$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa File: 197526BC16C811EFAA6A4727C4F9AE02.roa (raw, json) Hash identifier: linT4MSx1MPy66fNe1Q8g19stjyQa3w3wu/5xIfTTuM= Subject key identifier: FB:B3:4B:49:42:F3:CF:4B:65:A8:D5:27:CD:CE:93:9F:1C:B3:D5:88 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0FAD Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa Signing time: Mon 27 Oct 2025 14:29:27 +0000 ROA not before: Mon 27 Oct 2025 14:29:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 2406:840:e0e0::/44 maxlen: 48 2406:840:e666::/47 maxlen: 48 2406:840:fcf0::/44 maxlen: 48 2406:840:fd9f::/48 maxlen: 48 2406:840:fdd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4013 (0xfad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Oct 27 14:29:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68ff81c7-ab6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8b:cb:0c:03:90:72:40:ce:4f:a1:6c:97:07: 92:2b:ef:d3:21:e6:6a:90:17:5c:df:9c:a6:2c:97: c9:ec:1e:54:27:13:a7:08:21:fd:48:fe:09:07:48: 8c:c5:da:1e:4c:26:32:a1:bd:aa:85:35:d1:04:47: 8f:fc:80:bb:19:49:87:79:ee:d7:19:b7:42:de:da: 8a:ff:1b:ac:b7:ca:7a:7c:f4:6e:2e:0d:79:08:4c: 61:93:05:2d:de:b7:bf:67:49:29:02:ac:f4:d7:9e: 88:39:a2:55:8c:01:f2:4d:82:1b:05:71:c8:24:7e: 57:15:c6:b9:e2:66:60:14:68:95:3c:07:e0:2f:2e: d6:a3:41:f2:36:9a:5c:51:17:17:d2:f6:32:50:b2: a9:f6:af:14:84:f5:fd:6c:ba:8f:ee:e6:00:16:c8: 37:f8:da:69:53:a0:a1:69:9e:4c:cd:27:90:e5:d8: e2:b1:8d:21:0a:f3:82:b4:02:68:24:cb:df:54:a3: bf:0b:b0:1e:04:b2:76:7d:26:c0:6b:10:0f:4d:61: 81:a2:e0:97:87:36:56:e6:02:55:34:c0:40:13:b1: 52:5b:b8:2f:16:1a:7f:97:c3:25:fc:2f:28:99:43: 34:c9:5f:0c:a4:cd:bd:60:f0:8b:18:4b:48:9c:fc: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B3:4B:49:42:F3:CF:4B:65:A8:D5:27:CD:CE:93:9F:1C:B3:D5:88 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e0e0::/44 2406:840:e666::/47 2406:840:fcf0::/44 2406:840:fd9f::/48 2406:840:fdd0::/44 Signature Algorithm: sha256WithRSAEncryption 0a:51:4b:9f:b5:38:6e:a1:bc:67:b7:11:68:8f:12:02:6f:82: b0:75:04:55:17:7e:08:ff:84:00:28:85:4a:72:67:e2:f7:af: dc:67:e3:ed:a9:89:75:2e:ed:40:6d:fc:7e:c2:2a:f6:fa:56: ce:d6:87:7e:cb:bd:24:52:42:b5:6d:40:fc:72:14:62:25:41: c3:e2:73:2c:33:26:fe:7c:6b:9e:d5:a1:d3:98:16:b8:8c:fe: 5c:5c:27:48:55:ae:36:6c:9f:d9:99:0a:73:2e:1c:8a:07:4b: 36:41:4a:8c:78:fc:b9:59:b0:41:a8:b9:48:0b:a1:1e:ab:ee: 72:d8:a0:9d:a9:62:be:37:29:d1:dc:b2:7e:cc:c1:09:eb:17: ce:bc:7c:45:cc:e3:84:dd:3b:b9:2d:cf:5f:f4:b2:02:27:1c: dc:8e:8f:c7:4f:69:b3:b9:bb:e4:ec:e4:c4:46:ec:a8:1a:46: 6b:88:d2:0d:df:44:70:e2:b3:8c:9d:c6:33:73:ac:ce:6d:c8: 9c:9d:88:67:4d:9f:83:3e:79:21:ed:f3:cd:74:f8:7d:76:1b: 36:d4:de:1d:9f:fc:63:7a:ce:0c:32:83:6e:7d:d3:82:c7:c8: 8f:9d:24:81:3d:de:a6:a9:71:13:28:77:ea:30:19:df:58:ad: 5a:3c:42:67 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICD60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUxMDI3MTQyOTI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZmODFjNy1hYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YvLDAOQckDOT6FslweSK+/TIeZqkBdc35ymLJfJ7B5UJxOnCCH9SP4JB0iM xdoeTCYyob2qhTXRBEeP/IC7GUmHee7XGbdC3tqK/xust8p6fPRuLg15CExhkwUt 3re/Z0kpAqz0156IOaJVjAHyTYIbBXHIJH5XFca54mZgFGiVPAfgLy7Wo0HyNppc URcX0vYyULKp9q8UhPX9bLqP7uYAFsg3+NppU6ChaZ5MzSeQ5djisY0hCvOCtAJo JMvfVKO/C7AeBLJ2fSbAaxAPTWGBouCXhzZW5gJVNMBAE7FSW7gvFhp/l8Ml/C8o mUM0yV8MpM29YPCLGEtInPwzdQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFPuzS0lC 889LZajVJ83Ok58cs9WIMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMTk3NTI2QkMx NkM4MTFFRkFBNkE0NzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MDMEAgACMC0DBwQkBghA4OADBwEkBghA5mYDBwQkBghA/PADBwAkBghA/Z8D BwQkBghA/dAwDQYJKoZIhvcNAQELBQADggEBAApRS5+1OG6hvGe3EWiPEgJvgrB1 BFUXfgj/hAAohUpyZ+L3r9xn4+2piXUu7UBt/H7CKvb6Vs7Wh37LvSRSQrVtQPxy FGIlQcPicywzJv58a57VodOYFriM/lxcJ0hVrjZsn9mZCnMuHIoHSzZBSox4/LlZ sEGouUgLoR6r7nLYoJ2pYr43KdHcsn7MwQnrF868fEXM44TdO7ktz1/0sgInHNyO j8dPabO5u+Ts5MRG7KgaRmuI0g3fRHDis4ydxjNzrM5tyJydiGdNn4M+eSHt8810 +H12GzbU3h2f/GN6zgwyg25904LHyI+dJIE93qapcRMod+owGd9YrVo8Qmc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:02 2025 by rpki-client