
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa
File: 1E17F340724911E88CAE8E84C4F9AE02.roa (raw, json)
Hash identifier: q4/0Kgx7jHqES39jz0njEzgoL1GFNzNz9y+SCnN4xmc=
Subject key identifier: 5C:AD:FA:EF:1A:78:11:A9:67:06:05:C9:FD:4F:DE:53:68:96:31:A2
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1B4B
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa
Signing time: Thu 02 Apr 2026 16:20:06 +0000
ROA not before: Thu 02 Apr 2026 16:20:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2401:3740:374::/48 maxlen: 48
2401:3740:375::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6987 (0x1b4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Apr 2 16:20:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ce9736-3fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:1b:1c:ab:8d:ac:40:8b:23:2b:ed:03:6e:
4a:85:0f:54:b5:29:c9:6f:2d:1d:cd:64:6b:50:c2:
1f:d5:1f:61:36:e8:60:17:78:20:1d:a7:c3:e9:67:
4d:ef:0e:e7:42:c0:d5:d6:98:4e:ba:0f:b5:07:e7:
27:43:a2:5a:f0:70:8c:91:03:98:10:17:30:07:d0:
4a:e2:45:e4:e8:27:4d:ec:d5:43:48:8f:54:d5:b6:
69:e7:56:8d:f8:5e:5e:f7:a2:a5:86:40:5a:d2:84:
32:06:7a:fd:34:e1:40:a5:81:0f:23:8e:f3:34:45:
15:d9:b3:b3:39:d2:bc:5b:49:9d:9e:70:1c:dd:b6:
a7:df:f3:74:a7:38:e6:88:4f:81:d3:8f:59:18:ef:
8c:4f:d3:4c:c9:8a:28:c6:82:ba:f4:d0:01:90:b3:
c4:74:98:ad:38:0e:f8:6b:02:d1:4c:18:ae:a0:b8:
bc:8b:c7:6a:1a:bf:da:24:7d:b4:1a:1f:50:d6:c0:
cc:62:07:27:28:63:49:02:52:3c:4b:bc:48:01:d6:
a1:83:ea:c9:29:a6:6c:56:4e:1b:ff:f3:02:e9:87:
b6:c5:a7:e9:61:d1:8f:39:25:7e:56:4c:a0:0c:cf:
3d:60:60:3b:6f:2e:50:0b:2d:e6:ba:ab:a0:1e:e6:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AD:FA:EF:1A:78:11:A9:67:06:05:C9:FD:4F:DE:53:68:96:31:A2
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:3740:374::/47
Signature Algorithm: sha256WithRSAEncryption
61:57:8f:c0:1a:a9:de:81:20:18:d9:52:18:ce:be:61:6f:45:
c1:79:f9:36:58:d8:23:de:a9:c3:81:2e:99:8b:90:34:58:4a:
93:20:d7:54:36:9f:c0:a3:96:08:87:d7:e3:d4:f3:43:33:16:
c1:40:b0:d7:14:c3:79:c2:48:38:64:84:be:1b:fe:85:2a:76:
4b:9e:dc:69:49:56:98:6f:22:22:71:c8:30:11:8b:98:d7:4f:
0d:20:bd:2d:7e:25:ea:1d:6e:bf:38:9f:5f:1b:d6:02:ed:cf:
e1:c9:6e:7d:76:b2:d1:7b:ba:c9:a1:35:ff:8e:46:fc:bb:20:
9a:27:9f:b1:3b:ee:ff:2d:ad:8a:db:00:d6:2d:04:b7:3d:1b:
06:9e:08:ef:eb:7e:6d:ba:83:67:bf:26:69:23:ed:80:ea:4f:
4a:74:0d:ad:c0:24:f9:04:82:65:e7:1a:57:eb:dc:b1:02:1b:
87:0d:80:e4:14:b4:74:17:05:7a:99:1b:57:79:08:79:e2:84:
3d:df:d0:2f:73:61:c1:9c:4d:a9:78:0f:43:67:d1:55:6c:0f:
0b:10:b2:a9:d0:6a:17:3d:cf:3a:02:3b:3c:bc:45:2d:09:ec:
28:a7:26:40:48:f7:c7:73:03:34:9e:0c:6e:20:70:15:8c:8b:
6d:11:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:07 2026 by rpki-client