$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2FDC8EDAD99911ED92E86C7BC4F9AE02.roa File: 2FDC8EDAD99911ED92E86C7BC4F9AE02.roa (raw, json) Hash identifier: bWVaCMWS3C75/S3EVrvsn4jNurGhC3t1Cn4RNYQkKO8= Subject key identifier: 06:2C:4B:AA:B5:D5:C6:CF:44:88:0E:AF:7E:E0:99:4F:28:EA:95:E1 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 104C Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2FDC8EDAD99911ED92E86C7BC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:29:59 +0000 ROA not before: Thu 22 May 2025 20:07:13 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151187 IP address blocks: 2406:840:9800::/43 maxlen: 48 2406:840:fed3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:13 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a493b6-3a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:7c:d2:d1:6a:5b:94:7f:69:d4:aa:71:85: 95:f1:71:c7:97:37:be:7c:a7:b7:ba:46:7c:01:5f: 42:41:43:4c:81:6e:45:af:9b:c4:71:ab:3f:83:c8: af:73:36:ed:f9:05:eb:f9:78:5d:a1:e7:a0:d2:20: 99:83:cc:10:49:0e:e0:48:d8:b6:8d:4e:09:8b:43: a0:d8:2b:ca:4e:33:eb:27:ab:34:7e:1a:be:06:0b: 2b:b9:4a:59:61:46:ee:40:bd:a3:4d:7e:da:82:75: 8d:32:09:6f:4b:f2:67:f2:52:be:58:85:e3:d8:67: 20:df:a7:b7:67:2e:00:82:67:7a:b5:cd:27:49:23: bf:bc:59:16:f7:8c:2c:5e:a7:1a:f4:6f:9c:9d:be: be:72:22:e4:9c:4c:59:0f:97:ae:23:ad:23:7d:ec: 15:7c:a0:79:bb:fc:24:41:02:64:65:10:1a:01:ad: a8:9d:36:32:44:08:29:7d:51:d4:3b:fb:d1:f3:e9: 96:2b:3a:6c:40:9d:ff:76:f1:ea:f7:cb:27:d7:ef: 7e:39:53:fa:56:3d:3d:bb:a1:63:28:e6:49:c7:fb: 83:23:f2:4e:9c:1a:3f:0d:cf:74:81:d2:bc:28:c6: a9:09:c1:45:db:19:00:71:78:24:a4:ef:dd:85:f0: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2C:4B:AA:B5:D5:C6:CF:44:88:0E:AF:7E:E0:99:4F:28:EA:95:E1 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2FDC8EDAD99911ED92E86C7BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:9800::/43 2406:840:fed3::/48 Signature Algorithm: sha256WithRSAEncryption 52:91:55:c1:9f:7e:20:ce:4e:3d:02:8a:97:7c:51:9c:4e:6c: 17:8d:e6:18:2a:a3:c4:81:e0:c0:31:44:10:d8:d4:84:3c:b3: c2:82:9e:0e:45:f0:f4:20:ba:a4:05:56:36:ae:ab:b1:53:7b: d0:92:5a:c8:ec:4c:8d:a4:c4:7b:04:50:83:a2:84:d3:0f:ba: f0:45:79:e7:03:9e:4d:da:74:a8:df:62:ec:7f:e6:d3:81:3a: 6c:a2:3b:ac:6f:16:c0:17:06:22:0a:61:d0:a3:b9:80:d7:fc: 3b:7d:ed:a6:36:ed:32:ea:4e:99:2d:e9:29:2f:97:1d:ff:59: 7a:9f:0d:58:df:5d:24:ba:4f:9a:1b:a5:56:9b:ea:63:d2:02: 64:f3:ef:82:e9:b0:d3:63:41:b5:6a:f1:89:25:d5:c5:0e:26: 8a:39:76:53:ef:05:c8:26:ff:39:48:8d:da:fa:b4:29:86:ec: 05:c1:13:bc:5c:ef:fc:d7:90:3d:71:e4:e2:7b:5d:7d:12:47: 9e:69:0b:84:0b:d4:ea:d0:68:55:4b:df:57:a3:2f:14:36:74: 0e:d3:26:a6:97:89:03:d2:db:fe:1a:64:4b:b9:7e:f8:23:96: c9:58:07:83:24:81:a4:43:f2:50:ed:4f:5b:9e:73:47:4c:ad: 0b:1e:62:ed -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzEzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTNiNi0zYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGV80tFqW5R/adSqcYWV8XHHlze+fKe3ukZ8AV9CQUNMgW5Fr5vEcas/g8iv czbt+QXr+Xhdoeeg0iCZg8wQSQ7gSNi2jU4Ji0Og2CvKTjPrJ6s0fhq+BgsruUpZ YUbuQL2jTX7agnWNMglvS/Jn8lK+WIXj2Gcg36e3Zy4Agmd6tc0nSSO/vFkW94ws Xqca9G+cnb6+ciLknExZD5euI60jfewVfKB5u/wkQQJkZRAaAa2onTYyRAgpfVHU O/vR8+mWKzpsQJ3/dvHq98sn1+9+OVP6Vj09u6FjKOZJx/uDI/JOnBo/Dc90gdK8 KMapCcFF2xkAcXgkpO/dhfD/pwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAYsS6q1 1cbPRIgOr37gmU8o6pXhMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMkZEQzhFREFE OTk5MTFFRDkyRTg2QzdCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcFJAYIQJgAAwcAJAYIQP7TMA0GCSqGSIb3DQEBCwUAA4IBAQBSkVXB n34gzk49AoqXfFGcTmwXjeYYKqPEgeDAMUQQ2NSEPLPCgp4ORfD0ILqkBVY2rqux U3vQklrI7EyNpMR7BFCDooTTD7rwRXnnA55N2nSo32Lsf+bTgTpsojusbxbAFwYi CmHQo7mA1/w7fe2mNu0y6k6ZLekpL5cd/1l6nw1Y310kuk+aG6VWm+pj0gJk8++C 6bDTY0G1avGJJdXFDiaKOXZT7wXIJv85SI3a+rQphuwFwRO8XO/815A9ceTie119 EkeeaQuEC9Tq0GhVS99Xoy8UNnQO0yaml4kD0tv+GmRLuX74I5bJWAeDJIGkQ/JQ 7U9bnnNHTK0LHmLt -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:35 2026 by rpki-client