$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/EEBCC3028A7711EFBB6F4557C4F9AE02.roa File: EEBCC3028A7711EFBB6F4557C4F9AE02.roa (raw, json) Hash identifier: yRK9tN/a0QP9WVOpOWCY1Mg3r3qytMJUoZ4t+k7c59M= Subject key identifier: 5B:75:A8:B2:05:C8:27:54:B5:40:12:68:13:0D:53:AE:A1:09:A9:27 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 0808 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/EEBCC3028A7711EFBB6F4557C4F9AE02.roa Signing time: Wed 24 Jun 2026 22:26:57 +0000 ROA not before: Wed 24 Jun 2026 22:26:57 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 133226 IP address blocks: 2400:8180:31::/48 maxlen: 48 2400:8180:32::/48 maxlen: 48 2400:8180:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 24 22:26:57 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a3c59b1-a62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:bc:fd:cc:a6:ba:1b:4b:ad:be:8b:31:42: 55:d8:a3:bb:58:7a:ba:31:c1:cf:73:75:f4:c6:39: a2:30:91:a8:c5:24:ff:fa:47:d3:2f:f9:e3:a7:1b: 0f:64:44:9a:83:6c:19:7f:7c:02:9c:e9:ea:27:7d: ba:18:90:fd:b8:07:c4:ec:8f:cc:ed:f5:b5:11:27: 65:1f:ab:c5:0a:e0:49:16:00:c1:96:43:45:a0:cc: ca:2d:66:91:80:06:c2:67:70:93:49:87:bb:d8:90: ea:ad:8f:10:80:c0:d4:77:3d:35:0f:cc:98:c7:b4: da:4b:4f:0d:a8:f4:9b:62:d1:ba:93:01:19:6b:85: fe:e2:0a:b0:19:d2:d9:89:d1:3d:8a:73:27:18:7c: 90:92:e8:5f:38:a8:d0:ab:60:b7:22:94:aa:11:dc: b3:66:53:2a:c0:6c:cd:2b:69:34:93:3d:b1:8f:c7: ab:0d:f0:04:3c:46:41:52:5b:aa:d5:5a:d5:40:b4: 56:d3:3f:d4:c9:bc:c3:f4:bb:23:5f:1f:c8:f5:7d: 43:f4:d3:d5:67:07:2c:29:ca:35:28:51:c1:b0:57: b2:3a:c9:71:b1:f8:11:71:7b:8d:7c:9b:66:e5:93: 32:a4:92:a0:c3:53:2a:7d:90:c5:9c:c3:0a:9f:2e: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:75:A8:B2:05:C8:27:54:B5:40:12:68:13:0D:53:AE:A1:09:A9:27 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/EEBCC3028A7711EFBB6F4557C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:8180:31::-2400:8180:33:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4d:95:55:cb:cf:4c:f5:7b:66:20:82:16:69:31:7c:41:3b:8d: ac:bc:51:85:5c:01:ad:88:ce:9a:88:69:2d:73:a8:37:ea:d8: f1:d0:f8:ac:b9:58:30:5f:b9:38:bd:92:c3:7a:73:0e:62:b6: 63:b5:3c:ce:32:31:97:60:b3:28:06:15:ff:54:18:ea:48:56: 47:e4:df:c7:f7:ad:0c:be:6a:68:61:aa:88:7a:19:cc:a9:41: 62:37:81:16:e5:0c:dc:c8:16:f8:b2:27:df:91:31:eb:d2:47: e0:9b:24:27:45:00:e5:b9:b6:cb:51:47:41:65:e2:dd:94:1f: c8:02:63:1d:f2:dc:de:40:a2:62:21:47:f2:c7:b7:8e:01:ee: 52:1e:b0:93:78:39:fe:55:dd:3d:6c:87:fb:40:e0:bf:ce:67: 4b:c1:eb:48:13:94:ad:b3:9d:8c:f1:94:e8:c4:04:43:8f:1f: fa:59:53:1d:b2:fe:a3:f6:20:65:9b:42:8b:03:21:e6:89:e0: e1:e9:23:a9:14:2a:50:b5:4f:7b:ec:71:56:a7:7f:f0:ff:f2: 69:fc:b0:3e:a6:f9:e0:bc:48:28:17:9b:5c:f6:1e:97:20:e5: 4e:b0:22:35:0a:91:cd:7d:11:43:9d:61:de:b4:ef:7f:2c:ba: b1:36:22:7e -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjYwNjI0MjIyNjU3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjNTliMS1hNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD28/cymuhtLrb6LMUJV2KO7WHq6McHPc3X0xjmiMJGoxST/+kfTL/njpxsP ZESag2wZf3wCnOnqJ326GJD9uAfE7I/M7fW1ESdlH6vFCuBJFgDBlkNFoMzKLWaR gAbCZ3CTSYe72JDqrY8QgMDUdz01D8yYx7TaS08NqPSbYtG6kwEZa4X+4gqwGdLZ idE9inMnGHyQkuhfOKjQq2C3IpSqEdyzZlMqwGzNK2k0kz2xj8erDfAEPEZBUluq 1VrVQLRW0z/UybzD9LsjXx/I9X1D9NPVZwcsKco1KFHBsFeyOslxsfgRcXuNfJtm 5ZMypJKgw1MqfZDFnMMKny5r+QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFFt1qLIF yCdUtUASaBMNU66hCaknMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvRUVCQ0MzMDI4 QTc3MTFFRkJCNkY0NTU3QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwAkAIGAADEDBwIkAIGAADAwDQYJKoZIhvcNAQELBQADggEBAE2V VcvPTPV7ZiCCFmkxfEE7jay8UYVcAa2IzpqIaS1zqDfq2PHQ+Ky5WDBfuTi9ksN6 cw5itmO1PM4yMZdgsygGFf9UGOpIVkfk38f3rQy+amhhqoh6GcypQWI3gRblDNzI FviyJ9+RMevSR+CbJCdFAOW5tstRR0Fl4t2UH8gCYx3y3N5AomIhR/LHt44B7lIe sJN4Of5V3T1sh/tA4L/OZ0vB60gTlK2znYzxlOjEBEOPH/pZUx2y/qP2IGWbQosD IeaJ4OHpI6kUKlC1T3vscVanf/D/8mn8sD6m+eC8SCgXm1z2Hpcg5U6wIjUKkc19 EUOdYd60738surE2In4= -----END CERTIFICATE-----Generated at Tue Jul 21 20:11:49 2026 by rpki-client