$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3713C692E4C911EDB49CA55BC4F9AE02.roa File: 3713C692E4C911EDB49CA55BC4F9AE02.roa (raw, json) Hash identifier: s0OYWh8rC+lXdXIMs/gRsht1P3EfXoEsi3oEtV0Rx5E= Subject key identifier: 73:9B:9E:54:A3:08:2D:74:20:93:39:D6:F9:C0:03:11:11:3A:BA:8C Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 104F Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3713C692E4C911EDB49CA55BC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:30:01 +0000 ROA not before: Thu 22 May 2025 20:07:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151202 IP address blocks: 2406:840:f0a0::/44 maxlen: 48 2406:840:fe75::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4175 (0x104f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:07:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a493b9-cba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:c9:68:02:f3:eb:c0:e3:64:b4:eb:c3:57: 3b:7a:c7:e1:7a:76:c8:50:36:d4:6c:21:ba:74:ba: 38:a5:72:da:a0:1b:65:ef:82:aa:75:6f:40:9e:9e: ab:ba:56:2c:76:1d:98:fb:1e:9b:21:52:f2:23:c9: db:a4:3b:a5:ef:66:4c:ed:fd:06:74:a2:05:62:3c: 65:8f:61:68:88:ac:f3:3e:23:5d:f3:18:7a:a8:7b: ee:62:4c:03:c3:33:ca:0e:51:ec:81:df:ea:59:de: 4f:d9:90:d5:6e:14:ac:37:5d:89:84:d8:9e:c9:13: 2b:d5:7c:49:1d:5d:c1:c4:23:18:02:cd:10:e6:99: 64:ba:30:fb:cd:a2:75:00:9b:30:91:08:04:76:1f: 45:30:eb:d5:10:15:8d:37:b6:e9:0e:80:e5:ff:f0: 3c:fc:cf:3b:9d:cd:ca:71:93:c8:45:47:e2:00:db: 7c:65:da:ad:ab:f7:f9:bd:81:7a:75:0b:02:d8:15: 36:1f:c6:ef:71:21:d5:cd:29:bb:91:05:09:69:99: e0:ca:bb:d1:f3:69:91:83:92:0f:ab:7a:c2:00:67: 9b:df:d8:d1:c2:46:ac:5f:aa:07:32:6a:ec:ac:40: 55:06:ed:d7:8d:45:19:45:9b:6f:d1:f9:d9:15:93: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9B:9E:54:A3:08:2D:74:20:93:39:D6:F9:C0:03:11:11:3A:BA:8C X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3713C692E4C911EDB49CA55BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:f0a0::/44 2406:840:fe75::/48 Signature Algorithm: sha256WithRSAEncryption 17:2d:f1:55:9c:de:51:4c:e6:c7:2e:3f:5a:f4:b4:cc:13:a3: 73:a6:9f:50:c0:3c:d7:89:ff:6f:f8:f7:ce:40:40:eb:19:a3: e9:e7:de:ec:8e:99:ce:1a:c3:0a:30:a6:8b:49:ef:55:26:4c: 3d:72:6d:2e:4c:a2:1e:14:2e:7b:50:98:8b:b1:4c:ce:99:bd: 1d:dc:e8:ba:78:a5:a8:18:bd:98:30:92:80:77:90:ea:46:98: 6c:cf:2e:a7:2f:87:82:2c:ce:e8:a9:4f:2a:7e:1d:15:58:0e: a9:39:d7:2a:b9:44:74:d9:60:b7:ef:27:78:b2:25:73:20:09: 61:b3:b1:14:ac:fe:10:23:4b:34:b1:65:ad:c9:38:98:a6:48: 3d:95:93:ba:be:15:aa:55:0a:e3:f0:00:27:b4:90:62:50:18: 62:2c:e0:09:01:9f:12:33:ff:fd:ac:74:d8:c2:1e:27:12:5f: 07:a0:bb:a2:a5:64:c8:73:58:56:4c:83:bc:fa:c2:53:06:51: 7c:f7:70:01:a5:63:eb:c4:04:db:69:ca:cc:1a:a2:4b:74:1d: cb:b3:8f:3a:26:0a:f3:38:f3:68:01:2e:d2:ed:fb:17:62:53: 0d:e1:18:a3:33:4a:fd:a5:a0:93:df:2b:f7:76:2b:e5:5e:3b: 4a:40:e1:0b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTNiOS1jYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kbJaALz68DjZLTrw1c7esfhenbIUDbUbCG6dLo4pXLaoBtl74KqdW9Anp6r ulYsdh2Y+x6bIVLyI8nbpDul72ZM7f0GdKIFYjxlj2FoiKzzPiNd8xh6qHvuYkwD wzPKDlHsgd/qWd5P2ZDVbhSsN12JhNieyRMr1XxJHV3BxCMYAs0Q5plkujD7zaJ1 AJswkQgEdh9FMOvVEBWNN7bpDoDl//A8/M87nc3KcZPIRUfiANt8Zdqtq/f5vYF6 dQsC2BU2H8bvcSHVzSm7kQUJaZngyrvR82mRg5IPq3rCAGeb39jRwkasX6oHMmrs rEBVBu3XjUUZRZtv0fnZFZPU8wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHObnlSj CC10IJM51vnAAxEROrqMMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMzcxM0M2OTJF NEM5MTFFREI0OUNBNTVCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcEJAYIQPCgAwcAJAYIQP51MA0GCSqGSIb3DQEBCwUAA4IBAQAXLfFV nN5RTObHLj9a9LTME6Nzpp9QwDzXif9v+PfOQEDrGaPp597sjpnOGsMKMKaLSe9V Jkw9cm0uTKIeFC57UJiLsUzOmb0d3Oi6eKWoGL2YMJKAd5DqRphszy6nL4eCLM7o qU8qfh0VWA6pOdcquUR02WC37yd4siVzIAlhs7EUrP4QI0s0sWWtyTiYpkg9lZO6 vhWqVQrj8AAntJBiUBhiLOAJAZ8SM//9rHTYwh4nEl8HoLuipWTIc1hWTIO8+sJT BlF893ABpWPrxATbacrMGqJLdB3Ls486JgrzOPNoAS7S7fsXYlMN4RijM0r9paCT 3yv3divlXjtKQOEL -----END CERTIFICATE-----Generated at Thu Mar 26 04:44:50 2026 by rpki-client