$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FDF70DE88D7F11F1965C34BC3611F970.roa File: FDF70DE88D7F11F1965C34BC3611F970.roa (raw, json) Hash identifier: UQ3XemhZKBkIKaIFZ73gquA0y9S2tmLfXfSQqcAPQKo= Subject key identifier: 14:E3:8E:C3:7A:B1:BC:20:FE:FD:8F:61:06:22:98:5D:16:20:B6:3E Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 123A Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FDF70DE88D7F11F1965C34BC3611F970.roa Signing time: Sat 01 Aug 2026 08:07:09 +0000 ROA not before: Sat 01 Aug 2026 08:07:09 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 152921 IP address blocks: 2406:840:fe94::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4666 (0x123a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Aug 1 08:07:09 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a6da92d-9c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:ef:0b:93:a2:9a:65:ae:6b:39:98:bd:54: e3:60:cb:06:91:ec:46:31:f8:bf:07:8a:0e:95:ac: c1:77:5b:fe:99:f9:2a:bb:d9:bb:e3:fe:20:0c:af: 69:d6:fd:a9:2a:1a:4d:97:27:b2:5b:77:3d:21:86: 1d:59:6e:58:5d:83:0f:72:5e:fd:c5:9b:00:cb:c1: 40:6c:7b:ec:a1:2f:28:24:f4:88:9e:52:f3:98:53: b1:32:43:46:75:a9:ab:3f:fc:5f:f3:79:78:d8:6e: f4:f1:70:f5:19:4e:32:a2:5e:3a:e4:98:69:aa:58: 14:c9:f4:24:ad:1a:30:e1:d3:5f:1b:99:33:c5:9a: 9d:9f:d8:5b:75:47:ab:8b:36:d6:ae:41:bd:2b:1a: 69:fa:c9:84:56:a7:0e:69:14:93:f8:bb:cd:2b:d6: 3e:01:d5:c7:0b:18:71:bb:77:64:37:e7:da:bb:e7: 4f:1c:73:8c:a7:46:bf:60:81:eb:9b:08:4c:6b:25: 8d:8f:92:75:a1:48:d7:f1:ca:67:4b:06:05:e7:ba: 5a:6f:2e:35:cb:bf:78:4c:75:84:bf:06:97:52:79: db:b4:f9:75:db:05:f0:b2:79:3b:c4:d8:ca:c8:50: a6:b9:3c:62:6a:bd:f3:74:d0:ab:3f:97:43:08:04: 26:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E3:8E:C3:7A:B1:BC:20:FE:FD:8F:61:06:22:98:5D:16:20:B6:3E X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FDF70DE88D7F11F1965C34BC3611F970.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:fe94::/48 Signature Algorithm: sha256WithRSAEncryption 0d:af:f7:79:8c:3a:06:db:03:00:84:28:47:ec:56:ce:01:28: 65:80:ed:dd:e6:f2:52:fa:e9:b2:db:f1:c7:a5:ec:f7:2b:b6: 9e:c0:c2:59:f1:d2:29:15:1f:fa:d0:11:61:08:88:6f:62:ce: f6:4f:02:52:52:16:81:f9:fd:09:b1:2c:b7:e8:ab:cb:56:2c: 3d:1e:5c:8d:4c:24:e7:ee:b6:2a:f7:36:4f:8f:06:03:6b:54: d9:13:06:2a:d1:df:ad:14:4d:bc:27:13:95:b3:d7:c1:e6:53: d8:fe:08:03:70:88:d4:b8:34:d9:ec:53:69:d2:94:60:47:31: 4c:27:85:eb:43:0c:fb:4f:f5:a7:91:3f:b8:14:9b:d2:e1:05: 67:59:be:4d:59:cc:f7:37:84:75:92:f7:88:9d:76:f7:8f:7f: 9e:a8:f6:9c:82:71:c0:d9:6f:ae:6e:65:09:ad:1a:46:9b:21: d5:0e:e1:f7:a9:9e:59:5b:80:70:2a:9b:cc:c5:c5:00:04:d7: 89:54:dd:58:36:4c:7b:13:b3:36:36:59:09:77:c4:22:e6:bd: 2e:30:fd:4c:f8:aa:c9:64:1f:82:77:68:a1:f2:be:20:12:33: 01:75:26:9c:a7:e7:82:5c:fa:57:00:c7:3d:03:89:20:ae:10: c5:6c:a6:00 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICEjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwODAxMDgwNzA5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZkYTkyZC05YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7XvC5OimmWuazmYvVTjYMsGkexGMfi/B4oOlazBd1v+mfkqu9m74/4gDK9p 1v2pKhpNlyeyW3c9IYYdWW5YXYMPcl79xZsAy8FAbHvsoS8oJPSInlLzmFOxMkNG damrP/xf83l42G708XD1GU4yol465JhpqlgUyfQkrRow4dNfG5kzxZqdn9hbdUer izbWrkG9Kxpp+smEVqcOaRST+LvNK9Y+AdXHCxhxu3dkN+fau+dPHHOMp0a/YIHr mwhMayWNj5J1oUjX8cpnSwYF57paby41y794THWEvwaXUnnbtPl12wXwsnk7xNjK yFCmuTxiar3zdNCrP5dDCAQmkwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBTjjsN6 sbwg/v2PYQYimF0WILY+MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRkRGNzBERTg4 RDdGMTFGMTk2NUMzNEJDMzYxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAYIQP6UMA0GCSqGSIb3DQEBCwUAA4IBAQANr/d5jDoG2wMAhChH 7FbOAShlgO3d5vJS+umy2/HHpez3K7aewMJZ8dIpFR/60BFhCIhvYs72TwJSUhaB +f0JsSy36KvLViw9HlyNTCTn7rYq9zZPjwYDa1TZEwYq0d+tFE28JxOVs9fB5lPY /ggDcIjUuDTZ7FNp0pRgRzFMJ4XrQwz7T/WnkT+4FJvS4QVnWb5NWcz3N4R1kveI nXb3j3+eqPacgnHA2W+ubmUJrRpGmyHVDuH3qZ5ZW4BwKpvMxcUABNeJVN1YNkx7 E7M2NlkJd8Qi5r0uMP1M+KrJZB+Cd2ih8r4gEjMBdSacp+eCXPpXAMc9A4kgrhDF bKYA -----END CERTIFICATE-----Generated at Fri Sep 4 23:44:13 2026 by rpki-client