
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/593105685BB711EE8E69584CC4F9AE02.roa
File: 593105685BB711EE8E69584CC4F9AE02.roa (raw, json)
Hash identifier: Fis3VqEFVVrwCkVp+OB6PYG4EcRMmL0r/bAKdsnrdrs=
Subject key identifier: 1B:7C:98:DD:3E:D0:AE:7C:ED:B1:55:5B:2A:9D:BB:D0:9B:B3:D5:10
Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial: 0423
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/593105685BB711EE8E69584CC4F9AE02.roa
Signing time: Fri 05 Jun 2026 01:30:05 +0000
ROA not before: Fri 05 Jun 2026 01:30:05 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132088
IP address blocks: 2402:e940:20::/44 maxlen: 44
2402:e940:30::/44 maxlen: 44
2402:e940:40::/44 maxlen: 44
2402:e940:60::/44 maxlen: 44
2402:e940:70::/44 maxlen: 44
2402:e940:80::/44 maxlen: 44
2402:e940:90::/44 maxlen: 44
2402:e940:a0::/44 maxlen: 44
2402:e940:b0::/44 maxlen: 44
2402:e940:c0::/44 maxlen: 44
2402:e940:d0::/44 maxlen: 44
2402:e940:e0::/44 maxlen: 44
2402:e940:f0::/44 maxlen: 44
2402:e940:100::/44 maxlen: 44
2402:e940:110::/44 maxlen: 44
2402:e940:120::/44 maxlen: 44
2402:e940:130::/44 maxlen: 44
2402:e940:140::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Validity
Not Before: Jun 5 01:30:05 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a22269d-6e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:a6:6c:a7:00:d4:3d:9e:f6:16:49:09:81:
7f:86:15:82:18:70:e9:61:c6:d5:2a:da:9b:46:79:
d8:3e:6e:f0:08:3e:7b:0e:8b:29:c2:60:f0:b5:f5:
dd:0f:b9:64:82:37:2f:d1:5c:91:c6:7c:bd:38:af:
98:dd:80:2b:8a:ae:71:37:61:4d:d9:ad:0d:8c:0a:
2a:ed:47:dc:66:d9:92:52:00:59:a9:e9:5e:a4:de:
ec:b4:79:64:ad:37:42:f8:bf:58:6b:f7:39:90:0d:
f9:78:88:50:d7:cf:6c:e5:1b:49:62:40:50:3c:7a:
8c:fa:b8:fd:32:f0:cc:38:db:a0:e5:40:2d:e4:de:
b3:f3:ba:f0:0a:c7:83:28:59:c6:f4:1d:92:4e:6d:
93:27:57:56:09:a8:aa:a8:82:29:d7:18:56:0d:63:
65:41:f0:6e:fa:06:21:b5:24:ea:9e:a7:e7:0f:9e:
a5:41:29:61:79:a0:a7:f3:50:80:1a:2a:c2:4c:6a:
96:ba:59:b4:b4:13:85:b5:f8:38:a0:7e:07:d5:36:
da:c8:1f:3d:1b:ff:c6:f3:da:a9:c5:02:a6:3e:9c:
bf:3e:52:55:b5:7d:6d:b9:80:f7:48:dd:ef:5d:9e:
99:37:23:e4:8c:28:ec:d9:b5:58:80:a5:b0:8c:60:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:98:DD:3E:D0:AE:7C:ED:B1:55:5B:2A:9D:BB:D0:9B:B3:D5:10
X509v3 Authority Key Identifier:
keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/593105685BB711EE8E69584CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:e940:20::-2402:e940:4f:ffff:ffff:ffff:ffff:ffff
2402:e940:60::-2402:e940:14f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4e:27:01:5d:21:d9:4a:a0:6d:25:35:05:28:be:7e:36:3f:da:
d4:84:cf:c0:fa:41:79:c1:89:fc:d7:ec:4c:a8:f5:95:78:c1:
79:9b:dc:3b:27:71:40:f2:31:c4:c0:02:1f:d2:e8:73:7d:ce:
73:3b:01:78:cd:4d:cc:96:c6:19:ba:91:17:58:28:51:ea:e0:
14:51:e9:bd:c7:81:b9:fb:9e:5b:a5:c2:d9:7c:a4:80:e6:5e:
9d:fe:30:02:73:29:94:9b:83:8e:56:2d:5e:2b:ba:62:a6:d5:
eb:01:3a:c0:6c:fd:a4:86:06:9d:57:e6:61:de:61:04:40:82:
7e:2c:0f:15:cd:9b:33:86:18:42:fe:45:95:46:6f:a7:db:3c:
d6:1a:c4:7c:33:c3:e8:3c:4f:e8:4b:87:e3:51:02:c8:0f:cc:
df:1e:3d:c1:fd:75:a3:47:1c:c5:e1:67:c3:a4:f0:cd:cc:85:
6a:d3:16:bf:60:d3:33:c8:0c:67:09:f8:96:44:98:fc:97:71:
9e:55:0a:68:61:c4:7c:d0:25:66:67:f8:16:df:62:13:03:ef:
02:0b:73:74:bc:21:6b:8a:fa:20:50:ae:5f:c2:d8:3e:47:35:
80:82:73:5e:a0:6a:63:14:fe:0c:f7:a4:eb:91:f9:2c:62:eb:
65:5f:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:29 2026 by rpki-client