$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa File: B62D2E905C6F11EFAEA11916C4F9AE02.roa (raw, json) Hash identifier: zRTGoO5DmZa+aTW7KUsUEafNW/VAbxGfPe7/RJsgQhM= Subject key identifier: BB:46:58:BE:61:98:16:FF:6C:1C:34:7E:18:A6:19:46:B7:19:2C:6F Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 10C9 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa Signing time: Wed 18 Mar 2026 13:53:13 +0000 ROA not before: Wed 18 Mar 2026 13:53:12 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2406:840:9190::/44 maxlen: 48 2406:840:9888::/48 maxlen: 48 2406:840:b000::/40 maxlen: 48 2406:840:e060::/44 maxlen: 48 2406:840:e070::/44 maxlen: 48 2406:840:e280::/44 maxlen: 48 2406:840:fa60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4297 (0x10c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Mar 18 13:53:12 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69baae48-beb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:ea:6d:85:eb:53:8a:1a:7f:36:7d:b8:c7: db:8f:72:f6:c9:13:24:31:b3:e7:a7:f1:73:ec:40: 75:51:c7:f5:b3:99:87:68:a6:67:d6:f9:58:66:2e: 05:08:97:09:5f:38:63:29:ed:7d:ba:88:c8:5a:9c: 5e:20:65:25:fd:41:68:03:72:27:52:a5:0d:0f:bb: a0:9e:f3:fe:2f:ef:1a:bd:60:78:c6:20:5a:03:72: c6:5b:f6:1d:4b:09:b5:85:b0:18:84:ae:ae:86:1d: 59:b8:97:6b:68:4d:37:0d:05:b8:90:4c:3f:fe:74: ad:53:ac:b5:1e:b6:1b:60:db:a1:50:4f:ef:f0:9d: d5:39:d7:a1:5e:81:ef:b4:a3:5c:e2:44:5b:90:6f: 70:42:c5:af:0e:13:ef:2f:ee:51:05:21:ab:40:a1: a9:88:ff:0c:12:ff:9a:cc:e3:fb:2c:3e:24:3f:a6: 30:0d:31:87:c4:2a:ab:b4:42:e0:ab:93:28:a2:b3: 69:85:61:2e:e0:32:46:43:57:42:60:d3:e3:fc:2c: d4:cb:c2:0d:e1:6f:e6:a7:13:42:4b:55:ae:fd:33: 24:32:cc:3f:89:ee:20:2e:b5:b0:6b:51:82:6d:dd: a5:64:9f:18:4f:b8:42:79:a6:45:fa:af:b3:88:e4: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:46:58:BE:61:98:16:FF:6C:1C:34:7E:18:A6:19:46:B7:19:2C:6F X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:9190::/44 2406:840:9888::/48 2406:840:b000::/40 2406:840:e060::/43 2406:840:e280::/44 2406:840:fa60::/44 Signature Algorithm: sha256WithRSAEncryption 8e:bc:7c:c1:ae:11:cb:ad:c1:ef:b1:ab:fc:f5:26:a8:22:ed: 49:d4:30:32:64:23:28:6c:7c:e3:cf:78:f8:26:0d:6c:cf:21: 6c:40:01:e5:4d:9c:4c:c8:fa:0e:d7:10:83:02:1b:1a:f0:45: 20:58:f1:13:1e:29:02:e8:57:0d:f4:e5:8d:e8:4a:ca:d4:87: 15:57:e5:fb:33:a4:25:31:6b:32:da:27:27:fe:1b:42:8c:e2: c5:92:2e:81:46:55:bf:62:60:be:25:fd:87:e9:8f:36:d3:6f: e3:6f:1e:81:c3:d9:6b:cc:e9:2c:59:62:00:a9:90:b5:f1:53: 17:ce:28:58:c5:83:31:92:b4:08:35:73:8a:ed:0d:6d:6c:10: 7d:ab:4d:20:8d:f4:c9:39:b6:c4:f2:d6:ab:1b:5c:10:36:f4: 3e:e6:ba:17:be:5a:bb:80:26:3a:cc:64:60:f2:d0:76:35:d5: ba:c0:33:b9:dd:c8:af:eb:1f:7b:d4:e9:4b:06:fa:d4:f0:56: 3b:9a:13:3b:b2:a4:db:69:8c:80:0c:65:b8:9c:1d:36:bf:7a: 5e:5d:42:e2:38:42:fc:de:45:c0:fb:30:1a:aa:23:3e:93:62: 78:6c:8e:dd:fb:70:5e:0f:6d:f4:6b:8b:19:90:b7:8b:54:f2: 38:1c:b1:94 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICEMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwMzE4MTM1MzEyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJhYWU0OC1iZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNXqbYXrU4oafzZ9uMfbj3L2yRMkMbPnp/Fz7EB1Ucf1s5mHaKZn1vlYZi4F CJcJXzhjKe19uojIWpxeIGUl/UFoA3InUqUND7ugnvP+L+8avWB4xiBaA3LGW/Yd Swm1hbAYhK6uhh1ZuJdraE03DQW4kEw//nStU6y1HrYbYNuhUE/v8J3VOdehXoHv tKNc4kRbkG9wQsWvDhPvL+5RBSGrQKGpiP8MEv+azOP7LD4kP6YwDTGHxCqrtELg q5MoorNphWEu4DJGQ1dCYNPj/CzUy8IN4W/mpxNCS1Wu/TMkMsw/ie4gLrWwa1GC bd2lZJ8YT7hCeaZF+q+ziOSX+QIDAQABo4ICjzCCAoswHQYDVR0OBBYEFLtGWL5h mBb/bBw0fhimGUa3GSxvMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQjYyRDJFOTA1 QzZGMTFFRkFFQTExOTE2QzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTA7 BAIAAjA1AwcEJAYIQJGQAwcAJAYIQJiIAwYAJAYIQLADBwUkBghA4GADBwQkBghA 4oADBwQkBghA+mAwDQYJKoZIhvcNAQELBQADggEBAI68fMGuEcutwe+xq/z1Jqgi 7UnUMDJkIyhsfOPPePgmDWzPIWxAAeVNnEzI+g7XEIMCGxrwRSBY8RMeKQLoVw30 5Y3oSsrUhxVX5fszpCUxazLaJyf+G0KM4sWSLoFGVb9iYL4l/YfpjzbTb+NvHoHD 2WvM6SxZYgCpkLXxUxfOKFjFgzGStAg1c4rtDW1sEH2rTSCN9Mk5tsTy1qsbXBA2 9D7muhe+WruAJjrMZGDy0HY11brAM7ndyK/rH3vU6UsG+tTwVjuaEzuypNtpjIAM ZbicHTa/el5dQuI4QvzeRcD7MBqqIz6TYnhsjt37cF4PbfRrixmQt4tU8jgcsZQ= -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:18 2026 by rpki-client