$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa File: C4C7CC8E200611EB9EA5567DC4F9AE02.roa (raw, json) Hash identifier: pAaRGjBgomj6hvTHXR/+9YQ9sQ0gou9SLToLKkuwR6o= Subject key identifier: B7:F8:20:9F:F8:EA:E5:BA:52:54:58:50:66:A5:69:68:F6:72:8C:28 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1122 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa Signing time: Fri 22 May 2026 20:24:12 +0000 ROA not before: Fri 22 May 2026 20:24:12 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132623 IP address blocks: 2406:840:fcc0::/44 maxlen: 48 2406:840:fef7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 19:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4386 (0x1122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:24:12 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a10bb6b-a7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:50:05:e1:b2:20:aa:86:b2:19:f4:1c:7f: 95:cb:45:4b:11:6d:43:75:de:90:84:4f:ea:1d:28: 36:ab:cf:1a:8c:df:0d:2a:e7:3a:38:28:54:e3:d5: 5d:f0:bb:c0:00:52:91:0a:12:f4:0a:01:5f:fe:a2: 47:3b:0b:6f:5e:65:fd:b2:31:d6:77:8c:04:3d:6b: b6:f1:3c:14:cc:af:65:47:5b:34:e3:fe:c4:d2:c0: 1c:d9:16:6e:75:e3:1a:05:b6:c0:0f:d3:6b:c5:31: 7d:20:f2:f9:d5:11:ba:37:fd:ec:bb:91:a8:43:bb: 17:a6:4f:10:37:3b:79:eb:db:9b:da:0b:1d:8b:2a: 12:99:d0:50:b7:fb:84:23:2e:06:53:ed:eb:f0:a5: 3c:02:07:fd:36:62:0d:32:0f:b4:8e:da:61:98:fa: a4:36:a6:bf:25:04:03:c2:cf:9c:a3:00:b8:0b:bc: 1f:0c:a1:f0:ac:78:ce:cc:6a:6d:fc:01:cf:9b:ca: 4b:5d:bb:7b:7f:b7:d7:98:4e:fb:7e:d0:a1:af:d0: 56:f6:72:9b:bc:0e:3a:d0:ea:b7:bb:e2:f2:11:b6: 04:41:aa:29:9b:f2:5e:f9:e2:b0:3b:4d:b5:06:38: 2d:81:2d:78:d1:43:e5:c5:d4:f5:1d:27:30:a1:d0: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F8:20:9F:F8:EA:E5:BA:52:54:58:50:66:A5:69:68:F6:72:8C:28 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:fcc0::/44 2406:840:fef7::/48 Signature Algorithm: sha256WithRSAEncryption 78:89:50:c8:05:be:44:cd:b6:a5:00:a5:de:04:f9:57:d1:63: 9d:d9:77:8f:a5:3a:db:20:c0:40:e2:a6:82:7e:38:0b:21:53: 6f:f3:e1:eb:0f:51:d4:e9:3e:a8:7f:e3:4e:7c:79:61:09:1d: 52:da:ed:2f:02:55:2b:c3:ab:e4:1f:33:d7:88:ba:97:dd:4c: db:44:98:63:9a:84:4e:b5:79:2d:5a:b0:ea:1f:4b:70:3f:a6: 56:79:91:75:cd:14:f7:60:2f:52:dd:07:f6:a9:fd:4e:8d:05: 2d:e1:f7:c7:c5:6f:43:be:41:eb:e7:d6:83:23:99:51:92:3a: f8:d3:e9:c3:c3:a9:97:e8:bb:68:15:33:bf:2f:cd:d8:23:3c: 7d:b9:67:94:89:5a:76:22:1c:95:11:c1:ae:e5:1b:8b:b7:b8: 1a:e1:27:bf:49:4a:46:2b:b8:be:d5:1b:94:e5:0f:3d:ef:eb: c7:d6:ba:6a:0b:0d:39:f8:f3:24:2e:f9:87:79:44:57:f6:a3: 1c:67:7c:47:cd:23:13:da:7b:8b:a3:0a:a5:f0:3d:d4:30:53: 0d:5e:77:70:1e:81:81:83:8e:46:d8:d5:fd:26:bc:03:02:60: 7f:0a:32:fc:8e:d1:08:2f:29:59:24:82:b3:89:36:b5:6f:ec: 45:2d:0e:c5 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICESIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNTIyMjAyNDEyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEwYmI2Yi1hN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsNQBeGyIKqGshn0HH+Vy0VLEW1Ddd6QhE/qHSg2q88ajN8NKuc6OChU49Vd 8LvAAFKRChL0CgFf/qJHOwtvXmX9sjHWd4wEPWu28TwUzK9lR1s04/7E0sAc2RZu deMaBbbAD9NrxTF9IPL51RG6N/3su5GoQ7sXpk8QNzt569ub2gsdiyoSmdBQt/uE Iy4GU+3r8KU8Agf9NmINMg+0jtphmPqkNqa/JQQDws+cowC4C7wfDKHwrHjOzGpt /AHPm8pLXbt7f7fXmE77ftChr9BW9nKbvA460Oq3u+LyEbYEQaopm/Je+eKwO021 BjgtgS140UPlxdT1HScwodDj0QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLf4IJ/4 6uW6UlRYUGalaWj2cowoMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQzRDN0NDOEUy MDA2MTFFQjlFQTU1NjdEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcEJAYIQPzAAwcAJAYIQP73MA0GCSqGSIb3DQEBCwUAA4IBAQB4iVDI Bb5EzbalAKXeBPlX0WOd2XePpTrbIMBA4qaCfjgLIVNv8+HrD1HU6T6of+NOfHlh CR1S2u0vAlUrw6vkHzPXiLqX3UzbRJhjmoROtXktWrDqH0twP6ZWeZF1zRT3YC9S 3Qf2qf1OjQUt4ffHxW9DvkHr59aDI5lRkjr40+nDw6mX6LtoFTO/L83YIzx9uWeU iVp2IhyVEcGu5RuLt7ga4Se/SUpGK7i+1RuU5Q897+vH1rpqCw05+PMkLvmHeURX 9qMcZ3xHzSMT2nuLowql8D3UMFMNXndwHoGBg45G2NX9JrwDAmB/CjL8jtEILylZ JIKziTa1b+xFLQ7F -----END CERTIFICATE-----Generated at Sat Jun 6 08:18:37 2026 by rpki-client