$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C5B5424B4D411F09DC6A443C4F9AE02.roa File: 4C5B5424B4D411F09DC6A443C4F9AE02.roa (raw, json) Hash identifier: OGcEetpzxMolCoPe3Y7VmPhfHidItgWHNSBm8S9yVVQ= Subject key identifier: B9:5E:70:3A:50:8F:60:87:A2:89:9D:BF:93:49:16:9C:38:7E:86:47 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0FB7 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C5B5424B4D411F09DC6A443C4F9AE02.roa Signing time: Wed 29 Oct 2025 14:33:56 +0000 ROA not before: Wed 29 Oct 2025 14:33:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 213903 IP address blocks: 2406:840:c200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4023 (0xfb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Oct 29 14:33:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=690225d3-0e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:22:5b:11:d2:84:fe:b1:cd:38:c1:7d:4f: f8:5a:a7:82:af:6e:e9:05:af:ff:e6:00:7a:b4:79: 9a:5f:80:68:b7:af:a7:87:53:99:48:54:4d:6b:21: 3f:66:11:51:c2:0c:77:91:40:a7:d2:87:04:5a:b0: ab:5e:fd:a5:34:5c:07:51:ab:2b:5d:5e:b8:a6:aa: 10:58:23:b5:fb:83:fd:c9:20:61:7f:ea:56:b9:9d: d6:4a:5f:23:f0:de:91:e2:09:6a:df:6e:af:51:11: 68:14:ad:69:be:fa:6c:d3:3b:f4:c3:4c:bf:a3:11: d4:a5:66:a7:b9:ed:56:3e:a2:79:3d:91:2f:d7:11: 23:7c:54:07:ff:b4:c2:af:f1:2e:3b:1f:56:47:60: 20:59:87:fd:17:45:e7:05:37:96:f4:77:98:5d:eb: 1a:45:74:4f:af:dc:98:fc:d4:55:d2:00:a5:87:83: 68:19:65:9d:17:93:18:01:b9:9a:19:76:c2:5c:96: 5f:1d:6f:30:3c:b7:32:44:03:54:51:ab:a0:af:9b: ec:7c:a1:4a:4b:ab:a7:77:72:89:fd:36:03:1a:53: 7b:e1:7a:9a:55:86:1e:59:eb:ec:f9:ad:23:92:ab: 86:61:80:3d:79:9c:65:a4:6e:d0:42:d6:c2:67:3a: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5E:70:3A:50:8F:60:87:A2:89:9D:BF:93:49:16:9C:38:7E:86:47 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C5B5424B4D411F09DC6A443C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:c200::/40 Signature Algorithm: sha256WithRSAEncryption 7c:45:f1:a3:3f:0a:5d:5d:ab:be:ac:b7:a4:bc:fa:e2:03:ca: 8c:cd:fd:18:fe:74:f7:86:59:b0:bb:52:12:79:1f:3d:8f:4b: c3:12:3b:80:23:b8:2e:ce:66:39:c3:ae:c6:d5:b5:ad:00:09: 2d:ce:20:fd:4d:38:78:f6:8d:e6:70:c4:d6:5c:b2:3e:70:2d: 42:6a:9d:08:fd:14:61:64:40:7b:4e:16:b7:f5:77:a4:65:46: 97:11:3a:f5:52:10:e0:73:ae:36:95:4f:fd:0b:a9:02:51:f8: c6:dc:18:4a:fe:a7:27:ad:3b:29:f9:53:ec:dd:f5:8a:b5:f2: d2:f4:8a:20:98:44:8a:f7:31:8e:30:56:c7:ee:0d:f3:87:ae: a9:69:71:52:4b:4c:d0:ca:4b:8e:04:7e:4c:af:c4:c8:5b:fb: 1f:2e:c4:d0:c1:e1:b3:3b:9f:d1:70:fa:0e:af:f4:d6:d8:6f: d6:ec:56:fd:ae:8e:9d:ea:fa:95:36:93:e5:d1:4f:95:56:2f: cb:0b:c1:ce:d9:5c:ec:11:b8:ba:60:0b:e8:4b:22:3c:c9:9e: fe:56:5d:b2:76:67:e1:2b:87:61:4d:8f:e1:80:37:cc:10:8e: 4b:6a:c8:0e:c3:e5:b6:4d:3d:e4:ef:f9:3b:33:cc:3e:af:db: 8c:18:86:55 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjUxMDI5MTQzMzU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAyMjVkMy0wZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMQiWxHShP6xzTjBfU/4WqeCr27pBa//5gB6tHmaX4Bot6+nh1OZSFRNayE/ ZhFRwgx3kUCn0ocEWrCrXv2lNFwHUasrXV64pqoQWCO1+4P9ySBhf+pWuZ3WSl8j 8N6R4glq326vURFoFK1pvvps0zv0w0y/oxHUpWanue1WPqJ5PZEv1xEjfFQH/7TC r/EuOx9WR2AgWYf9F0XnBTeW9HeYXesaRXRPr9yY/NRV0gClh4NoGWWdF5MYAbma GXbCXJZfHW8wPLcyRANUUaugr5vsfKFKS6und3KJ/TYDGlN74XqaVYYeWevs+a0j kquGYYA9eZxlpG7QQtbCZzomaQIDAQABo4IClzCCApMwHQYDVR0OBBYEFLlecDpQ j2CHoomdv5NJFpw4foZHMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNEM1QjU0MjRC NEQ0MTFGMDlEQzZBNDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBghAwjANBgkqhkiG9w0BAQsFAAOCAQEAfEXxoz8KXV2r vqy3pLz64gPKjM39GP5094ZZsLtSEnkfPY9LwxI7gCO4Ls5mOcOuxtW1rQAJLc4g /U04ePaN5nDE1lyyPnAtQmqdCP0UYWRAe04Wt/V3pGVGlxE69VIQ4HOuNpVP/Qup AlH4xtwYSv6nJ607KflT7N31irXy0vSKIJhEivcxjjBWx+4N84euqWlxUktM0MpL jgR+TK/EyFv7Hy7E0MHhszuf0XD6Dq/01thv1uxW/a6Oner6lTaT5dFPlVYvywvB ztlc7BG4umAL6EsiPMme/lZdsnZn4SuHYU2P4YA3zBCOS2rIDsPltk095O/5OzPM Pq/bjBiGVQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:09 2025 by rpki-client