$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4F96E22C45511EFBC458A49C4F9AE02.roa File: C4F96E22C45511EFBC458A49C4F9AE02.roa (raw, json) Hash identifier: PhRBD9cQuskuT/sPOjucuBeI6mkYs8u8xnS/lKLeRDc= Subject key identifier: 33:7C:9E:DA:62:A4:05:D2:6C:C7:81:08:18:17:6F:35:A5:B8:E6:64 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 102D Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4F96E22C45511EFBC458A49C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:29:32 +0000 ROA not before: Thu 22 May 2025 20:06:39 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138401 IP address blocks: 2406:840:f860::/44 maxlen: 48 2406:840:fea1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 17:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4141 (0x102d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:06:39 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4939c-411f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:f2:c9:70:56:b6:02:df:60:fa:77:7f:d3: 0f:fe:c2:8d:6c:08:e3:0f:88:f9:4d:a3:02:00:e2: 80:46:c0:76:5c:90:9d:75:61:bd:5a:a0:0a:ba:2a: 71:6a:b6:a0:70:98:7e:69:13:4f:4a:42:70:87:81: 1b:d8:cc:73:4e:89:06:70:f0:5f:dc:a2:b6:81:fc: bd:7b:3e:fb:4e:b0:42:94:eb:66:8b:de:bd:79:af: bc:90:5b:ce:4e:8c:28:52:91:62:3c:cc:a4:99:fe: 7e:1c:1e:df:d3:60:9f:1c:15:00:1d:7a:8d:ef:53: 71:1c:1e:25:fa:b8:46:76:72:5d:0a:a6:19:c9:db: 65:1a:4c:2d:b3:f8:06:9a:71:d2:c1:4d:53:79:90: a5:2b:61:5e:b3:7e:1c:6a:b2:0f:4c:f6:8f:e0:36: 34:c0:46:b4:dd:c8:97:e7:86:00:1e:6f:06:b9:39: 4d:65:9a:39:b7:1f:ff:78:b3:4f:c0:67:74:d7:7c: a4:c0:a4:08:07:70:c6:2c:eb:f4:3e:7a:fa:c5:d9: 10:7e:82:e4:df:c5:d9:00:d8:15:84:53:1f:3a:0b: eb:51:8d:88:65:c0:ad:17:ac:e8:64:bc:2b:af:3c: 2e:b1:fe:cb:d7:e8:ca:fe:61:8f:3e:65:95:49:d6: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7C:9E:DA:62:A4:05:D2:6C:C7:81:08:18:17:6F:35:A5:B8:E6:64 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4F96E22C45511EFBC458A49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:f860::/44 2406:840:fea1::/48 Signature Algorithm: sha256WithRSAEncryption 72:ca:bc:ec:3b:a0:8f:f6:23:12:d0:26:a5:b8:b1:5e:26:a1: ab:f7:76:22:7c:98:d9:18:5b:ed:90:86:3a:87:7e:f2:c2:5f: 57:6d:de:b5:fd:67:8c:57:dc:70:ac:6d:83:3e:2e:08:e6:4c: e8:df:ed:9e:71:3b:ea:22:47:e4:3d:ae:cf:cd:9b:76:1f:03: 25:48:4b:2c:3d:85:38:cf:c7:51:cc:07:65:82:b2:40:92:87: ee:27:02:ad:c8:c5:ca:93:56:55:8a:de:f7:aa:fb:c6:79:31: a7:3f:59:c9:70:84:51:3b:35:3b:46:e3:59:1a:b8:e5:98:44: 68:6d:11:72:6e:a8:81:35:f2:4c:02:c1:86:26:a3:9c:61:c7: 15:12:b0:a8:e6:79:76:4a:95:ba:03:84:bd:2b:3e:ae:50:6a: e2:70:75:fd:36:69:e6:28:28:f7:a3:93:5b:4b:d1:8a:2e:02: 44:9c:e5:5c:c0:b7:19:72:8c:82:a6:19:f3:b0:25:b7:8b:2e: 6c:f5:40:c7:13:3e:bf:a0:59:ff:e6:c8:2b:5c:d0:71:87:31: a4:3b:95:3d:7a:3d:8c:2f:57:3c:05:67:54:09:a8:6e:03:bf: 8e:54:5a:4f:b7:8a:d7:65:8f:32:ec:f5:ad:ad:bb:5d:9c:65: 87:8a:0c:f3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM5Yy00MTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+byyXBWtgLfYPp3f9MP/sKNbAjjD4j5TaMCAOKARsB2XJCddWG9WqAKuipx aragcJh+aRNPSkJwh4Eb2MxzTokGcPBf3KK2gfy9ez77TrBClOtmi969ea+8kFvO TowoUpFiPMykmf5+HB7f02CfHBUAHXqN71NxHB4l+rhGdnJdCqYZydtlGkwts/gG mnHSwU1TeZClK2Fes34carIPTPaP4DY0wEa03ciX54YAHm8GuTlNZZo5tx//eLNP wGd013ykwKQIB3DGLOv0Pnr6xdkQfoLk38XZANgVhFMfOgvrUY2IZcCtF6zoZLwr rzwusf7L1+jK/mGPPmWVSdYTKQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDN8ntpi pAXSbMeBCBgXbzWluOZkMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQzRGOTZFMjJD NDU1MTFFRkJDNDU4QTQ5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcEJAYIQPhgAwcAJAYIQP6hMA0GCSqGSIb3DQEBCwUAA4IBAQByyrzs O6CP9iMS0CaluLFeJqGr93YifJjZGFvtkIY6h37ywl9Xbd61/WeMV9xwrG2DPi4I 5kzo3+2ecTvqIkfkPa7PzZt2HwMlSEssPYU4z8dRzAdlgrJAkofuJwKtyMXKk1ZV it73qvvGeTGnP1nJcIRROzU7RuNZGrjlmERobRFybqiBNfJMAsGGJqOcYccVErCo 5nl2SpW6A4S9Kz6uUGricHX9NmnmKCj3o5NbS9GKLgJEnOVcwLcZcoyCphnzsCW3 iy5s9UDHEz6/oFn/5sgrXNBxhzGkO5U9ej2ML1c8BWdUCahuA7+OVFpPt4rXZY8y 7PWtrbtdnGWHigzz -----END CERTIFICATE-----Generated at Sat Mar 7 02:26:14 2026 by rpki-client