$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC42AB8EDF5011F0B41BBDC26F6F56BC.roa File: AC42AB8EDF5011F0B41BBDC26F6F56BC.roa (raw, json) Hash identifier: bqE0i9DtE8/qu8paPK+r/MgoGpHhtss2NN02rntqHTo= Subject key identifier: 18:53:69:45:6D:38:23:4A:5F:01:60:73:41:B9:1F:FE:5B:39:36:2E Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 10EC Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC42AB8EDF5011F0B41BBDC26F6F56BC.roa Signing time: Fri 17 Apr 2026 15:21:15 +0000 ROA not before: Fri 17 Apr 2026 15:21:15 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 213903 IP address blocks: 2406:840:fdea::/48 maxlen: 48 2406:840:fdeb::/48 maxlen: 48 2406:840:fdec::/48 maxlen: 48 2406:840:fded::/48 maxlen: 48 2406:840:fdee::/48 maxlen: 48 2406:840:fdef::/48 maxlen: 48 2406:840:fdf0::/48 maxlen: 48 2406:840:fdf1::/48 maxlen: 48 2406:840:fdf2::/48 maxlen: 48 2406:840:fdf3::/48 maxlen: 48 2406:840:fdf4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4332 (0x10ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Apr 17 15:21:15 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69e24feb-5581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:5b:59:d6:7c:6e:5d:dd:30:5b:06:87:b9: 0d:77:ac:d5:81:d9:c5:3a:ab:01:dc:77:1c:48:c9: af:86:03:95:56:d6:a1:9d:77:d8:78:17:e4:62:07: bb:48:25:3b:c3:27:90:9a:e8:19:2f:19:db:0b:9b: db:ed:2a:8e:72:6d:4e:f2:cc:11:22:be:41:70:57: 78:6a:24:c2:a0:40:cc:9a:6d:e8:77:c0:d0:aa:8e: 41:7b:ee:ef:ec:a5:1d:41:e0:cb:0d:48:46:ef:4c: e4:28:b3:b5:49:4f:38:7d:16:f2:b7:87:ad:89:b7: 1b:0a:fe:f8:ce:b7:74:e3:25:71:07:d6:f4:81:c6: d7:8f:0d:2e:2f:62:4c:8f:4e:b7:b5:f6:81:42:81: 4c:c1:77:a9:ef:86:79:6b:27:8d:d0:d9:00:d2:3d: 5f:a2:ce:36:cc:67:c9:4f:16:a6:69:79:7d:2e:46: 0d:f3:d7:9f:fd:97:33:15:24:69:00:5e:9f:76:f0: 1f:41:c8:ef:91:ae:23:39:ca:20:39:66:1c:a3:6c: dd:f4:85:af:ea:07:e0:93:85:28:f7:d2:5f:93:3d: 52:5e:55:04:ed:b3:04:90:83:6a:53:08:77:df:28: f7:d7:ca:18:08:f2:66:a7:39:b7:b5:dc:10:4a:ee: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:53:69:45:6D:38:23:4A:5F:01:60:73:41:B9:1F:FE:5B:39:36:2E X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC42AB8EDF5011F0B41BBDC26F6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2406:840:fdea::-2406:840:fdf4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 07:00:9a:9e:2e:bf:69:23:e2:1c:7c:cb:20:bd:a3:89:01:3d: 19:15:e0:0c:dd:83:ec:2b:63:16:08:c1:59:f7:b7:c0:f2:82: 41:bb:c7:88:fd:04:ee:49:e6:83:09:b2:fd:1a:74:f7:5f:2a: 3b:1a:8d:8a:16:62:de:fc:46:17:16:a1:6c:55:48:a2:65:ef: 84:76:2c:fb:c8:dc:b9:90:0f:42:c1:16:1f:65:13:34:57:8c: 09:13:56:80:6c:ea:75:94:7f:6d:9a:4b:9e:ff:3c:35:41:a0: 7e:34:0d:aa:8e:f0:72:1c:7f:27:35:62:e5:5f:f7:96:46:88: 30:37:3b:32:57:1e:bd:69:6f:be:6e:86:b4:63:88:50:d3:a5: 6b:78:1f:e0:b0:d0:da:25:65:f7:81:bf:69:5d:e1:8a:df:c4: b9:24:a8:de:e9:e8:3a:21:2a:3b:bb:d2:c2:24:24:55:6a:b4: 7a:4e:23:3a:d4:9b:5e:42:8f:33:27:0a:7b:28:bf:be:67:0c: 05:df:91:f0:82:8c:b9:20:4c:b0:bb:33:37:75:d6:7f:78:c2: 65:af:be:ef:9b:9d:41:56:b2:fb:a8:9a:fd:44:51:1f:80:4e: 45:5a:87:52:be:8e:3e:db:8c:c3:39:f2:28:de:f3:b1:5d:cf: 81:0d:ea:18 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICEOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjYwNDE3MTUyMTE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWUyNGZlYi01NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZJbWdZ8bl3dMFsGh7kNd6zVgdnFOqsB3HccSMmvhgOVVtahnXfYeBfkYge7 SCU7wyeQmugZLxnbC5vb7SqOcm1O8swRIr5BcFd4aiTCoEDMmm3od8DQqo5Be+7v 7KUdQeDLDUhG70zkKLO1SU84fRbyt4etibcbCv74zrd04yVxB9b0gcbXjw0uL2JM j063tfaBQoFMwXep74Z5ayeN0NkA0j1fos42zGfJTxamaXl9LkYN89ef/ZczFSRp AF6fdvAfQcjvka4jOcogOWYco2zd9IWv6gfgk4Uo99Jfkz1SXlUE7bMEkINqUwh3 3yj318oYCPJmpzm3tdwQSu71lQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFBhTaUVt OCNKXwFgc0G5H/5bOTYuMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQUM0MkFCOEVE RjUwMTFGMEI0MUJCREMyNkY2RjU2QkMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwEkBghA/eoDBwAkBghA/fQwDQYJKoZIhvcNAQELBQADggEBAAcA mp4uv2kj4hx8yyC9o4kBPRkV4Azdg+wrYxYIwVn3t8DygkG7x4j9BO5J5oMJsv0a dPdfKjsajYoWYt78RhcWoWxVSKJl74R2LPvI3LmQD0LBFh9lEzRXjAkTVoBs6nWU f22aS57/PDVBoH40DaqO8HIcfyc1YuVf95ZGiDA3OzJXHr1pb75uhrRjiFDTpWt4 H+Cw0NolZfeBv2ld4YrfxLkkqN7p6DohKju70sIkJFVqtHpOIzrUm15CjzMnCnso v75nDAXfkfCCjLkgTLC7Mzd11n94wmWvvu+bnUFWsvuomv1EUR+ATkVah1K+jj7b jMM58ije87Fdz4EN6hg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:20:56 2026 by rpki-client