$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa File: E2D92650FE1A11EEBD74AE3AC4F9AE02.roa (raw, json) Hash identifier: Sh5JG1kDbKxhefVkPIs/NmcSiGqFwwvxFMP2QiZqO2Y= Subject key identifier: 49:2E:A2:B2:68:80:D3:50:85:46:45:E5:C0:11:CB:E8:EB:1F:11:13 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1043 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:29:51 +0000 ROA not before: Thu 22 May 2025 20:07:00 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142586 IP address blocks: 2406:840:ed00::/40 maxlen: 48 2406:840:fde0::/48 maxlen: 48 2406:840:fece::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 17:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4163 (0x1043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:00 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a493af-ff8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:db:65:13:02:89:5e:b9:dd:ea:77:4a:34: a8:d2:2a:61:7c:c0:e5:46:86:85:a9:21:d8:0b:0f: 9d:fd:2d:99:d1:16:d1:45:96:f9:54:ec:d2:5e:7c: 4d:5d:d3:53:ac:43:b2:83:5e:96:f0:49:58:88:82: d8:a9:72:08:55:b7:00:c3:02:49:6c:cd:09:64:da: 3e:19:69:39:82:48:79:52:ed:f4:44:a8:21:dc:de: f2:7c:82:1e:50:15:90:b5:b4:f7:70:8d:d5:c3:07: ee:08:bd:4f:01:97:a1:1f:7c:4e:5d:d3:4a:b9:ea: b4:75:20:d9:eb:03:b9:22:20:17:93:9d:c4:79:4a: cd:46:b8:5d:18:66:1e:d0:f5:af:0b:09:14:dc:1e: e4:01:2f:7f:74:41:d4:fd:1f:9e:3b:87:8b:3d:5d: 82:5c:6c:91:5d:c8:2a:a6:3f:4e:6f:b6:40:36:c2: 79:a0:79:a3:0b:50:6e:e2:f9:7a:d5:16:7a:06:1b: e5:f8:cb:96:da:c1:24:74:43:4b:a9:88:8d:b9:92: e7:c8:6b:22:5f:25:ea:83:e3:ed:4f:42:90:70:d4: 65:b2:2f:30:7a:6a:39:c8:60:dc:d7:91:63:7c:28: 89:49:ac:d7:a7:1e:99:4e:5e:97:40:a8:dc:a5:7f: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2E:A2:B2:68:80:D3:50:85:46:45:E5:C0:11:CB:E8:EB:1F:11:13 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:ed00::/40 2406:840:fde0::/48 2406:840:fece::/48 Signature Algorithm: sha256WithRSAEncryption 40:cb:d6:44:f2:0f:07:ad:92:19:72:f9:15:c3:9d:d7:3b:43: 7a:7e:20:ce:b6:67:05:98:a4:a9:24:ef:56:6b:75:96:fd:04: 24:b9:72:bd:4e:52:5a:71:a1:b6:fd:8f:45:a2:7a:03:c5:0a: 05:09:de:35:7a:38:b8:51:e5:c9:61:83:28:74:3d:b1:50:8f: d7:ba:7d:f6:05:c3:e7:0c:fb:57:4e:03:ac:50:2d:1c:a9:5e: 9f:e4:ab:be:63:9c:2a:6e:f8:26:5d:40:bb:8d:2b:54:ba:4c: 9a:12:c0:ca:d3:aa:2a:fd:18:c7:b2:54:a1:f0:85:7e:68:03: ee:e3:8d:db:b9:61:6a:ca:c8:30:51:81:9f:25:27:88:94:d0: 85:3a:3f:d0:20:81:af:6c:bf:97:86:a1:fa:8d:1e:80:7f:d8: b5:36:20:2c:34:11:03:0b:cc:19:c2:f9:d4:fe:78:c0:19:ab: dd:00:4c:26:f9:b0:4a:ee:ca:fb:c5:57:f5:3e:b3:75:d7:9c: b6:a4:92:47:b4:f1:24:0c:d5:53:d2:e7:29:f4:c3:03:5a:8d: 32:33:0f:d4:ed:e4:38:3e:7f:b7:24:4c:9a:7a:db:e0:d3:fc: 82:3f:4e:b8:0c:65:5a:50:68:56:23:3b:17:2a:96:f5:8b:bb: 84:0d:81:af -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICEEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTNhZi1mZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryTbZRMCiV653ep3SjSo0iphfMDlRoaFqSHYCw+d/S2Z0RbRRZb5VOzSXnxN XdNTrEOyg16W8ElYiILYqXIIVbcAwwJJbM0JZNo+GWk5gkh5Uu30RKgh3N7yfIIe UBWQtbT3cI3VwwfuCL1PAZehH3xOXdNKueq0dSDZ6wO5IiAXk53EeUrNRrhdGGYe 0PWvCwkU3B7kAS9/dEHU/R+eO4eLPV2CXGyRXcgqpj9Ob7ZANsJ5oHmjC1Bu4vl6 1RZ6Bhvl+MuW2sEkdENLqYiNuZLnyGsiXyXqg+PtT0KQcNRlsi8wemo5yGDc15Fj fCiJSazXpx6ZTl6XQKjcpX8IiwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFEkuorJo gNNQhUZF5cARy+jrHxETMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRTJEOTI2NTBG RTFBMTFFRUJENzRBRTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAAjAaAwYAJAYIQO0DBwAkBghA/eADBwAkBghA/s4wDQYJKoZIhvcNAQELBQAD ggEBAEDL1kTyDwetkhly+RXDndc7Q3p+IM62ZwWYpKkk71ZrdZb9BCS5cr1OUlpx obb9j0WiegPFCgUJ3jV6OLhR5clhgyh0PbFQj9e6ffYFw+cM+1dOA6xQLRypXp/k q75jnCpu+CZdQLuNK1S6TJoSwMrTqir9GMeyVKHwhX5oA+7jjdu5YWrKyDBRgZ8l J4iU0IU6P9Agga9sv5eGofqNHoB/2LU2ICw0EQMLzBnC+dT+eMAZq90ATCb5sEru yvvFV/U+s3XXnLakkke08SQM1VPS5yn0wwNajTIzD9Tt5Dg+f7ckTJp62+DT/II/ TrgMZVpQaFYjOxcqlvWLu4QNga8= -----END CERTIFICATE-----Generated at Sat Mar 7 02:26:56 2026 by rpki-client