$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa File: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (raw, json) Hash identifier: SgY47uXZZcXN1sjdeWmTTxHkgGnAzeWpfB2XTfDIP+0= Subject key identifier: D1:43:02:4E:AD:9A:29:23:56:21:7B:1A:D3:5F:7A:24:D8:DF:98:B3 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 02B3 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa Signing time: Thu 09 Jul 2026 04:31:05 +0000 ROA not before: Thu 09 Jul 2026 04:31:05 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 10111 IP address blocks: 2401:e60:10::/44 maxlen: 44 2401:e60:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Jul 9 04:31:05 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4f2409-3733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:23:f8:f5:15:ef:74:0b:19:35:22:83:70: 57:80:2b:1a:7c:9c:21:67:90:c5:d3:4c:cd:c9:e7: d2:97:5d:33:77:37:d1:31:19:b5:59:99:cb:68:61: 10:da:d3:a9:a9:db:fc:8b:11:24:e0:a6:15:6c:5e: 5a:28:ec:67:1b:da:4e:9f:c2:5e:da:90:da:21:4f: 6b:6b:ac:9c:ce:c4:91:35:9e:8d:31:38:e0:ed:f8: 63:ba:ae:04:eb:c4:3d:16:6e:c8:0f:24:6b:8a:4a: 54:2c:6e:61:8a:b6:e4:ee:96:fb:f4:19:09:1e:95: ae:c8:36:9d:57:b1:f5:04:69:6c:a9:fc:5e:dd:7b: 8a:e7:f1:c0:6f:39:1f:fb:85:3b:8b:45:ce:69:cf: 35:d2:5e:73:20:3f:e6:f4:d5:23:53:46:01:df:85: cd:29:78:67:66:0b:39:8a:31:1e:a6:4f:33:aa:34: 74:f8:dc:33:91:57:9d:06:ba:5e:17:08:ea:8f:4f: 98:47:9a:cc:d8:52:4e:73:ef:d1:78:81:cd:56:08: 49:74:dd:cb:57:60:d7:5b:80:dc:ed:96:ac:83:fb: e9:e6:d7:5f:08:67:33:69:10:c1:c4:3d:52:3f:4d: 50:74:9b:9b:fb:a0:e3:88:01:0d:4c:68:b8:fb:eb: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:02:4E:AD:9A:29:23:56:21:7B:1A:D3:5F:7A:24:D8:DF:98:B3 X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:e60:10::/44 Signature Algorithm: sha256WithRSAEncryption 76:b4:da:ab:17:d7:ee:1b:d8:d0:09:d9:d3:1c:e2:51:87:60: e2:bb:f4:d2:f4:50:42:3b:1d:7e:6e:a2:58:a9:92:89:72:fa: 26:cb:d7:96:fe:26:bb:3a:cf:56:f9:2c:11:03:87:7d:25:b1: 74:83:8c:b2:89:2b:cc:f3:e7:1d:89:cb:b6:f8:c2:d4:03:e6: c1:5e:e5:9e:36:eb:49:b3:83:86:5a:bc:4c:9a:d5:25:9c:6d: f2:3a:6d:5d:d0:d7:81:a0:25:18:bc:af:87:09:14:53:1c:6f: 14:e6:68:42:b0:7d:07:54:e2:ed:4b:a7:43:6c:b7:b1:d9:0d: e1:13:9b:35:ef:be:f3:3d:d9:25:e8:e5:62:93:e7:0b:b6:85: fe:05:41:bf:17:ca:e3:8c:81:af:22:0e:16:e4:bd:01:d7:81: e3:7e:d3:03:1d:b3:56:13:6d:dc:4f:50:87:e3:fa:e4:90:90: c9:7f:b2:10:7b:4d:91:87:be:f1:d9:86:15:c0:6d:b7:91:bc: d9:91:bb:90:d3:77:93:0b:f0:ec:d8:28:fd:bb:b0:f3:6b:2c: a3:f5:97:9f:b4:07:58:da:24:f0:60:5b:fc:68:67:2f:d2:f5: e3:3d:8e:9a:18:fb:91:c4:64:92:63:1b:d0:1e:c2:6e:66:91: c0:9e:02:ba -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjYwNzA5MDQzMTA1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmMjQwOS0zNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Xwj+PUV73QLGTUig3BXgCsafJwhZ5DF00zNyefSl10zdzfRMRm1WZnLaGEQ 2tOpqdv8ixEk4KYVbF5aKOxnG9pOn8Je2pDaIU9ra6yczsSRNZ6NMTjg7fhjuq4E 68Q9Fm7IDyRrikpULG5hirbk7pb79BkJHpWuyDadV7H1BGlsqfxe3XuK5/HAbzkf +4U7i0XOac810l5zID/m9NUjU0YB34XNKXhnZgs5ijEepk8zqjR0+NwzkVedBrpe Fwjqj0+YR5rM2FJOc+/ReIHNVghJdN3LV2DXW4Dc7Zasg/vp5tdfCGczaRDBxD1S P01QdJub+6DjiAENTGi4++uY3wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNFDAk6t mikjViF7GtNfeiTY35izMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JFQTcvMDQ0RjY0NDgxMTY4MTFFRUFDNjNDMjM0QzRGOUFFMDIvOEZEOUVGQjIx QzRCMTFFRkE1QjYzODNFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcEJAEOYAAQMA0GCSqGSIb3DQEBCwUAA4IBAQB2tNqrF9fuG9jQCdnT HOJRh2Diu/TS9FBCOx1+bqJYqZKJcvomy9eW/ia7Os9W+SwRA4d9JbF0g4yyiSvM 8+cdicu2+MLUA+bBXuWeNutJs4OGWrxMmtUlnG3yOm1d0NeBoCUYvK+HCRRTHG8U 5mhCsH0HVOLtS6dDbLex2Q3hE5s1777zPdkl6OVik+cLtoX+BUG/F8rjjIGvIg4W 5L0B14HjftMDHbNWE23cT1CH4/rkkJDJf7IQe02Rh77x2YYVwG23kbzZkbuQ03eT C/Ds2Cj9u7Dzayyj9ZeftAdY2iTwYFv8aGcv0vXjPY6aGPuRxGSSYxvQHsJuZpHA ngK6 -----END CERTIFICATE-----Generated at Wed Jul 22 00:01:03 2026 by rpki-client