$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C2A1D44ADF5011F0954B92DE6F6F56BC.roa File: C2A1D44ADF5011F0954B92DE6F6F56BC.roa (raw, json) Hash identifier: knCqqnbfJIkvZQSBcwwg6+g58kve3KOuQrjKZyZPXpE= Subject key identifier: C9:CD:1B:AF:93:02:65:9D:39:74:FE:90:01:3C:FB:5C:A0:E8:7D:AF Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 10A5 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C2A1D44ADF5011F0954B92DE6F6F56BC.roa Signing time: Sun 01 Mar 2026 19:31:21 +0000 ROA not before: Mon 22 Dec 2025 16:10:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 212831 IP address blocks: 2406:840:fed6::/48 maxlen: 48 2406:840:fed9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 17:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4261 (0x10a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Dec 22 16:10:41 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a49409-98b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:87:0f:a7:36:c2:ef:b6:02:6a:99:29:2d: 32:01:b7:4a:97:87:68:f6:0f:f7:a8:11:87:9d:9d: 4d:56:cc:ba:87:50:17:7d:51:da:ac:be:f7:c5:ad: 13:bf:ad:5e:c9:7d:f7:87:d6:a2:97:5f:f1:9c:69: 1e:0e:a4:7f:1f:4e:d6:a0:65:3d:11:e0:63:6b:d5: 11:e4:09:69:60:a6:ea:fd:9e:83:94:3a:8d:4f:85: f2:32:a0:63:7b:53:a7:b0:d7:b9:d7:e4:df:d5:dc: 1f:13:81:39:76:40:1a:5c:99:96:1f:f3:47:6f:03: 1a:66:7b:a3:81:de:ea:23:0c:07:65:60:51:f1:f8: 7c:e6:71:1a:83:ae:00:ef:0d:71:ab:cd:85:b9:f1: 33:12:8a:2a:32:0f:a8:9d:8d:4d:39:1b:7e:97:91: 28:22:a8:cc:66:b4:c3:fa:f1:c1:58:2e:4c:5e:8d: 3c:10:64:18:bf:45:6a:87:0a:f0:bf:a0:24:45:eb: 36:be:62:f4:e0:0d:96:9f:14:c4:4f:18:93:d9:d1: e2:cd:3f:37:5f:73:85:43:83:c6:70:5b:ea:25:b1: a7:5e:ad:fa:f1:19:ad:7d:f3:cb:9f:be:ee:61:3a: f6:2a:e3:46:b5:5f:ad:d6:af:01:ab:26:bf:9b:93: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CD:1B:AF:93:02:65:9D:39:74:FE:90:01:3C:FB:5C:A0:E8:7D:AF X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C2A1D44ADF5011F0954B92DE6F6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:fed6::/48 2406:840:fed9::/48 Signature Algorithm: sha256WithRSAEncryption 57:e0:75:31:ce:14:de:26:dc:5b:a6:7c:b7:a3:a1:28:45:0d: b6:8f:df:6f:7a:c4:c7:75:c2:6a:83:43:d4:d5:17:26:c2:01: 60:db:8d:9d:c6:2e:34:be:f5:5c:2f:ba:14:58:0a:06:21:3b: 4a:13:39:84:74:01:ad:2e:ee:74:04:d5:6f:a8:45:87:9d:60: b1:6b:04:28:da:37:02:a3:59:c2:95:74:a0:da:e1:10:fa:4b: 3a:d2:d7:00:5d:72:ec:c0:89:08:76:e3:33:89:45:b3:e6:b6: f4:3b:ca:42:59:e7:13:6a:c8:b0:0d:c2:5f:3e:d7:e4:78:75: 6e:b6:b0:4b:6d:68:a5:6a:11:e6:0f:69:0c:6d:ec:e1:ea:b4: da:52:16:52:67:e6:1e:d0:5c:2a:4a:4b:de:03:34:03:83:b3: a1:5b:fd:c7:60:59:64:28:5b:e5:30:9a:5b:af:e0:fe:be:b5: ca:2c:dd:f1:6b:89:4c:f7:f3:21:40:6b:a5:e7:cc:35:5f:dd: 1e:85:47:7b:33:10:5c:1f:f6:39:a8:26:02:47:7d:9c:b0:ec: 9f:99:4d:57:8a:5b:46:ef:46:59:9f:0f:30:50:37:e3:1a:16: 16:44:9b:27:3b:4c:20:fb:0b:1c:0a:85:a6:0c:8e:35:cf:6d: 5d:4d:65:a8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUxMjIyMTYxMDQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTQwOS05OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAig2HD6c2wu+2AmqZKS0yAbdKl4do9g/3qBGHnZ1NVsy6h1AXfVHarL73xa0T v61eyX33h9ail1/xnGkeDqR/H07WoGU9EeBja9UR5AlpYKbq/Z6DlDqNT4XyMqBj e1OnsNe51+Tf1dwfE4E5dkAaXJmWH/NHbwMaZnujgd7qIwwHZWBR8fh85nEag64A 7w1xq82FufEzEooqMg+onY1NORt+l5EoIqjMZrTD+vHBWC5MXo08EGQYv0Vqhwrw v6AkRes2vmL04A2WnxTETxiT2dHizT83X3OFQ4PGcFvqJbGnXq368RmtffPLn77u YTr2KuNGtV+t1q8Bqya/m5PG6wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMnNG6+T AmWdOXT+kAE8+1yg6H2vMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQzJBMUQ0NEFE RjUwMTFGMDk1NEI5MkRFNkY2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAJAYIQP7WAwcAJAYIQP7ZMA0GCSqGSIb3DQEBCwUAA4IBAQBX4HUx zhTeJtxbpny3o6EoRQ22j99vesTHdcJqg0PU1RcmwgFg242dxi40vvVcL7oUWAoG ITtKEzmEdAGtLu50BNVvqEWHnWCxawQo2jcCo1nClXSg2uEQ+ks60tcAXXLswIkI duMziUWz5rb0O8pCWecTasiwDcJfPtfkeHVutrBLbWilahHmD2kMbezh6rTaUhZS Z+Ye0FwqSkveAzQDg7OhW/3HYFlkKFvlMJpbr+D+vrXKLN3xa4lM9/MhQGul58w1 X90ehUd7MxBcH/Y5qCYCR32csOyfmU1XiltG70ZZnw8wUDfjGhYWRJsnO0wg+wsc CoWmDI41z21dTWWo -----END CERTIFICATE-----Generated at Sat Mar 7 02:26:20 2026 by rpki-client