$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/41B221EC862211EA87D9337EC4F9AE02.roa File: 41B221EC862211EA87D9337EC4F9AE02.roa (raw, json) Hash identifier: 7J/VUtI/N3I3EwAcUNO+rmXV9is9ZLWqoWnaTZ7sFMc= Subject key identifier: 35:41:38:E3:78:C4:35:3F:FD:87:17:C8:35:A8:FA:5D:17:29:7C:1B Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1097 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/41B221EC862211EA87D9337EC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:31:09 +0000 ROA not before: Thu 22 May 2025 20:08:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 4842 IP address blocks: 2406:840:f990::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4247 (0x1097) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 22 20:08:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a493fc-14bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:03:30:c7:8a:02:29:73:65:94:fe:b8:36: d5:ea:ef:45:de:3a:fd:11:4b:c9:8a:07:11:2e:90: 35:bf:02:ed:63:89:d7:5d:42:02:61:9e:5b:99:b5: 51:f1:b2:87:19:01:97:10:d8:8b:f2:61:d0:cd:4a: 3f:cd:c6:0e:35:29:0f:db:98:77:a6:61:9d:41:d9: 29:61:49:0b:9c:23:43:df:13:c0:07:d1:c7:3d:e1: 50:ba:d0:28:46:35:5a:55:38:a5:74:b3:42:fa:3f: 8f:68:bb:d4:d1:43:ad:d9:c9:44:be:f9:37:9c:fc: a1:43:c5:46:e8:0b:1c:54:f8:2a:36:9c:76:c1:b3: 1b:6f:3b:14:a0:bd:59:e5:96:99:e3:d5:3b:c4:67: 52:e4:cd:f4:e9:ec:74:f5:65:2e:f6:a8:60:72:cc: 6e:3d:c8:1d:66:0b:03:52:ef:c7:a0:26:65:b1:1f: 4c:93:cc:cd:7d:bc:b0:d5:69:6a:b1:9f:cf:22:9a: 25:bc:64:b3:60:2d:b6:30:ed:d8:77:43:d8:66:80: 3b:56:51:62:b4:e1:ca:fa:d8:d0:52:c0:85:7d:14: 96:82:95:a4:f0:00:b2:6f:8c:8d:db:0f:bb:45:f4: 0c:82:fd:df:9e:e8:13:09:bb:dc:42:2a:93:5d:4a: 44:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:38:E3:78:C4:35:3F:FD:87:17:C8:35:A8:FA:5D:17:29:7C:1B X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/41B221EC862211EA87D9337EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:f990::/44 Signature Algorithm: sha256WithRSAEncryption 2d:d3:a0:8d:8a:e8:20:30:ba:cc:bb:70:76:30:27:f0:0f:f9: 18:c5:55:d2:2e:09:44:32:a4:9a:27:37:a0:61:f7:e6:a4:00: 14:b7:f7:49:fc:90:9d:e4:f3:15:9b:3f:b3:20:e0:23:f4:dc: 6f:63:c7:ec:9b:4f:b4:eb:80:3e:b2:04:bd:01:b0:2f:46:2e: 21:38:8e:5f:ab:03:a7:31:8d:c6:1c:2a:07:ad:ba:8b:7c:79: 99:f0:7f:d0:36:26:c5:25:31:30:4c:d5:92:71:fa:e6:94:c5: 15:5f:5c:a2:43:7d:14:a7:c9:80:ce:2a:d7:f1:75:00:61:90: 62:61:89:7e:62:6b:68:0d:fc:d7:60:1d:c6:7a:d4:44:b7:38: f4:7e:2e:e1:00:4c:ae:44:91:bb:66:45:71:24:e4:dd:31:5b: cf:ae:98:5f:ed:2e:28:39:22:c7:35:c4:4c:4d:31:97:f3:60: fb:9f:75:c2:f9:e6:c6:65:f9:11:85:7a:61:ed:9b:bb:74:a6: 87:f9:2f:c5:1c:35:f4:c5:c4:60:15:9c:58:0a:18:0b:6b:4b: f4:63:f7:f6:f2:e6:ca:a1:44:c6:70:11:9a:bb:34:fc:74:b5: 6a:87:b3:5b:36:5b:06:8f:4e:1d:d8:d6:bb:4e:33:49:9c:7c: ca:c6:b0:88 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUwNTIyMjAwODI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTNmYy0xNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZcDMMeKAilzZZT+uDbV6u9F3jr9EUvJigcRLpA1vwLtY4nXXUICYZ5bmbVR 8bKHGQGXENiL8mHQzUo/zcYONSkP25h3pmGdQdkpYUkLnCND3xPAB9HHPeFQutAo RjVaVTildLNC+j+PaLvU0UOt2clEvvk3nPyhQ8VG6AscVPgqNpx2wbMbbzsUoL1Z 5ZaZ49U7xGdS5M306ex09WUu9qhgcsxuPcgdZgsDUu/HoCZlsR9Mk8zNfbyw1Wlq sZ/PIpolvGSzYC22MO3Yd0PYZoA7VlFitOHK+tjQUsCFfRSWgpWk8ACyb4yN2w+7 RfQMgv3fnugTCbvcQiqTXUpEPwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDVBOON4 xDU//YcXyDWo+l0XKXwbMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNDFCMjIxRUM4 NjIyMTFFQTg3RDkzMzdFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcEJAYIQPmQMA0GCSqGSIb3DQEBCwUAA4IBAQAt06CNiuggMLrMu3B2 MCfwD/kYxVXSLglEMqSaJzegYffmpAAUt/dJ/JCd5PMVmz+zIOAj9NxvY8fsm0+0 64A+sgS9AbAvRi4hOI5fqwOnMY3GHCoHrbqLfHmZ8H/QNibFJTEwTNWScfrmlMUV X1yiQ30Up8mAzirX8XUAYZBiYYl+YmtoDfzXYB3GetREtzj0fi7hAEyuRJG7ZkVx JOTdMVvPrphf7S4oOSLHNcRMTTGX82D7n3XC+ebGZfkRhXph7Zu7dKaH+S/FHDX0 xcRgFZxYChgLa0v0Y/f28ubKoUTGcBGauzT8dLVqh7NbNlsGj04d2Na7TjNJnHzK xrCI -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:37 2026 by rpki-client