$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4F96E22C45511EFBC458A49C4F9AE02.roa File: C4F96E22C45511EFBC458A49C4F9AE02.roa (raw, json) Hash identifier: 3MXKcFD8vHrDXAalHdddxjIEEBGRBjBlk5ipnTUFXSI= Subject key identifier: 95:57:66:C0:FA:7D:4E:47:EC:6C:48:3B:F5:36:71:4E:55:7D:47:3C Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 112F Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4F96E22C45511EFBC458A49C4F9AE02.roa Signing time: Fri 22 May 2026 20:24:35 +0000 ROA not before: Fri 22 May 2026 20:24:35 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 138401 IP address blocks: 2406:840:f860::/44 maxlen: 48 2406:840:fea1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 19:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4399 (0x112f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:24:35 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a10bb83-9a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:a5:21:58:e1:52:5e:72:0d:aa:f9:15:2f: 2e:f4:3f:73:63:d6:a4:55:70:d1:1b:80:07:f1:a4: 70:5a:4d:e5:76:f6:68:9e:9c:f5:fa:e3:9d:a3:4b: c5:97:62:c8:59:1c:c7:68:b0:22:76:79:fd:36:e8: 43:cf:15:cf:90:81:5e:cf:4d:92:06:2b:f2:65:e3: 0c:6d:9d:57:36:c1:0f:c0:70:a4:a9:9c:f7:98:14: 98:68:df:da:97:40:a4:5d:a2:ef:88:56:d9:83:2c: 99:46:a1:4f:a8:0c:8c:a0:ca:e6:82:3a:c7:98:a8: 60:25:5d:b1:e1:26:d3:86:53:4e:17:c0:54:17:80: 1f:d2:a4:c9:10:9f:d1:f4:d8:c1:7d:28:dd:27:31: a9:67:2b:69:1f:7d:0a:9a:42:93:77:5f:0b:ef:af: 0a:2f:f5:86:76:48:b9:ec:02:6b:e9:fc:04:37:1d: 03:78:05:21:5e:87:c3:5b:5d:9c:28:2c:83:eb:ab: 25:11:0e:f3:c9:ce:6c:e6:76:13:09:32:cc:d0:57: fb:83:e6:60:bf:06:7e:a6:b0:ee:fe:f6:cf:e0:7a: 5f:13:ae:c1:07:c0:51:b3:3f:6e:20:6a:62:96:71: 0a:7e:b2:01:53:23:05:55:0f:f3:5d:1c:a4:86:92: 4a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:57:66:C0:FA:7D:4E:47:EC:6C:48:3B:F5:36:71:4E:55:7D:47:3C X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4F96E22C45511EFBC458A49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:f860::/44 2406:840:fea1::/48 Signature Algorithm: sha256WithRSAEncryption a2:46:7b:0e:36:fd:99:79:70:6f:73:22:19:1d:c4:b0:ac:6e: 0d:2b:ab:8a:c1:6b:ff:48:50:2e:58:5f:57:09:62:83:9c:8e: 76:d3:3c:2f:26:28:3b:57:11:b4:1d:73:69:a9:16:07:80:86: 31:a6:08:3c:39:ba:58:ad:1d:45:de:59:1d:9d:ec:69:4e:00: 46:a3:bb:4f:74:0f:83:ba:b1:7c:c9:75:90:43:d9:82:d9:03: dd:49:7d:5b:13:5a:f2:17:b7:f9:44:49:20:e0:08:11:c1:fd: 5b:b7:0e:c5:06:8e:20:83:d9:03:c2:bb:2a:43:55:d5:07:eb: eb:e1:49:f4:08:9a:13:a0:bf:05:c6:ee:a7:32:27:28:09:36: 30:ae:51:01:47:9f:1e:e1:58:6b:73:fc:83:c6:da:a8:b3:a7: 6e:c3:7a:69:45:31:91:bd:cc:67:7e:ee:bc:a9:81:a9:ee:e1: 30:60:9f:f1:6d:c1:e5:e0:92:e8:d3:6d:8c:fd:40:9d:a6:ed: 30:3c:a6:bd:78:73:e8:0f:41:bb:c4:a7:ff:3a:06:cf:a9:5e: ea:af:e8:7a:3f:87:31:7c:e7:44:e7:ad:47:29:3e:2b:c3:62: ec:b7:e7:d5:d5:33:30:c6:97:53:02:4c:34:fd:84:64:f5:96: 26:15:af:c0 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICES8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNTIyMjAyNDM1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEwYmI4My05YTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SulIVjhUl5yDar5FS8u9D9zY9akVXDRG4AH8aRwWk3ldvZonpz1+uOdo0vF l2LIWRzHaLAidnn9NuhDzxXPkIFez02SBivyZeMMbZ1XNsEPwHCkqZz3mBSYaN/a l0CkXaLviFbZgyyZRqFPqAyMoMrmgjrHmKhgJV2x4SbThlNOF8BUF4Af0qTJEJ/R 9NjBfSjdJzGpZytpH30KmkKTd18L768KL/WGdki57AJr6fwENx0DeAUhXofDW12c KCyD66slEQ7zyc5s5nYTCTLM0Ff7g+ZgvwZ+prDu/vbP4HpfE67BB8BRsz9uIGpi lnEKfrIBUyMFVQ/zXRykhpJKVwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJVXZsD6 fU5H7GxIO/U2cU5VfUc8MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQzRGOTZFMjJD NDU1MTFFRkJDNDU4QTQ5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcEJAYIQPhgAwcAJAYIQP6hMA0GCSqGSIb3DQEBCwUAA4IBAQCiRnsO Nv2ZeXBvcyIZHcSwrG4NK6uKwWv/SFAuWF9XCWKDnI520zwvJig7VxG0HXNpqRYH gIYxpgg8ObpYrR1F3lkdnexpTgBGo7tPdA+DurF8yXWQQ9mC2QPdSX1bE1ryF7f5 REkg4AgRwf1btw7FBo4gg9kDwrsqQ1XVB+vr4Un0CJoToL8Fxu6nMicoCTYwrlEB R58e4Vhrc/yDxtqos6duw3ppRTGRvcxnfu68qYGp7uEwYJ/xbcHl4JLo022M/UCd pu0wPKa9eHPoD0G7xKf/OgbPqV7qr+h6P4cxfOdE561HKT4rw2Lst+fV1TMwxpdT Akw0/YRk9ZYmFa/A -----END CERTIFICATE-----Generated at Sat Jun 6 09:39:43 2026 by rpki-client