$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa File: AA398864B96611EF8161BF51C4F9AE02.roa (raw, json) Hash identifier: TVMxPDX8+ajRUXM2r6scZ4B4oAhV7+U0Bjkb7kPZWsg= Subject key identifier: 14:D4:B6:76:5F:60:8F:4F:81:7E:FC:82:1E:3D:4D:1F:AE:EA:9C:27 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 02B4 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa Signing time: Thu 09 Jul 2026 04:31:08 +0000 ROA not before: Thu 09 Jul 2026 04:31:08 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 139358 IP address blocks: 2401:e60:20::/44 maxlen: 44 2401:e60:20::/48 maxlen: 48 2401:e60:30::/44 maxlen: 44 2401:e60:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Jul 9 04:31:08 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4f240c-c8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:8d:10:fd:96:e3:e3:e8:41:6c:0e:86:5e: e3:1f:f1:f3:2d:fd:77:0e:64:d1:c3:75:9a:ab:c9: 2d:df:43:c2:60:1e:b3:b3:ca:75:bb:b1:28:bd:1d: 03:d8:c8:c2:8b:00:7c:82:d5:a5:75:1a:f3:0b:8a: 87:85:09:c4:00:9f:c5:c1:3f:30:26:6a:14:a9:cf: 38:30:c5:d9:39:e5:e2:40:e2:63:07:ef:d5:dd:a1: e8:a3:dd:b3:8a:80:3f:c6:88:84:2e:78:9e:8f:cc: c8:f9:e8:89:74:a7:63:07:61:ea:8e:c5:84:50:6a: 67:7c:c1:af:07:c2:ba:b0:73:05:7e:21:25:e1:45: 14:9d:1c:35:82:f8:c4:e2:c5:ab:50:89:63:46:e1: a2:13:17:7f:7c:08:aa:e9:93:e5:a6:0a:aa:be:97: 7c:16:56:5b:46:13:b8:66:a9:21:bd:12:9e:6d:f8: 73:78:65:96:3c:a2:0a:72:28:bd:a5:c5:39:ce:4e: 51:0d:cc:3d:08:4a:af:ac:0b:b2:86:98:55:9d:29: 55:95:4c:56:5a:49:8f:25:ff:1f:17:6c:1d:66:b4: f3:a0:79:89:6d:b1:fd:76:4c:b6:02:18:55:ed:8f: 4b:2c:5b:13:58:34:2c:9a:1a:47:10:0d:1d:2e:73: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:B6:76:5F:60:8F:4F:81:7E:FC:82:1E:3D:4D:1F:AE:EA:9C:27 X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:e60:20::/43 2401:e60:100::/40 Signature Algorithm: sha256WithRSAEncryption 4b:9f:52:69:af:2e:de:e3:ce:0f:ce:cd:0f:de:0e:88:45:13: 55:83:a3:5c:29:01:18:93:3b:fa:53:6a:27:f1:76:ef:bd:ff: 46:88:75:d3:ff:0d:dc:40:41:17:f5:ec:b4:10:7c:93:1d:ba: a1:58:1a:fd:0e:ac:36:8d:ab:13:56:c3:ad:f2:29:d5:09:bc: c1:52:38:95:19:17:fc:48:d4:91:30:5a:46:1d:77:2d:f3:80: 52:9d:63:fe:28:c1:7e:5c:93:8f:0c:29:e2:dc:01:3c:70:fb: d6:7a:3e:f8:cb:61:8d:5f:cf:96:a9:0e:30:d9:c4:b7:83:a4: 3b:b7:eb:14:f2:2b:34:39:d6:81:5b:4f:0e:7c:ad:49:58:40: a5:c5:ef:d6:4e:8f:0e:69:af:1e:9f:03:6a:c6:7d:b1:ef:35: 38:9c:87:a0:12:38:a4:d4:98:10:54:48:c1:a4:4c:2a:34:b5: 15:1c:05:0e:40:21:b5:cc:ef:d6:28:b5:55:4b:9f:8f:f7:c4: 08:5b:08:6c:df:5b:95:9b:52:5b:c0:06:5d:92:72:e7:75:77: 94:9a:14:22:40:96:87:2a:86:4c:34:01:6a:9c:00:50:5a:a8: bc:6f:20:0b:b8:c4:d7:72:74:85:09:7f:af:ba:cf:68:2c:8d: 4b:60:9d:8f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjYwNzA5MDQzMTA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmMjQwYy1jOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurWNEP2W4+PoQWwOhl7jH/HzLf13DmTRw3Waq8kt30PCYB6zs8p1u7EovR0D 2MjCiwB8gtWldRrzC4qHhQnEAJ/FwT8wJmoUqc84MMXZOeXiQOJjB+/V3aHoo92z ioA/xoiELniej8zI+eiJdKdjB2HqjsWEUGpnfMGvB8K6sHMFfiEl4UUUnRw1gvjE 4sWrUIljRuGiExd/fAiq6ZPlpgqqvpd8FlZbRhO4ZqkhvRKebfhzeGWWPKIKcii9 pcU5zk5RDcw9CEqvrAuyhphVnSlVlUxWWkmPJf8fF2wdZrTzoHmJbbH9dky2AhhV 7Y9LLFsTWDQsmhpHEA0dLnMzewIDAQABo4ICazCCAmcwHQYDVR0OBBYEFBTUtnZf YI9PgX78gh49TR+u6pwnMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JFQTcvMDQ0RjY0NDgxMTY4MTFFRUFDNjNDMjM0QzRGOUFFMDIvQUEzOTg4NjRC OTY2MTFFRjgxNjFCRjUxQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAAjARAwcFJAEOYAAgAwYAJAEOYAEwDQYJKoZIhvcNAQELBQADggEBAEufUmmv Lt7jzg/OzQ/eDohFE1WDo1wpARiTO/pTaifxdu+9/0aIddP/DdxAQRf17LQQfJMd uqFYGv0OrDaNqxNWw63yKdUJvMFSOJUZF/xI1JEwWkYddy3zgFKdY/4owX5ck48M KeLcATxw+9Z6PvjLYY1fz5apDjDZxLeDpDu36xTyKzQ51oFbTw58rUlYQKXF79ZO jw5prx6fA2rGfbHvNTich6ASOKTUmBBUSMGkTCo0tRUcBQ5AIbXM79YotVVLn4/3 xAhbCGzfW5WbUlvABl2Scud1d5SaFCJAlocqhkw0AWqcAFBaqLxvIAu4xNdydIUJ f6+6z2gsjUtgnY8= -----END CERTIFICATE-----Generated at Tue Jul 21 22:11:50 2026 by rpki-client