$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa File: 966C7BEC71DC11EFAC022E35C4F9AE02.roa (raw, json) Hash identifier: goC4SEbvfvtNw0XZVS8+P/p9V+2JH1/CyOy1lZ83Dzc= Subject key identifier: 7D:FE:F2:16:46:E9:25:DB:47:23:E0:35:EE:D8:C0:FD:0A:E6:95:58 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1128 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa Signing time: Fri 22 May 2026 20:24:22 +0000 ROA not before: Fri 22 May 2026 20:24:22 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 136725 IP address blocks: 2406:840:fc10::/44 maxlen: 48 2406:840:fea4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 19:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4392 (0x1128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:24:22 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a10bb76-8ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:df:99:45:5d:fc:8a:98:88:75:37:d8:87: 81:d0:0f:ec:2b:e4:24:d0:17:e0:fa:3c:da:2c:98: 7a:63:49:a7:ff:7d:49:6c:a9:0d:5d:60:50:1e:51: da:04:58:d1:e1:e8:3e:9f:7e:fe:92:2a:dd:84:28: ba:34:02:58:ce:52:8f:15:8e:ba:16:4d:e7:5d:fb: b1:4b:e9:32:a4:6f:14:e6:a4:1b:d2:0f:e4:92:e9: c4:a1:77:fd:04:35:2d:6a:fb:80:44:17:ed:bd:ef: 46:17:8c:47:ea:c5:57:ed:2d:5c:d1:0d:d4:81:b9: 7d:98:04:c1:ce:9b:98:d5:60:0f:ba:19:5d:e9:e9: f9:01:7b:63:3a:69:cb:b4:d1:87:cb:fb:0f:7b:5e: 25:2a:0e:eb:6d:37:c7:4d:39:94:9a:c2:c2:62:58: c8:0b:85:88:ef:3c:c8:c2:02:a6:76:65:4f:30:d5: 5d:be:56:e3:70:e7:42:bb:e3:54:c6:ce:9b:95:fc: d0:11:8c:da:e1:66:47:33:d6:b0:23:66:42:97:cd: 2c:e7:8b:70:16:60:80:eb:8f:6d:60:28:0e:fa:62: 98:64:43:02:b6:54:75:ba:26:d5:0c:24:03:34:3f: 4e:4a:ee:ec:9f:a3:c0:31:ee:87:d2:fe:6d:63:42: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FE:F2:16:46:E9:25:DB:47:23:E0:35:EE:D8:C0:FD:0A:E6:95:58 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:fc10::/44 2406:840:fea4::/48 Signature Algorithm: sha256WithRSAEncryption 34:56:9c:ec:14:01:41:99:4a:09:b5:04:ed:6f:3d:45:3c:29: c1:30:54:48:53:41:83:6a:a4:f9:7c:2e:0a:0e:32:77:f4:85: cc:fc:94:de:68:2e:64:98:db:a6:d1:2f:cb:6c:e3:fa:8c:c2: 58:26:11:8c:00:8c:e4:3c:20:a2:eb:ee:60:17:e2:b3:c8:c5: c6:cd:94:af:63:17:91:ef:81:4a:fc:37:99:b7:d6:69:1f:ea: ed:98:4f:1a:17:18:ed:ab:7e:d0:3e:4c:17:0f:d0:17:ec:70: a8:97:18:98:b8:06:8c:99:68:cc:c8:83:15:b3:4b:aa:a9:68: d7:89:94:f3:5c:10:f9:76:6c:33:dd:04:cc:1c:77:ef:38:36: a2:a7:b7:41:a4:19:ac:05:36:26:73:88:d8:69:aa:6f:57:b7: 54:aa:33:5c:28:95:34:60:0a:d7:23:74:a5:f6:08:e1:e8:3d: 93:6a:2d:b4:6b:af:74:c6:e2:16:53:9c:c9:aa:d7:88:af:af: 52:cd:89:55:26:37:fc:92:e5:00:aa:e4:af:fc:bb:24:2d:ef: 85:de:b3:9a:01:14:c3:15:e5:cf:c7:a7:26:93:ec:fd:2c:82: 45:81:70:a8:80:5b:90:1d:c7:eb:7b:b8:dc:9d:97:fb:93:ee: 73:1f:96:85 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICESgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNTIyMjAyNDIyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEwYmI3Ni04ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfTfmUVd/IqYiHU32IeB0A/sK+Qk0Bfg+jzaLJh6Y0mn/31JbKkNXWBQHlHa BFjR4eg+n37+kirdhCi6NAJYzlKPFY66Fk3nXfuxS+kypG8U5qQb0g/kkunEoXf9 BDUtavuARBftve9GF4xH6sVX7S1c0Q3Ugbl9mATBzpuY1WAPuhld6en5AXtjOmnL tNGHy/sPe14lKg7rbTfHTTmUmsLCYljIC4WI7zzIwgKmdmVPMNVdvlbjcOdCu+NU xs6blfzQEYza4WZHM9awI2ZCl80s54twFmCA649tYCgO+mKYZEMCtlR1uibVDCQD ND9OSu7sn6PAMe6H0v5tY0KPXwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFH3+8hZG 6SXbRyPgNe7YwP0K5pVYMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTY2QzdCRUM3 MURDMTFFRkFDMDIyRTM1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcEJAYIQPwQAwcAJAYIQP6kMA0GCSqGSIb3DQEBCwUAA4IBAQA0Vpzs FAFBmUoJtQTtbz1FPCnBMFRIU0GDaqT5fC4KDjJ39IXM/JTeaC5kmNum0S/LbOP6 jMJYJhGMAIzkPCCi6+5gF+KzyMXGzZSvYxeR74FK/DeZt9ZpH+rtmE8aFxjtq37Q PkwXD9AX7HColxiYuAaMmWjMyIMVs0uqqWjXiZTzXBD5dmwz3QTMHHfvODaip7dB pBmsBTYmc4jYaapvV7dUqjNcKJU0YArXI3Sl9gjh6D2Tai20a690xuIWU5zJqteI r69SzYlVJjf8kuUAquSv/LskLe+F3rOaARTDFeXPx6cmk+z9LIJFgXCogFuQHcfr e7jcnZf7k+5zH5aF -----END CERTIFICATE-----Generated at Sat Jun 6 09:39:12 2026 by rpki-client