$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa File: 1A1E7A58D8FB11EC9827D678C4F9AE02.roa (raw, json) Hash identifier: PLH2iC7YMistQnxWMtg5O2ZQCWhtnJE2ERoX2OZKoaY= Subject key identifier: 54:B1:2D:2F:2E:AF:56:FC:F8:4A:9E:60:75:E3:A9:DF:76:43:2E:62 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1037 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:29:41 +0000 ROA not before: Thu 22 May 2025 20:06:49 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 140731 IP address blocks: 2406:840:9200::/40 maxlen: 48 2406:840:9700::/40 maxlen: 48 2406:840:eb80::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 19:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4151 (0x1037) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:49 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a493a5-893a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f5:33:22:fc:94:56:c0:f7:0a:e4:4f:dd:00: 68:12:f5:aa:ad:34:56:b6:f2:f8:ff:30:bb:ec:1d: 2b:ef:df:15:0f:6e:b2:fb:75:1f:d3:10:c0:a3:62: ab:64:60:87:11:fd:79:94:92:be:a1:f5:2b:d4:56: dc:2b:21:0a:2c:aa:30:b2:de:25:44:ff:64:02:66: 28:f5:c5:ac:07:8d:83:84:c3:38:93:8e:26:cd:2c: 6f:da:10:50:66:80:6e:70:25:f0:ca:e7:8d:c7:b6: a4:85:77:ca:fb:68:22:05:e3:ff:d1:26:d2:5f:c4: 5a:e5:f7:c2:c0:2b:af:69:af:44:df:0d:a8:2b:03: 5f:fd:41:cb:8c:d4:10:0f:4a:ac:1e:f8:f8:a6:be: 71:f0:f6:de:d1:6c:12:08:1c:a5:e0:51:29:92:d6: 57:9c:6b:b1:6c:62:e8:cd:02:6d:96:03:37:bf:f7: 5a:ad:25:7e:70:e6:83:9d:25:d8:3e:c8:b8:b7:24: f5:88:2b:e4:68:44:0b:85:c5:d4:14:b5:16:63:5d: 7b:3d:5a:92:9f:b0:5e:fb:31:a6:8a:b3:55:06:d2: 0c:2f:4f:22:2f:73:ef:78:62:38:85:e9:31:cc:26: fa:38:2d:90:fc:0f:9e:19:58:b1:92:2d:56:fe:d3: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B1:2D:2F:2E:AF:56:FC:F8:4A:9E:60:75:E3:A9:DF:76:43:2E:62 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:9200::/40 2406:840:9700::/40 2406:840:eb80::/42 Signature Algorithm: sha256WithRSAEncryption a2:66:c0:b2:99:fd:58:0c:02:84:5e:1c:90:f0:aa:c3:35:08: ab:8d:45:8a:9b:79:df:f9:d7:2a:7d:04:1c:51:05:4c:b3:db: a6:6b:61:67:23:be:a2:26:10:a5:e1:66:84:31:6a:4f:a9:86: b5:0d:33:d1:cb:a4:52:8e:ce:37:3f:2c:c7:08:79:8c:1f:e8: 9c:8e:81:d6:77:e5:5b:fa:92:ac:0e:d0:0e:50:03:4c:6a:dc: 3d:c1:32:24:eb:dd:26:ea:b6:1d:3f:fc:5a:f1:42:63:7c:a4: 3d:c5:8b:92:68:b6:37:e6:23:3a:38:f2:e1:79:1f:6a:d1:81: 07:53:04:a2:36:95:77:db:60:e1:8d:ca:6b:30:48:f9:5c:92: 59:ba:5a:b4:ac:98:cd:70:56:9d:53:b8:6f:5c:6f:b3:1d:1a: 72:01:3e:4c:91:be:1b:9e:e2:0a:38:23:cd:6e:f1:e8:39:02: 98:36:2d:50:33:50:2d:90:40:b8:a8:83:10:d6:91:df:c3:65: 71:97:4e:17:0e:a7:72:3c:6a:ae:14:5f:f0:91:3e:6c:7f:c9: 23:e1:71:d1:a7:9b:7d:2c:88:5c:ee:26:58:51:5e:e2:3d:94: da:9b:38:a5:6a:31:6b:bd:ad:0b:a9:1c:d6:df:9a:1e:4b:27: ef:50:3e:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTNhNS04OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/UzIvyUVsD3CuRP3QBoEvWqrTRWtvL4/zC77B0r798VD26y+3Uf0xDAo2Kr ZGCHEf15lJK+ofUr1FbcKyEKLKowst4lRP9kAmYo9cWsB42DhMM4k44mzSxv2hBQ ZoBucCXwyueNx7akhXfK+2giBeP/0SbSX8Ra5ffCwCuvaa9E3w2oKwNf/UHLjNQQ D0qsHvj4pr5x8Pbe0WwSCByl4FEpktZXnGuxbGLozQJtlgM3v/darSV+cOaDnSXY Psi4tyT1iCvkaEQLhcXUFLUWY117PVqSn7Be+zGmirNVBtIML08iL3PveGI4hekx zCb6OC2Q/A+eGVixki1W/tMquQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSxLS8u r1b8+EqeYHXjqd92Qy5iMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMUExRTdBNThE OEZCMTFFQzk4MjdENjc4QzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAf BAIAAjAZAwYAJAYIQJIDBgAkBghAlwMHBiQGCEDrgDANBgkqhkiG9w0BAQsFAAOC AQEAombAspn9WAwChF4ckPCqwzUIq41Fipt53/nXKn0EHFEFTLPbpmthZyO+oiYQ peFmhDFqT6mGtQ0z0cukUo7ONz8sxwh5jB/onI6B1nflW/qSrA7QDlADTGrcPcEy JOvdJuq2HT/8WvFCY3ykPcWLkmi2N+YjOjjy4XkfatGBB1MEojaVd9tg4Y3KazBI +VySWbpatKyYzXBWnVO4b1xvsx0acgE+TJG+G57iCjgjzW7x6DkCmDYtUDNQLZBA uKiDENaR38NlcZdOFw6ncjxqrhRf8JE+bH/JI+Fx0aebfSyIXO4mWFFe4j2U2ps4 pWoxa72tC6kc1t+aHksn71A+Ww== -----END CERTIFICATE-----Generated at Fri Mar 13 09:46:00 2026 by rpki-client