$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/EEBCC3028A7711EFBB6F4557C4F9AE02.roa File: EEBCC3028A7711EFBB6F4557C4F9AE02.roa (raw, json) Hash identifier: Mt9JQPr0fyMOWgU19pBU1zYQ6EzrGHPI//kBxIcYCSY= Subject key identifier: 02:D6:01:66:C4:69:E9:11:AB:29:40:7A:D6:B2:95:BB:65:1A:C3:C3 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 07B6 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/EEBCC3028A7711EFBB6F4557C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:55:24 +0000 ROA not before: Fri 20 Jun 2025 22:11:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133226 IP address blocks: 2400:8180:31::/48 maxlen: 48 2400:8180:32::/48 maxlen: 48 2400:8180:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 20 22:11:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a47d8c-46ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:1a:39:76:29:c4:42:7b:ae:d3:ee:b8:4c: 08:d7:4b:65:1f:f9:07:6f:00:83:21:de:a8:7f:66: e2:38:92:b9:5b:aa:d7:ea:81:29:02:c0:0e:40:97: b3:1b:3b:e7:46:ec:3e:93:6a:88:7b:c3:db:44:bb: 88:9b:43:6e:2d:18:15:bb:6f:f6:8d:04:2a:9d:bd: fe:82:c1:92:ff:e3:bc:2a:64:cc:3b:9c:0a:3a:bb: 44:3b:25:6e:7b:c3:7c:2d:32:86:6d:9e:11:fc:31: e4:92:08:e9:0d:d4:dd:cf:12:4c:01:66:70:58:e4: f9:1d:86:73:6d:49:b3:74:7e:b6:6e:12:3a:42:19: 06:47:3d:e0:29:d1:29:d3:d1:8d:c4:b3:a6:0b:f2: 5b:75:c2:15:23:06:a2:23:22:5b:85:26:be:2e:a2: 98:4d:ef:b5:d4:86:7d:e9:3f:5b:5b:0c:e9:db:b0: 0b:a9:de:7e:3d:53:3f:d1:e4:a6:17:85:38:f5:99: 9f:4a:e4:55:92:32:02:17:bb:4c:23:51:f0:70:61: d7:8a:97:29:d6:b5:41:e3:1a:92:a6:79:84:e7:db: b4:24:b6:a3:f6:4c:6b:77:36:66:43:df:e4:96:07: 3a:e0:4a:87:ba:f3:bb:21:da:51:84:e3:81:2f:14: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D6:01:66:C4:69:E9:11:AB:29:40:7A:D6:B2:95:BB:65:1A:C3:C3 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/EEBCC3028A7711EFBB6F4557C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:8180:31::-2400:8180:33:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7f:b3:a5:40:90:1b:f7:7d:6b:46:37:26:4c:17:0d:7d:4c:81: 2a:a9:f4:51:f4:e8:b2:2b:b4:dc:b6:bb:bf:72:9e:4f:58:3d: aa:21:6b:3e:e1:67:0f:c0:d0:39:68:43:3e:02:79:ea:e3:6e: 60:5d:f7:8f:4c:e0:12:1c:6f:00:6e:fa:65:1a:a7:db:75:a6: 55:c8:b7:f6:37:06:5d:93:30:2e:68:87:1e:7a:bb:37:74:e0: 2e:a9:8e:e7:03:c9:2d:0b:5b:6b:e4:69:6e:fe:29:83:a6:29: 78:4f:19:9d:9c:9d:29:b5:35:97:2e:6c:0e:80:de:df:63:f6: bc:ea:09:c6:91:67:eb:92:1e:39:72:17:f9:fb:43:ff:fa:4f: a6:02:2e:43:00:70:7d:84:cf:a5:00:bb:80:99:17:0b:4a:51: fc:e0:cf:bb:4d:a7:e3:7c:3f:ed:ae:03:81:58:29:1d:0f:ab: 26:2a:a4:b6:5c:06:9f:83:3e:f1:81:7f:62:4a:53:54:2e:df: 44:58:7a:00:68:e1:60:1a:d3:25:76:26:d0:a0:ba:42:68:2c: cb:35:f0:f5:ec:25:e8:59:67:3b:fb:fb:57:e6:72:98:9f:c4: b8:b7:a1:69:61:11:8e:27:58:ac:bb:ee:6a:7e:86:ca:b8:1b: b4:01:d1:5e -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNjIwMjIxMTIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q4Yy00NmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLwaOXYpxEJ7rtPuuEwI10tlH/kHbwCDId6of2biOJK5W6rX6oEpAsAOQJez GzvnRuw+k2qIe8PbRLuIm0NuLRgVu2/2jQQqnb3+gsGS/+O8KmTMO5wKOrtEOyVu e8N8LTKGbZ4R/DHkkgjpDdTdzxJMAWZwWOT5HYZzbUmzdH62bhI6QhkGRz3gKdEp 09GNxLOmC/JbdcIVIwaiIyJbhSa+LqKYTe+11IZ96T9bWwzp27ALqd5+PVM/0eSm F4U49ZmfSuRVkjICF7tMI1HwcGHXipcp1rVB4xqSpnmE59u0JLaj9kxrdzZmQ9/k lgc64EqHuvO7IdpRhOOBLxTFPQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFALWAWbE aekRqylAetaylbtlGsPDMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvRUVCQ0MzMDI4 QTc3MTFFRkJCNkY0NTU3QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwAkAIGAADEDBwIkAIGAADAwDQYJKoZIhvcNAQELBQADggEBAH+z pUCQG/d9a0Y3JkwXDX1MgSqp9FH06LIrtNy2u79ynk9YPaohaz7hZw/A0DloQz4C eerjbmBd949M4BIcbwBu+mUap9t1plXIt/Y3Bl2TMC5ohx56uzd04C6pjucDyS0L W2vkaW7+KYOmKXhPGZ2cnSm1NZcubA6A3t9j9rzqCcaRZ+uSHjlyF/n7Q//6T6YC LkMAcH2Ez6UAu4CZFwtKUfzgz7tNp+N8P+2uA4FYKR0PqyYqpLZcBp+DPvGBf2JK U1Qu30RYegBo4WAa0yV2JtCgukJoLMs18PXsJehZZzv7+1fmcpifxLi3oWlhEY4n WKy77mp+hsq4G7QB0V4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:36 2026 by rpki-client