$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa File: 7B2DB2E062D611EDA3A90143C4F9AE02.roa (raw, json) Hash identifier: 4ua0MlHrycCpBDawOrMMdUiW1MKBONHMrhHLCXqgBHE= Subject key identifier: 5A:BE:44:63:87:06:23:66:2F:87:37:4D:69:C9:02:51:8D:90:0A:3A Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1179 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa Signing time: Fri 22 May 2026 20:26:53 +0000 ROA not before: Fri 22 May 2026 20:26:53 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 18041 IP address blocks: 2406:840:f337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 19:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4473 (0x1179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:26:53 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a10bc0d-ba64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:53:00:0f:8f:a6:fe:ac:f8:29:54:5e:cd: 79:1c:21:52:f9:67:f0:0e:23:bd:76:8a:3c:6c:f4: 6b:c5:fd:bf:51:42:34:a7:45:98:34:f5:47:e1:21: 7c:ae:01:53:4d:5a:3a:f8:e1:e6:d9:99:77:47:6f: e6:88:aa:00:ec:29:34:c0:ab:ed:8e:f8:61:90:c7: 78:c1:c6:15:87:a6:c4:3e:4a:f6:56:b2:e5:28:8a: a8:23:a9:30:a0:35:58:b2:47:94:3c:71:1e:56:c7: 5d:b9:5d:3c:76:8b:fc:6d:80:90:12:84:b3:7e:c1: 65:87:96:bb:5e:80:59:f1:d7:95:84:11:70:a9:54: 67:07:bf:d9:12:e5:9e:20:38:25:fa:c7:86:0a:25: 75:41:f1:77:aa:c2:53:ef:51:d3:e9:3d:cd:19:28: 83:60:df:c1:a1:21:b8:90:c0:6f:36:16:1d:b3:f9: c5:cb:3e:4f:bb:76:5e:bf:01:11:50:73:ba:74:5f: fa:a0:06:0b:3c:e8:3e:37:c8:66:9d:31:1d:c0:82: 97:df:5e:1e:17:5a:3e:c8:08:e7:78:62:f1:62:3b: 04:ef:c1:9a:57:e6:90:0c:8d:c5:eb:91:b8:8d:fa: f9:40:06:31:ea:3e:ef:2c:ce:68:be:05:0c:33:40: d6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BE:44:63:87:06:23:66:2F:87:37:4D:69:C9:02:51:8D:90:0A:3A X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:f337::/48 Signature Algorithm: sha256WithRSAEncryption 4b:4c:ab:1e:22:de:14:b5:6a:d8:67:4d:8b:11:08:cc:0e:87: ac:50:f3:a0:98:ad:32:37:94:57:e7:64:65:00:20:1b:33:61: fc:60:30:8b:a6:a0:d2:dd:b4:e7:34:8e:f9:2a:aa:2c:22:45: 12:4c:dd:e1:a9:cd:aa:e5:7a:4d:48:89:dd:43:3e:4e:47:44: 43:bc:a6:f2:ac:56:aa:b8:65:5d:24:33:ef:9a:1e:22:48:2f: 93:d8:4a:f1:dc:c1:53:d8:4e:c6:5c:5b:11:28:37:99:0b:c9: e9:ba:3c:29:41:29:55:12:04:f6:7c:1d:5b:87:b9:d2:19:76: a8:ce:65:ed:da:a2:9a:8f:1f:44:ff:20:89:e0:85:61:50:5f: f2:1d:8f:76:67:ce:c7:55:d2:18:ca:0a:fd:49:ae:3c:ab:01: 51:5e:1e:68:ef:42:1f:a0:08:84:33:d0:9e:ae:fe:47:6e:6e: 88:77:f3:91:9b:ef:94:a7:5a:95:d4:05:50:f3:2f:79:48:db: 2e:c5:a3:7e:f4:c7:b0:63:a8:dd:dc:fb:10:91:91:c3:d7:a2: b8:9f:79:0c:10:ea:68:98:89:3a:12:96:9c:fa:49:dc:f7:3a: c7:c7:ea:46:be:00:52:26:90:ee:b1:94:cf:05:cd:c5:9a:2d: 48:46:c5:37 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICEXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNTIyMjAyNjUzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEwYmMwZC1iYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpRTAA+Ppv6s+ClUXs15HCFS+WfwDiO9doo8bPRrxf2/UUI0p0WYNPVH4SF8 rgFTTVo6+OHm2Zl3R2/miKoA7Ck0wKvtjvhhkMd4wcYVh6bEPkr2VrLlKIqoI6kw oDVYskeUPHEeVsdduV08dov8bYCQEoSzfsFlh5a7XoBZ8deVhBFwqVRnB7/ZEuWe IDgl+seGCiV1QfF3qsJT71HT6T3NGSiDYN/BoSG4kMBvNhYds/nFyz5Pu3ZevwER UHO6dF/6oAYLPOg+N8hmnTEdwIKX314eF1o+yAjneGLxYjsE78GaV+aQDI3F65G4 jfr5QAYx6j7vLM5ovgUMM0DWowIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFq+RGOH BiNmL4c3TWnJAlGNkAo6MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvN0IyREIyRTA2 MkQ2MTFFREEzQTkwMTQzQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAYIQPM3MA0GCSqGSIb3DQEBCwUAA4IBAQBLTKseIt4UtWrYZ02L EQjMDoesUPOgmK0yN5RX52RlACAbM2H8YDCLpqDS3bTnNI75KqosIkUSTN3hqc2q 5XpNSIndQz5OR0RDvKbyrFaquGVdJDPvmh4iSC+T2Erx3MFT2E7GXFsRKDeZC8np ujwpQSlVEgT2fB1bh7nSGXaozmXt2qKajx9E/yCJ4IVhUF/yHY92Z87HVdIYygr9 Sa48qwFRXh5o70IfoAiEM9Cerv5Hbm6Id/ORm++Up1qV1AVQ8y95SNsuxaN+9Mew Y6jd3PsQkZHD16K4n3kMEOpomIk6Epac+knc9zrHx+pGvgBSJpDusZTPBc3Fmi1I RsU3 -----END CERTIFICATE-----Generated at Sat Jun 6 08:18:20 2026 by rpki-client