$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71B166364EAA11F0ADAB654EC4F9AE02.roa File: 71B166364EAA11F0ADAB654EC4F9AE02.roa (raw, json) Hash identifier: jv9iie6UGE7YBrKQSGxFoeH+WJMw5ecpC3QBIcqVqeM= Subject key identifier: 73:B7:A1:03:46:89:C1:B5:0E:1F:B7:AC:5E:66:60:0A:FD:C6:7D:1C Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 109D Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71B166364EAA11F0ADAB654EC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:31:14 +0000 ROA not before: Sat 21 Jun 2025 14:18:10 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138535 IP address blocks: 2406:840:e620::/47 maxlen: 48 2406:840:feab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 17:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4253 (0x109d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Jun 21 14:18:10 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a49402-1313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:23:ca:b3:f4:66:8a:ad:87:68:b4:56:53: e6:9f:90:90:67:c7:2d:b4:b1:15:3a:24:53:41:55: 70:b5:76:35:f3:e1:47:52:60:15:c7:3e:b3:8d:c6: fb:83:76:2a:5b:94:3b:fb:53:de:d6:ee:47:7d:3a: 58:fa:79:ef:cd:5d:bd:b3:6f:67:6d:0b:a5:42:cd: 5a:1b:30:54:91:ea:13:cc:8d:cb:09:52:a3:bf:0e: 3b:06:0d:31:e9:eb:cf:0a:e5:be:9b:4f:7b:a1:bd: dc:11:e0:60:33:a6:be:99:10:e0:0d:ab:b5:1f:e1: 1c:d3:13:d5:03:c3:11:c9:9d:05:c3:f2:84:41:c4: a0:ae:a8:0b:18:e3:7a:9e:01:57:29:0f:ad:d4:1b: c4:aa:28:73:55:ad:2f:5f:a5:63:3c:ac:42:cf:ee: 01:c7:13:e6:97:0f:2b:58:c4:79:ab:ff:fc:cb:ca: 31:fc:55:5d:d3:93:5a:a9:22:1f:1b:43:5f:a2:7d: c0:cf:d0:b3:45:a0:f0:b4:d1:e1:fa:b4:6b:12:5d: 35:59:a4:07:7b:ed:0e:79:77:fb:6f:34:b1:83:b4: 6a:d5:f5:cd:6d:e4:8e:a2:42:09:d6:07:22:c5:e9: f0:ff:87:d0:48:26:c9:01:ed:e0:6d:b0:2a:89:82: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B7:A1:03:46:89:C1:B5:0E:1F:B7:AC:5E:66:60:0A:FD:C6:7D:1C X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71B166364EAA11F0ADAB654EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:e620::/47 2406:840:feab::/48 Signature Algorithm: sha256WithRSAEncryption 47:2d:25:10:1c:96:c1:04:00:ce:2e:3e:b8:ae:a0:8a:d0:64: 12:e0:d2:b8:d2:3e:fd:a9:2c:cf:e6:a3:8e:75:64:e3:f8:a9: f9:50:db:72:17:50:7b:1a:4c:77:59:4f:88:da:72:f1:5d:fb: d9:66:c7:d0:99:7f:f1:de:d6:ef:88:68:dd:9d:15:7b:25:b7: 27:db:9d:5d:2c:ca:a2:25:fc:ad:bb:1a:9c:1d:54:2b:cb:5c: 00:78:b8:b1:76:64:1c:53:72:ca:48:99:e9:86:34:28:6a:0a: ab:9d:4b:15:bb:c3:20:eb:4d:66:fc:3c:cf:81:75:69:ef:df: 01:d6:ee:1b:83:5a:c0:3e:43:c8:d8:a0:36:aa:27:e2:45:1e: da:b1:13:28:32:e2:de:50:96:f4:18:da:c4:1c:2a:39:df:26: 95:8d:14:bb:0a:50:26:91:d7:51:04:b5:36:58:73:b3:7e:de: 83:f3:0e:e9:52:8a:23:0c:db:a4:c8:3a:cb:16:31:3d:c1:2b: 52:56:18:bb:b2:3b:18:41:0f:a3:f0:d3:5e:30:5f:b9:c9:c7: 48:9a:39:a8:35:c9:6b:12:d3:de:03:11:16:3b:bd:c9:50:86: ad:e5:31:af:57:3c:04:52:ed:f8:c8:57:62:1a:df:3a:2a:07: a0:56:e6:24 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNjIxMTQxODEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTQwMi0xMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aAjyrP0Zoqth2i0VlPmn5CQZ8cttLEVOiRTQVVwtXY18+FHUmAVxz6zjcb7 g3YqW5Q7+1Pe1u5HfTpY+nnvzV29s29nbQulQs1aGzBUkeoTzI3LCVKjvw47Bg0x 6evPCuW+m097ob3cEeBgM6a+mRDgDau1H+Ec0xPVA8MRyZ0Fw/KEQcSgrqgLGON6 ngFXKQ+t1BvEqihzVa0vX6VjPKxCz+4BxxPmlw8rWMR5q//8y8ox/FVd05NaqSIf G0Nfon3Az9CzRaDwtNHh+rRrEl01WaQHe+0OeXf7bzSxg7Rq1fXNbeSOokIJ1gci xenw/4fQSCbJAe3gbbAqiYJZJwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHO3oQNG icG1Dh+3rF5mYAr9xn0cMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzFCMTY2MzY0 RUFBMTFGMEFEQUI2NTRFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcBJAYIQOYgAwcAJAYIQP6rMA0GCSqGSIb3DQEBCwUAA4IBAQBHLSUQ HJbBBADOLj64rqCK0GQS4NK40j79qSzP5qOOdWTj+Kn5UNtyF1B7Gkx3WU+I2nLx XfvZZsfQmX/x3tbviGjdnRV7Jbcn251dLMqiJfytuxqcHVQry1wAeLixdmQcU3LK SJnphjQoagqrnUsVu8Mg601m/DzPgXVp798B1u4bg1rAPkPI2KA2qifiRR7asRMo MuLeUJb0GNrEHCo53yaVjRS7ClAmkddRBLU2WHOzft6D8w7pUoojDNukyDrLFjE9 wStSVhi7sjsYQQ+j8NNeMF+5ycdImjmoNclrEtPeAxEWO73JUIat5TGvVzwEUu34 yFdiGt86KgegVuYk -----END CERTIFICATE-----Generated at Sat Mar 7 02:28:17 2026 by rpki-client