
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966B7A9AEBDD11F091B91E146D6F56BC.roa
File: 966B7A9AEBDD11F091B91E146D6F56BC.roa (raw, json)
Hash identifier: Z47jjgmNStJxjHyDhs9/gKELZgSpmyUUsGS8mIjB2WM=
Subject key identifier: 0D:E2:88:1F:E6:BF:74:D3:71:AF:56:17:A3:FA:7B:1B:61:B6:6F:0D
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 10A6
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966B7A9AEBDD11F091B91E146D6F56BC.roa
Signing time: Sun 01 Mar 2026 19:31:22 +0000
ROA not before: Wed 07 Jan 2026 15:28:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 2406:840:e350::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4262 (0x10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Jan 7 15:28:59 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4940a-571b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:07:66:13:3c:68:86:a8:9d:91:e4:c8:f5:
b0:da:87:da:10:77:e0:a4:9c:04:35:51:40:12:9f:
64:5d:7b:b9:1c:bd:35:74:33:64:a3:00:76:75:ff:
10:54:5c:f1:70:9d:cd:35:6d:ca:74:8d:cf:6f:48:
3c:34:26:67:64:52:ad:83:17:58:14:46:3f:e4:1a:
0e:1f:da:28:1b:75:75:21:98:06:1e:71:c1:2e:1a:
a5:0b:3e:4a:fa:de:c0:13:4e:21:83:e6:32:83:f3:
93:46:b5:d0:40:bd:1c:3c:b0:05:57:d6:ac:e9:9d:
f2:73:bc:59:78:19:69:f2:e5:a9:77:cf:00:80:af:
3f:45:cc:c7:ba:61:70:5c:05:7a:a6:69:d2:f9:6b:
c2:2e:66:f6:44:c1:0d:df:d6:61:8c:e1:55:54:3e:
da:d0:7d:29:5f:3e:fb:a5:98:e2:b5:e6:ff:8b:a5:
23:1a:f8:77:12:58:d6:1c:33:46:ac:94:80:e9:91:
11:eb:97:59:1c:7f:7c:2e:74:4f:02:7f:d6:0b:51:
29:8d:74:45:20:94:20:5b:f1:f4:d7:15:1f:e5:f0:
b0:cf:e7:17:ac:57:be:c4:9a:b8:74:35:52:5a:3f:
e8:c0:09:27:8a:d0:cb:84:f2:a8:6e:9a:1b:36:d4:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E2:88:1F:E6:BF:74:D3:71:AF:56:17:A3:FA:7B:1B:61:B6:6F:0D
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966B7A9AEBDD11F091B91E146D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e350::/44
Signature Algorithm: sha256WithRSAEncryption
7c:67:b9:61:43:f3:1e:5d:f0:92:e5:f1:4d:71:8c:b4:51:02:
9c:3e:fa:ee:8f:f0:f0:f3:ac:26:a3:8c:87:6e:4c:ec:eb:18:
b5:df:2a:7b:13:f4:e3:bd:e7:0b:bb:83:52:80:67:fa:b7:33:
4d:7f:1e:22:33:62:17:c2:e0:21:b7:4a:05:02:e8:95:c1:50:
ac:6f:e4:12:e0:e2:ce:3b:3c:cc:e3:4d:3d:65:8f:12:77:27:
c6:61:76:aa:62:78:15:f3:ca:46:2f:70:e0:44:ac:64:33:49:
82:c3:db:83:6b:6f:a2:8f:6a:2a:11:c3:c5:e3:0f:39:c5:d3:
a3:5c:49:5a:16:fd:63:29:26:81:90:fe:10:8d:72:7e:df:4c:
28:78:eb:9d:41:78:4d:d9:db:4d:68:d0:fc:2b:2c:4f:d2:7c:
e3:11:c1:21:b9:f9:d7:ef:04:bc:b5:2a:dd:32:b9:18:db:38:
a7:3c:bf:2e:c7:10:6c:40:e7:01:fe:69:e9:d5:a9:08:b8:7e:
65:31:4d:39:05:85:0e:da:20:96:fd:fd:38:1e:47:46:d3:b0:
3d:d0:a6:ee:b8:ca:36:8d:85:52:71:79:d9:72:c2:a2:db:01:
7c:80:05:ad:b0:5f:7a:6a:b6:e3:14:44:6f:70:75:6a:87:a4:
af:61:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:01:22 2026 by rpki-client