$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BD694B0C8E2511EF80780A1AC4F9AE02.roa File: BD694B0C8E2511EF80780A1AC4F9AE02.roa (raw, json) Hash identifier: OHtLC0Ei8RTya8ag5QRo3hNbz4xNYZuD9DC10Z7esgQ= Subject key identifier: CD:E3:00:2A:54:AE:FF:41:3E:B8:77:91:A9:66:67:F1:FA:B4:02:56 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 1101 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BD694B0C8E2511EF80780A1AC4F9AE02.roa Signing time: Mon 04 May 2026 18:57:19 +0000 ROA not before: Mon 04 May 2026 18:57:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 2406:840:9990::/44 maxlen: 48 2406:840:eab0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4353 (0x1101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 4 18:57:19 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69f8ec0f-89f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:30:f4:1b:bd:bd:c4:96:6d:82:79:c9:a7: 6d:9c:98:4e:77:54:8f:6d:af:0d:35:08:b9:4c:44: 4a:4b:fe:20:77:7a:7b:6a:6c:57:d3:7f:14:c9:36: 69:94:fe:2c:78:72:26:af:14:2b:cb:54:a3:fd:7d: cc:60:b1:79:f3:84:a2:bf:db:d3:a3:a3:6a:16:85: 8e:e0:df:cb:a7:b8:87:88:ae:69:20:37:13:02:46: f6:5a:81:3b:6d:6f:d5:a2:e0:5e:82:f9:18:b7:ec: e1:c8:b8:7e:12:1b:f5:ba:56:f5:91:7f:4d:12:17: 01:c0:cf:8c:06:b3:25:2c:e5:97:58:93:1e:ac:c6: 14:13:cc:cb:1a:61:70:7c:9f:45:ad:bb:a2:4a:d5: 2e:3d:a4:2c:f2:35:f1:f9:62:c6:58:13:19:51:ab: 38:8e:3a:8f:2c:cb:f5:5c:58:91:20:0e:eb:42:0f: e0:4e:c0:f4:fa:c8:16:11:68:9b:d9:f7:69:35:71: fc:a7:c7:6c:7f:87:30:a9:52:1f:72:eb:9b:89:4e: 2d:20:05:97:c2:4f:a2:d1:7b:de:b6:dc:8e:37:f7: 0e:87:ff:7a:f2:b3:48:d1:75:b2:fa:62:bd:3b:b1: 31:ad:1c:c8:1d:a9:3d:c5:4b:8b:c6:c0:e5:c6:06: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:00:2A:54:AE:FF:41:3E:B8:77:91:A9:66:67:F1:FA:B4:02:56 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/BD694B0C8E2511EF80780A1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:9990::/44 2406:840:eab0::/44 Signature Algorithm: sha256WithRSAEncryption 0b:b2:cb:60:8c:1d:5f:af:55:e6:69:c3:48:8f:80:2f:0e:2f: ed:fc:3a:79:96:a9:ae:49:88:83:d9:4c:42:1e:55:76:89:f5: 4e:75:f9:d7:c6:a0:92:75:f6:7f:fc:de:12:3f:1d:ad:7b:9e: 8a:74:1b:bd:cd:67:f3:d1:f5:cc:a7:7d:a6:0e:45:df:2c:72: 83:d4:c8:3b:28:97:5b:92:69:6a:fd:9a:9e:96:2e:e5:30:d7: 84:ea:1e:9a:86:f9:71:21:31:0b:47:7b:52:ea:ed:7f:bf:ec: ab:cf:1d:90:5b:ae:43:25:2a:2f:4d:52:eb:da:21:6e:3f:a7: 29:a6:a9:ce:ec:98:d3:33:11:40:43:46:7f:36:94:2c:48:3d: 10:21:07:b5:e3:02:bc:6b:e4:85:d8:30:a0:8e:09:4f:47:df: 77:00:82:f4:17:7d:e3:52:78:49:a3:39:2f:af:c7:98:59:67: 2f:57:5e:6b:68:dd:df:e5:a4:cf:ee:cc:09:45:5e:08:ed:6b: da:35:61:35:55:1f:a8:f4:a7:0e:00:5e:03:c5:79:19:4c:ca: 7b:78:77:74:b2:b5:89:88:77:bd:4d:46:d5:50:e4:74:bf:57: 5f:59:04:63:1e:1d:04:b5:a2:6b:ae:25:85:29:c3:06:c8:42: 79:6f:23:5c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNTA0MTg1NzE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY4ZWMwZi04OWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB8w9Bu9vcSWbYJ5yadtnJhOd1SPba8NNQi5TERKS/4gd3p7amxX038UyTZp lP4seHImrxQry1Sj/X3MYLF584Siv9vTo6NqFoWO4N/Lp7iHiK5pIDcTAkb2WoE7 bW/VouBegvkYt+zhyLh+Ehv1ulb1kX9NEhcBwM+MBrMlLOWXWJMerMYUE8zLGmFw fJ9FrbuiStUuPaQs8jXx+WLGWBMZUas4jjqPLMv1XFiRIA7rQg/gTsD0+sgWEWib 2fdpNXH8p8dsf4cwqVIfcuubiU4tIAWXwk+i0XvettyON/cOh/968rNI0XWy+mK9 O7ExrRzIHak9xUuLxsDlxgZfkQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFM3jACpU rv9BPrh3kalmZ/H6tAJWMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQkQ2OTRCMEM4 RTI1MTFFRjgwNzgwQTFBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcEJAYIQJmQAwcEJAYIQOqwMA0GCSqGSIb3DQEBCwUAA4IBAQALsstg jB1fr1XmacNIj4AvDi/t/Dp5lqmuSYiD2UxCHlV2ifVOdfnXxqCSdfZ//N4SPx2t e56KdBu9zWfz0fXMp32mDkXfLHKD1Mg7KJdbkmlq/Zqeli7lMNeE6h6ahvlxITEL R3tS6u1/v+yrzx2QW65DJSovTVLr2iFuP6cppqnO7JjTMxFAQ0Z/NpQsSD0QIQe1 4wK8a+SF2DCgjglPR993AIL0F33jUnhJozkvr8eYWWcvV15raN3f5aTP7swJRV4I 7WvaNWE1VR+o9KcOAF4DxXkZTMp7eHd0srWJiHe9TUbVUOR0v1dfWQRjHh0EtaJr riWFKcMGyEJ5byNc -----END CERTIFICATE-----Generated at Wed May 13 09:28:45 2026 by rpki-client