a5:fd:70:68:10:05:e7:d9:92:e9:a7:54:
4e:9f:e3:f6:36:a0:4d:83:4e:d0:3e:86:88:14:67:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4A:8D:EE:10:AE:F9:4D:55:00:84:0F:C6:16:DF:C9:E8:83:62:A1
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fcf0::/44
Signature Algorithm: sha256WithRSAEncryption
95:3d:9a:7b:5a:95:81:42:fc:f1:f1:8f:65:66:4a:70:ec:c8:
13:72:54:6e:36:c9:17:f7:0b:a0:51:73:22:5b:31:93:b5:d4:
58:d4:22:c3:f3:d5:72:10:c3:63:23:f9:49:9c:22:01:f8:fe:
18:f9:0a:c9:30:5d:dc:8d:13:20:5a:ab:15:87:d5:ee:9f:a0:
0e:2c:53:5f:89:93:1a:c2:7b:02:5d:5a:e2:de:58:fc:a8:87:
32:a5:fb:bc:86:6a:69:93:aa:af:d4:74:fe:ac:61:ce:1f:48:
58:86:04:fc:22:b5:94:80:8d:2c:c5:ff:c8:a9:f1:d0:b0:b4:
32:bf:2b:72:2d:58:cb:ad:8e:43:17:dd:52:9f:3a:06:53:5e:
42:ee:bc:91:ca:35:b8:d9:52:36:b0:e3:32:b5:f5:b7:08:43:
fb:81:aa:b6:ce:c0:f6:52:c2:bb:d1:4c:42:d2:bf:52:17:98:
8f:4c:0f:50:ec:7c:65:62:2f:18:d3:25:da:85:1a:e6:08:93:
e6:85:01:d1:e9:84:b2:8b:e1:43:d8:d9:bb:7b:11:03:43:41:
c9:98:47:77:97:39:6d:2c:8b:09:a1:44:8b:9e:8a:77:43:5e:
1d:d2:ae:99:61:b9:ba:d4:92:34:4d:08:15:ac:bc:ef:ca:cb:
cc:45:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:23:59 2025 by rpki-client