$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa File: C4C7CC8E200611EB9EA5567DC4F9AE02.roa (raw, json) Hash identifier: 8W8rmXVN2ttKOK8cDjOwbQ3QpspwsKhYfZ75wAhoTGQ= Subject key identifier: C9:0B:D4:D2:6D:C3:08:89:1B:E5:56:07:B2:1B:A9:30:8E:3C:3D:E7 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1020 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:29:21 +0000 ROA not before: Thu 22 May 2025 20:06:28 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132623 IP address blocks: 2406:840:fcc0::/44 maxlen: 48 2406:840:fef7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 17:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4128 (0x1020) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:28 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a49391-678b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:9f:78:c3:46:52:ef:83:9e:35:29:e7:85: 1e:67:69:d2:7b:31:23:e4:06:91:c2:a7:1d:63:f2: ef:b9:df:d8:aa:6f:84:81:9f:4d:f6:4e:cf:63:5e: 31:8f:d4:c0:3b:2a:96:4f:6e:fa:8f:6d:f7:fd:b0: 31:bd:3c:a9:f0:36:d3:19:50:b5:f2:67:d0:26:ce: 48:5b:51:f0:5a:52:11:a3:9f:29:b3:6a:37:d8:52: c1:77:e5:d4:b3:fe:eb:35:10:fe:c3:40:43:00:8c: ce:cf:f7:85:5a:f8:51:38:0f:9e:e7:1f:11:2d:8e: 0b:b3:89:75:44:80:de:90:d7:84:b5:f9:45:c3:7f: ae:9e:be:0b:e8:08:b9:bd:36:34:ae:68:7e:04:3d: f1:a7:6d:80:f6:28:9e:e4:cb:f8:b7:86:b3:36:8f: 57:2a:58:e1:a5:60:be:a9:53:16:89:ce:1e:46:a0: b1:e3:ae:55:c6:02:5c:5c:b8:18:d6:41:10:30:8c: 12:47:74:c7:bb:eb:04:06:dc:b1:4d:65:3c:8f:1a: 08:70:39:8e:b8:f9:c8:db:c9:c4:5e:e5:ae:4c:1d: 78:45:1e:9c:36:55:0e:8e:49:9f:cb:b9:d8:9f:23: 26:6a:4f:d5:07:e5:73:00:a0:c3:01:97:a1:ca:1e: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0B:D4:D2:6D:C3:08:89:1B:E5:56:07:B2:1B:A9:30:8E:3C:3D:E7 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:fcc0::/44 2406:840:fef7::/48 Signature Algorithm: sha256WithRSAEncryption 9c:25:4c:ec:4f:a5:03:ba:f0:13:86:1e:1c:f9:f9:a1:e4:a5: 59:40:b8:f3:fa:31:dd:5d:e5:eb:09:ab:38:06:c8:b8:86:98: 04:07:d1:08:2e:13:68:c4:61:08:18:bc:71:c9:0b:63:ea:9d: 9e:c0:72:ee:9c:35:68:2a:4e:2d:59:e5:eb:52:bb:1c:e6:cc: a5:df:89:f9:82:77:d6:cc:e3:ad:4c:e3:59:a4:84:84:42:35: 1c:77:a7:76:fe:07:5d:4f:3b:25:2b:e2:25:2c:43:6e:c7:ba: 42:03:b6:10:68:d4:ce:db:59:56:f2:b7:98:b5:b7:c9:c3:08: 53:75:61:a0:18:76:e4:00:ba:b5:f0:f3:3f:9e:b6:a8:17:36: 0b:c4:06:77:6d:7b:62:48:2f:da:97:74:61:a5:7a:40:c4:78: fd:29:c7:cc:3a:4e:f6:68:e2:52:b2:92:65:cf:f2:81:b8:04: 21:1a:03:02:61:b3:b4:a6:84:1f:35:9c:de:f9:99:67:ed:2f: cf:66:33:d4:27:38:50:49:4b:a6:27:b1:5e:94:7d:98:c8:80: b5:e7:b0:dc:ea:64:71:e5:39:7c:38:f0:6d:9b:e6:aa:c5:42: 3a:92:c5:2e:f2:64:86:f1:4b:10:33:fc:a9:f5:08:d4:55:64: 40:4b:1f:00 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICECAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM5MS02NzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhl+feMNGUu+DnjUp54UeZ2nSezEj5AaRwqcdY/Lvud/Yqm+EgZ9N9k7PY14x j9TAOyqWT276j233/bAxvTyp8DbTGVC18mfQJs5IW1HwWlIRo58ps2o32FLBd+XU s/7rNRD+w0BDAIzOz/eFWvhROA+e5x8RLY4Ls4l1RIDekNeEtflFw3+unr4L6Ai5 vTY0rmh+BD3xp22A9iie5Mv4t4azNo9XKljhpWC+qVMWic4eRqCx465VxgJcXLgY 1kEQMIwSR3THu+sEBtyxTWU8jxoIcDmOuPnI28nEXuWuTB14RR6cNlUOjkmfy7nY nyMmak/VB+VzAKDDAZehyh7fqwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMkL1NJt wwiJG+VWB7IbqTCOPD3nMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQzRDN0NDOEUy MDA2MTFFQjlFQTU1NjdEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcEJAYIQPzAAwcAJAYIQP73MA0GCSqGSIb3DQEBCwUAA4IBAQCcJUzs T6UDuvAThh4c+fmh5KVZQLjz+jHdXeXrCas4Bsi4hpgEB9EILhNoxGEIGLxxyQtj 6p2ewHLunDVoKk4tWeXrUrsc5syl34n5gnfWzOOtTONZpISEQjUcd6d2/gddTzsl K+IlLENux7pCA7YQaNTO21lW8reYtbfJwwhTdWGgGHbkALq18PM/nraoFzYLxAZ3 bXtiSC/al3RhpXpAxHj9KcfMOk72aOJSspJlz/KBuAQhGgMCYbO0poQfNZze+Zln 7S/PZjPUJzhQSUumJ7FelH2YyIC157Dc6mRx5Tl8OPBtm+aqxUI6ksUu8mSG8UsQ M/yp9QjUVWRASx8A -----END CERTIFICATE-----Generated at Sat Mar 7 02:25:08 2026 by rpki-client