$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/834071CE3CC711F18886FEB2B9833773.roa File: 834071CE3CC711F18886FEB2B9833773.roa (raw, json) Hash identifier: 1iFULLAQHGYMCY90ostx9Ve0F410WvUSje3dMxdqFGE= Subject key identifier: E4:07:0D:E7:30:AF:A7:09:F3:08:08:81:BB:45:0A:02:DA:93:AC:BD Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 10F1 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/834071CE3CC711F18886FEB2B9833773.roa Signing time: Mon 20 Apr 2026 14:45:02 +0000 ROA not before: Mon 20 Apr 2026 14:45:02 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2406:840:9888::/48 maxlen: 48 2406:840:b000::/40 maxlen: 48 2406:840:e060::/44 maxlen: 48 2406:840:e070::/44 maxlen: 48 2406:840:e280::/44 maxlen: 48 2406:840:fa60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 19:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4337 (0x10f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Apr 20 14:45:02 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69e63bee-bac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:02:df:eb:44:74:bb:48:77:41:df:9a:81: da:cd:da:a6:ac:8d:f2:b1:0c:cd:c4:00:20:b2:ec: 75:14:2c:21:b3:5a:9e:fb:d3:d0:2f:12:66:4c:53: 90:ba:f2:33:10:61:ec:79:dc:8c:3b:b7:24:0b:e9: fe:42:28:e8:af:b4:98:40:57:05:88:f7:e1:aa:97: b9:ae:08:18:d8:76:ac:ea:a1:ed:76:e5:b5:d7:93: 20:1f:0a:ff:11:07:01:54:8e:20:b4:e2:c5:c4:be: 95:ce:09:82:ca:a3:e9:2d:3b:01:6d:c1:b7:c0:b3: 88:14:d1:48:c7:4e:a8:e5:a1:9c:0f:b5:15:e0:64: fe:a4:13:d2:5e:92:99:bd:1f:5c:31:83:74:74:07: 95:60:b3:eb:e2:4b:24:62:a7:28:fa:a5:f5:02:c9: 08:11:85:df:e9:df:37:7b:cb:e2:a3:e6:c6:3f:c8: 23:97:98:8e:59:8a:24:9b:9d:4f:ec:2a:01:c5:82: 1f:60:61:ef:25:3c:6f:83:04:23:e5:c6:3d:64:9d: 03:5e:93:df:b8:79:f7:18:7d:cc:ba:31:22:58:52: 53:a1:a1:33:d3:5d:25:fd:df:47:94:eb:c6:50:59: d8:11:af:b1:9b:c1:ce:99:8a:e8:9c:71:1b:f6:79: 6e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:07:0D:E7:30:AF:A7:09:F3:08:08:81:BB:45:0A:02:DA:93:AC:BD X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/834071CE3CC711F18886FEB2B9833773.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:9888::/48 2406:840:b000::/40 2406:840:e060::/43 2406:840:e280::/44 2406:840:fa60::/44 Signature Algorithm: sha256WithRSAEncryption 61:a2:e9:bf:11:4e:c4:f4:8d:e2:23:f7:8d:ed:f5:7d:58:89: 33:e8:d3:50:ed:70:f5:00:8c:ed:2c:15:49:75:7a:91:ed:52: 14:18:b5:a6:d6:87:e0:b6:c0:9e:b4:82:6e:d2:57:f4:fc:37: 8f:d8:76:b0:40:be:52:f2:e4:4b:7a:eb:c5:3b:8f:0f:6a:0f: 50:47:80:d9:13:d7:02:37:64:55:5e:7c:cb:54:aa:f8:bb:88: 7c:72:73:ef:d3:7f:c9:9d:43:11:51:98:e0:76:51:8e:d5:38: 3f:55:4c:5c:82:4a:d3:7f:99:cb:a7:79:f1:8d:69:01:f2:b7: 1e:15:af:1d:35:f9:be:80:97:2e:41:d5:3a:f5:68:e0:19:3c: 96:84:de:19:2a:d5:24:2f:a9:9d:86:a5:73:52:ad:d3:23:af: 9e:c4:27:a7:58:29:68:27:f5:95:c8:a1:46:6e:ad:e7:39:d9: 64:6d:53:b4:44:d0:6c:13:a1:0a:88:7d:43:97:78:d3:a1:d7: 25:e9:80:a4:42:2d:c7:f4:d8:32:21:5f:0d:e4:89:80:10:64: 14:fc:7d:34:f4:5d:23:7c:e1:1a:5a:fc:cb:b6:49:de:8e:c4: 03:c5:11:4e:7f:eb:49:8b:74:80:bb:61:6d:bc:35:ac:a3:8e: 55:6c:84:b4 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICEPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNDIwMTQ0NTAyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWU2M2JlZS1iYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ4C3+tEdLtId0HfmoHazdqmrI3ysQzNxAAgsux1FCwhs1qe+9PQLxJmTFOQ uvIzEGHsedyMO7ckC+n+Qijor7SYQFcFiPfhqpe5rggY2Has6qHtduW115MgHwr/ EQcBVI4gtOLFxL6VzgmCyqPpLTsBbcG3wLOIFNFIx06o5aGcD7UV4GT+pBPSXpKZ vR9cMYN0dAeVYLPr4kskYqco+qX1AskIEYXf6d83e8vio+bGP8gjl5iOWYokm51P 7CoBxYIfYGHvJTxvgwQj5cY9ZJ0DXpPfuHn3GH3MujEiWFJToaEz010l/d9HlOvG UFnYEa+xm8HOmYronHEb9nlu8QIDAQABo4IChjCCAoIwHQYDVR0OBBYEFOQHDecw r6cJ8wgIgbtFCgLak6y9MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvODM0MDcxQ0Uz Q0M3MTFGMTg4ODZGRUIyQjk4MzM3NzMucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAAjAsAwcAJAYIQJiIAwYAJAYIQLADBwUkBghA4GADBwQkBghA4oADBwQkBghA +mAwDQYJKoZIhvcNAQELBQADggEBAGGi6b8RTsT0jeIj943t9X1YiTPo01DtcPUA jO0sFUl1epHtUhQYtabWh+C2wJ60gm7SV/T8N4/YdrBAvlLy5Et668U7jw9qD1BH gNkT1wI3ZFVefMtUqvi7iHxyc+/Tf8mdQxFRmOB2UY7VOD9VTFyCStN/mcunefGN aQHytx4Vrx01+b6Aly5B1Tr1aOAZPJaE3hkq1SQvqZ2GpXNSrdMjr57EJ6dYKWgn 9ZXIoUZurec52WRtU7RE0GwToQqIfUOXeNOh1yXpgKRCLcf02DIhXw3kiYAQZBT8 fTT0XSN84Rpa/Mu2Sd6OxAPFEU5/60mLdIC7YW28NayjjlVshLQ= -----END CERTIFICATE-----Generated at Tue Apr 21 14:36:36 2026 by rpki-client