$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC42AB8EDF5011F0B41BBDC26F6F56BC.roa File: AC42AB8EDF5011F0B41BBDC26F6F56BC.roa (raw, json) Hash identifier: X44ZFnWcDudAt1bApTt64bFaV5RDaKIWDkb68UkzI7s= Subject key identifier: 03:29:28:CC:87:BD:19:D2:BC:59:53:F1:50:4E:7D:73:49:C0:E0:6F Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 110E Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC42AB8EDF5011F0B41BBDC26F6F56BC.roa Signing time: Mon 11 May 2026 17:07:52 +0000 ROA not before: Mon 11 May 2026 17:07:51 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 213903 IP address blocks: 2406:840:fdea::/48 maxlen: 48 2406:840:fdeb::/48 maxlen: 48 2406:840:fdec::/48 maxlen: 48 2406:840:fded::/48 maxlen: 48 2406:840:fdee::/48 maxlen: 48 2406:840:fdef::/48 maxlen: 48 2406:840:fdf0::/48 maxlen: 48 2406:840:fdf1::/48 maxlen: 48 2406:840:fdf2::/48 maxlen: 48 2406:840:fdf3::/48 maxlen: 48 2406:840:fdf4::/48 maxlen: 48 2406:840:fdf5::/48 maxlen: 48 2406:840:fdf6::/48 maxlen: 48 2406:840:fdf7::/48 maxlen: 48 2406:840:fdf8::/48 maxlen: 48 2406:840:fdf9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4366 (0x110e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 11 17:07:51 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6a020ce7-2232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:a4:02:8e:31:2d:a0:c4:1c:7c:a7:02:9b: a0:b2:6e:3e:59:a0:19:9b:56:78:70:82:df:82:0c: a1:da:d0:d2:9f:c9:89:73:eb:4a:36:70:4f:c3:ae: cd:cf:30:44:f7:ab:ba:18:18:a8:68:83:0d:49:67: cf:d5:5c:f6:98:f3:66:6a:20:9c:c4:5b:af:78:dc: 05:13:87:fa:f7:37:34:60:5d:42:80:62:12:3f:3a: 32:c3:6a:59:0b:56:40:72:98:c0:ca:00:af:f4:8f: 37:4d:bd:74:6f:6b:5e:0b:2e:53:fb:39:8a:b4:03: 6f:9b:44:ba:8e:af:95:1a:ea:c5:79:e3:c9:fd:ca: ac:27:0d:56:e5:e1:a3:93:96:a4:b8:1a:e2:39:f0: f9:2b:64:41:78:95:5e:a0:3a:5b:c0:50:e2:11:98: 82:3a:2e:d2:c7:3b:c1:62:d4:74:13:90:8d:7d:e1: dc:e9:d4:88:af:2a:0a:a6:9c:55:ee:5f:65:7d:df: 82:8e:e8:52:bf:91:d9:6a:a0:58:bf:16:4d:ee:b6: c8:68:7a:1e:e5:5b:36:f8:57:60:87:c0:14:5b:34: 12:5b:82:32:d0:6c:b4:45:8d:42:9e:fb:b5:4e:ac: ae:32:39:db:d4:30:5e:e0:84:0f:4c:9c:fd:12:d3: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:29:28:CC:87:BD:19:D2:BC:59:53:F1:50:4E:7D:73:49:C0:E0:6F X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC42AB8EDF5011F0B41BBDC26F6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:fdea::-2406:840:fdf9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 14:5b:43:84:c4:a3:15:84:01:63:9b:1f:90:6c:45:9b:0e:c0: 17:f6:c6:6e:58:dd:ee:7f:30:79:bf:b9:2d:f0:8f:6b:5b:9e: 1a:b0:cd:a0:56:1b:b2:bb:d1:e6:4e:14:02:45:88:68:06:7c: f0:8f:49:4a:b1:1f:ea:93:31:88:1c:3e:b2:7f:df:80:85:d9: 1c:24:0c:1f:ac:6b:52:34:ef:87:6a:72:35:43:ae:a6:d7:ea: da:cc:5a:7a:d3:ef:6d:f6:1c:87:d3:93:3b:4d:75:d5:4a:2a: b0:05:64:14:6f:09:26:29:46:04:97:42:c3:fa:32:34:6a:09: 59:e7:11:55:c0:01:ae:ae:9d:1c:cf:75:09:92:3b:d1:63:59: 5e:98:ee:13:d1:cb:98:53:1d:d2:8c:90:c7:97:0d:31:4e:81: 51:23:d9:cd:b7:3d:9a:b4:c4:d6:b9:8c:0b:4e:79:d3:c1:d0: ea:b4:d3:db:b9:84:e6:e0:be:39:e7:da:fa:97:0d:ac:a7:3f: f0:16:72:f4:a2:e2:62:4d:a8:a6:72:fa:cd:ba:f1:f2:c9:aa: da:5c:4c:39:22:9f:53:2d:1e:5a:6a:12:6e:f2:17:97:30:e8: d2:39:8a:78:0b:15:34:ee:21:51:52:b4:08:8a:c8:f6:25:50: 3b:18:ad:0a -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICEQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNTExMTcwNzUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAyMGNlNy0yMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4CkAo4xLaDEHHynApugsm4+WaAZm1Z4cILfggyh2tDSn8mJc+tKNnBPw67N zzBE96u6GBioaIMNSWfP1Vz2mPNmaiCcxFuveNwFE4f69zc0YF1CgGISPzoyw2pZ C1ZAcpjAygCv9I83Tb10b2teCy5T+zmKtANvm0S6jq+VGurFeePJ/cqsJw1W5eGj k5akuBriOfD5K2RBeJVeoDpbwFDiEZiCOi7SxzvBYtR0E5CNfeHc6dSIryoKppxV 7l9lfd+CjuhSv5HZaqBYvxZN7rbIaHoe5Vs2+Fdgh8AUWzQSW4Iy0Gy0RY1Cnvu1 TqyuMjnb1DBe4IQPTJz9EtMJ+wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFAMpKMyH vRnSvFlT8VBOfXNJwOBvMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQUM0MkFCOEVE RjUwMTFGMEI0MUJCREMyNkY2RjU2QkMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwEkBghA/eoDBwEkBghA/fgwDQYJKoZIhvcNAQELBQADggEBABRb Q4TEoxWEAWObH5BsRZsOwBf2xm5Y3e5/MHm/uS3wj2tbnhqwzaBWG7K70eZOFAJF iGgGfPCPSUqxH+qTMYgcPrJ/34CF2RwkDB+sa1I074dqcjVDrqbX6trMWnrT7232 HIfTkztNddVKKrAFZBRvCSYpRgSXQsP6MjRqCVnnEVXAAa6unRzPdQmSO9FjWV6Y 7hPRy5hTHdKMkMeXDTFOgVEj2c23PZq0xNa5jAtOedPB0Oq009u5hObgvjnn2vqX DaynP/AWcvSi4mJNqKZy+s268fLJqtpcTDkin1MtHlpqEm7yF5cw6NI5ingLFTTu IVFStAiKyPYlUDsYrQo= -----END CERTIFICATE-----Generated at Wed May 13 07:27:55 2026 by rpki-client