
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5FCBF00EB89511EFA8E14384C4F9AE02.roa
File: 5FCBF00EB89511EFA8E14384C4F9AE02.roa (raw, json)
Hash identifier: Zq9XaghvHBgenbE2aZa42nyj5aMtJ6AQHtZPwdfC2pM=
Subject key identifier: D5:93:71:E0:9F:C1:79:FE:9C:02:96:F2:7E:17:00:43:0F:1B:B0:BA
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 112C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5FCBF00EB89511EFA8E14384C4F9AE02.roa
Signing time: Fri 22 May 2026 20:24:29 +0000
ROA not before: Fri 22 May 2026 20:24:29 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137908
IP address blocks: 2406:840:ee40::/44 maxlen: 48
2406:840:feaf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4396 (0x112c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:24:29 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a10bb7d-0de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:05:5f:72:c5:44:b4:31:63:a3:b7:40:34:
00:15:5a:d7:de:0c:5d:cd:26:5d:c9:a4:fa:5c:c2:
d6:ed:7f:de:05:d3:76:ed:e5:c4:7c:15:59:fe:6c:
a8:75:35:f7:6a:77:64:58:19:b2:95:40:9a:e8:c1:
d4:58:6e:97:54:e7:ba:52:3e:a5:9e:6b:e3:f0:2b:
99:52:31:19:fc:7a:13:8b:03:e1:6f:0b:4e:4d:be:
ad:07:ca:0c:79:f7:da:7e:c2:a2:7e:a8:40:c2:7f:
c4:13:13:95:ef:0a:33:a8:c9:3b:b0:9a:47:25:86:
cc:f5:24:5f:e0:74:c7:29:6f:d7:9c:26:30:7f:f9:
52:af:fc:a9:20:5e:1c:bd:b5:60:fe:13:91:b5:d8:
b2:3c:f3:ff:bb:ed:6b:0c:41:69:98:91:75:82:eb:
17:0c:1e:04:12:81:c4:f9:81:8a:ea:cc:46:8d:a5:
35:b7:28:6d:7e:7a:0e:56:aa:5c:ac:52:75:4b:81:
ac:82:f1:78:f4:cd:45:56:75:1d:5a:10:be:d8:c3:
85:9f:6b:1c:0d:d4:12:24:09:39:d9:3c:3d:a7:63:
ca:e3:54:1e:52:b8:ad:63:d0:21:b3:4e:b9:60:7b:
07:b4:09:ef:3c:eb:04:1e:2e:83:b4:43:ac:29:25:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:71:E0:9F:C1:79:FE:9C:02:96:F2:7E:17:00:43:0F:1B:B0:BA
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5FCBF00EB89511EFA8E14384C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:ee40::/44
2406:840:feaf::/48
Signature Algorithm: sha256WithRSAEncryption
2f:32:55:f3:db:79:fd:07:61:e5:82:38:87:92:a8:8b:83:0e:
cb:9b:a1:62:de:de:e5:8a:8f:03:91:49:9e:8d:1c:e1:55:af:
bc:28:cd:e1:da:aa:71:06:52:97:69:f5:99:b4:11:a6:cf:a6:
10:7f:0c:41:0e:76:92:65:5e:e9:19:f9:22:cf:0f:18:ac:0e:
5c:e8:0b:01:d2:81:3b:42:59:e9:06:11:ac:2e:cf:f3:65:92:
17:60:ef:19:01:30:22:30:c3:da:2d:c9:ec:9d:9f:d6:45:3f:
9b:ab:49:0e:b5:2f:52:11:a8:ee:f5:22:38:ef:08:ab:e8:a6:
a0:df:ca:a4:30:5c:45:a6:97:27:d7:d3:af:bf:c1:72:fc:c6:
21:84:e6:bb:84:e0:a0:56:24:f9:54:a1:56:44:b3:b8:68:12:
ef:df:d0:45:31:ad:79:bc:c3:71:ce:3d:02:9c:e8:f7:1a:0f:
fc:c6:64:87:8c:61:94:d3:f2:b3:85:5e:1c:1b:d9:86:fd:f5:
eb:63:40:9c:d9:47:e5:89:1e:45:91:d5:16:12:5e:b5:df:44:
f3:70:ed:4e:43:57:2a:22:8b:01:5c:1e:be:38:f3:c3:05:74:
ec:79:f0:aa:5d:88:8e:ea:87:1b:d3:da:1e:0a:0e:e5:98:63:
d1:f3:19:50
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICESwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNDI5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmI3ZC0wZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4sFX3LFRLQxY6O3QDQAFVrX3gxdzSZdyaT6XMLW7X/eBdN27eXEfBVZ/myo
dTX3andkWBmylUCa6MHUWG6XVOe6Uj6lnmvj8CuZUjEZ/HoTiwPhbwtOTb6tB8oM
effafsKifqhAwn/EExOV7wozqMk7sJpHJYbM9SRf4HTHKW/XnCYwf/lSr/ypIF4c
vbVg/hORtdiyPPP/u+1rDEFpmJF1gusXDB4EEoHE+YGK6sxGjaU1tyhtfnoOVqpc
rFJ1S4GsgvF49M1FVnUdWhC+2MOFn2scDdQSJAk52Tw9p2PK41QeUritY9Ahs065
YHsHtAnvPOsEHi6DtEOsKSW3MwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNWTceCf
wXn+nAKW8n4XAEMPG7C6MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNUZDQkYwMEVC
ODk1MTFFRkE4RTE0Mzg0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAYIQO5AAwcAJAYIQP6vMA0GCSqGSIb3DQEBCwUAA4IBAQAvMlXz
23n9B2HlgjiHkqiLgw7Lm6Fi3t7lio8DkUmejRzhVa+8KM3h2qpxBlKXafWZtBGm
z6YQfwxBDnaSZV7pGfkizw8YrA5c6AsB0oE7QlnpBhGsLs/zZZIXYO8ZATAiMMPa
LcnsnZ/WRT+bq0kOtS9SEaju9SI47wir6Kag38qkMFxFppcn19Ovv8Fy/MYhhOa7
hOCgViT5VKFWRLO4aBLv39BFMa15vMNxzj0CnOj3Gg/8xmSHjGGU0/KzhV4cG9mG
/fXrY0Cc2UfliR5FkdUWEl6130TzcO1OQ1cqIosBXB6+OPPDBXTsefCqXYiO6ocb
09oeCg7lmGPR8xlQ
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:47 2026 by rpki-client