$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa File: 533EA4DADAD211EA9DD74774C4F9AE02.roa (raw, json) Hash identifier: QJrWckdx2eftF8eyilGjukPlKxkR3iPP4LAHLSjNS2g= Subject key identifier: CB:6F:F9:C4:AE:E9:CC:2E:50:AE:47:8C:9C:0B:17:BE:83:96:0C:27 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1123 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa Signing time: Fri 22 May 2026 20:24:13 +0000 ROA not before: Fri 22 May 2026 20:24:13 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 133555 IP address blocks: 2406:840:f380::/44 maxlen: 48 2406:840:fefc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 19:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4387 (0x1123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:24:13 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a10bb6d-492f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:f4:03:24:33:a2:f5:80:b6:8e:d5:91:78: 53:50:99:08:0a:4e:2d:35:42:b1:2b:2c:44:d3:7d: aa:34:0a:57:68:d1:de:b6:b9:59:ac:2f:aa:4c:c6: 13:3b:24:75:cc:12:08:a9:32:aa:64:3b:1e:ce:b2: 02:3f:42:97:ef:c8:d8:1d:03:2b:ff:cf:bd:e5:74: b8:b1:11:c5:4a:03:44:8b:9a:ee:4f:4d:15:4e:b7: 4f:06:27:44:f9:5f:f9:28:9d:f0:3c:f8:1f:10:54: c1:87:22:13:c4:7c:4a:71:88:ef:ea:80:42:d5:01: 30:f7:8d:33:c4:c3:5e:84:25:bb:1e:1f:85:66:ca: 7c:31:9d:d1:a6:7b:1a:9e:63:34:ef:97:5c:3d:b4: 0d:27:5d:8e:ae:24:f6:9d:7e:33:9a:9b:c3:74:39: 60:51:d5:cf:5a:d6:03:3a:fd:ad:17:ac:93:76:bb: 15:a2:77:cf:ff:12:df:c3:9c:6d:62:ca:a1:72:c2: ec:c8:66:8c:e0:0b:85:98:fc:73:fb:cb:e0:cb:30: 51:e7:06:dd:50:78:9d:0e:1b:3c:ad:d6:ef:a2:53: 48:0b:7e:6b:5b:3a:76:a0:4f:d4:98:92:e2:fc:3f: c0:1e:5a:38:c6:80:be:ee:18:db:87:4c:26:14:77: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6F:F9:C4:AE:E9:CC:2E:50:AE:47:8C:9C:0B:17:BE:83:96:0C:27 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:f380::/44 2406:840:fefc::/48 Signature Algorithm: sha256WithRSAEncryption 60:3b:9e:37:b6:c5:a3:f5:ac:37:9a:6b:48:77:33:dd:07:2d: 9a:29:d2:ac:78:a1:5a:a5:1c:c7:57:e3:4d:0a:5f:0c:d1:9a: a4:49:03:b7:a8:cb:b1:c1:5c:41:a0:f7:e7:33:74:e5:2f:5b: 90:12:a5:54:30:d1:ab:28:69:e1:78:46:89:72:5d:41:5a:05: ce:bc:fa:b7:52:c9:30:55:0c:59:1c:67:75:75:47:c3:74:d8: 2f:3e:b8:4a:7c:96:94:00:cf:c7:48:a9:4d:b1:5b:ea:3e:1d: 32:2a:d0:2b:a4:5f:a6:2a:0d:ef:39:33:f0:ab:2a:f4:b7:04: 5e:51:a3:83:03:fe:d5:d5:bf:36:e2:4a:93:ed:d4:6d:63:40: e2:de:b4:a8:34:88:16:93:4e:54:ae:48:10:2e:71:ca:c4:10: 90:f4:78:e5:c0:40:66:f4:de:dc:db:8d:37:f3:27:7e:b1:07: 02:b3:cf:15:93:55:88:da:6f:fb:a3:12:15:cf:7a:5d:36:b1: 31:91:c6:70:ba:5e:8b:bc:dc:90:0f:a7:5a:13:94:2a:7c:b9: b3:47:18:f6:87:bb:89:29:3d:1c:76:6f:d9:19:c0:f8:b7:6b: 98:eb:e9:83:a1:df:a4:f9:ae:9f:3c:ee:ed:03:6d:61:8a:e1: d5:22:94:b3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICESMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNTIyMjAyNDEzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEwYmI2ZC00OTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDT0AyQzovWAto7VkXhTUJkICk4tNUKxKyxE032qNApXaNHetrlZrC+qTMYT OyR1zBIIqTKqZDsezrICP0KX78jYHQMr/8+95XS4sRHFSgNEi5ruT00VTrdPBidE +V/5KJ3wPPgfEFTBhyITxHxKcYjv6oBC1QEw940zxMNehCW7Hh+FZsp8MZ3Rpnsa nmM075dcPbQNJ12OriT2nX4zmpvDdDlgUdXPWtYDOv2tF6yTdrsVonfP/xLfw5xt YsqhcsLsyGaM4AuFmPxz+8vgyzBR5wbdUHidDhs8rdbvolNIC35rWzp2oE/UmJLi /D/AHlo4xoC+7hjbh0wmFHf/iQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMtv+cSu 6cwuUK5HjJwLF76DlgwnMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNTMzRUE0REFE QUQyMTFFQTlERDc0Nzc0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcEJAYIQPOAAwcAJAYIQP78MA0GCSqGSIb3DQEBCwUAA4IBAQBgO543 tsWj9aw3mmtIdzPdBy2aKdKseKFapRzHV+NNCl8M0ZqkSQO3qMuxwVxBoPfnM3Tl L1uQEqVUMNGrKGnheEaJcl1BWgXOvPq3UskwVQxZHGd1dUfDdNgvPrhKfJaUAM/H SKlNsVvqPh0yKtArpF+mKg3vOTPwqyr0twReUaODA/7V1b824kqT7dRtY0Di3rSo NIgWk05UrkgQLnHKxBCQ9HjlwEBm9N7c24038yd+sQcCs88Vk1WI2m/7oxIVz3pd NrExkcZwul6LvNyQD6daE5QqfLmzRxj2h7uJKT0cdm/ZGcD4t2uY6+mDod+k+a6f PO7tA21hiuHVIpSz -----END CERTIFICATE-----Generated at Sat Jun 6 08:19:58 2026 by rpki-client