$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa File: 1E17F340724911E88CAE8E84C4F9AE02.roa (raw, json) Hash identifier: ar4CjDKEwiv8hNV8LHXTUs+z+lADBs8QY5ug8DjXXe4= Subject key identifier: 52:FD:DC:6A:D9:55:FF:93:3F:AD:6C:78:61:4B:0A:40:A7:B8:E5:E7 Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Certificate serial: 1B32 Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:34:06 +0000 ROA not before: Fri 04 Apr 2025 16:45:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2401:3740:374::/48 maxlen: 48 2401:3740:375::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6962 (0x1b32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Validity Not Before: Apr 4 16:45:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a44e5d-a160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:a0:bd:23:82:1a:68:3a:af:87:6e:cd:04: 2a:5e:1a:60:05:67:99:a6:98:02:87:b4:48:50:9e: 79:a8:53:73:be:85:ce:0e:4b:da:13:91:55:21:68: f9:cb:9d:45:e8:ae:f9:40:42:ac:6d:a2:b7:00:92: 4c:52:9d:a8:26:ee:ee:c3:50:05:fe:70:36:52:bc: 19:d3:45:aa:ff:8c:20:10:90:e6:65:57:e6:93:c1: b6:09:50:eb:39:de:87:4a:93:d3:81:ba:87:69:f5: 95:b0:dd:c5:9d:13:ec:91:cb:58:ea:a5:06:b6:4c: c7:2d:1b:cb:83:7b:6d:8f:5c:9a:6e:93:e2:da:91: 8c:4c:ad:e9:0b:c1:8a:1f:e7:12:9c:c2:97:7b:86: b9:1e:fa:69:ed:53:25:39:29:9c:3d:18:18:f0:18: 4e:1a:58:81:99:06:f4:d8:5f:53:33:13:d1:7c:ec: a1:ba:0b:99:dc:36:cb:ad:90:48:ba:83:8b:2a:12: a0:c7:a0:8b:d3:3d:e4:5c:50:72:4f:23:17:82:20: ca:e7:35:61:db:de:99:55:af:4f:e3:16:db:a5:a4: 53:d6:c7:fe:70:49:dd:73:9c:c3:0b:54:7f:f5:d0: 34:61:df:20:62:2a:64:d9:b9:20:68:de:5e:c1:61: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FD:DC:6A:D9:55:FF:93:3F:AD:6C:78:61:4B:0A:40:A7:B8:E5:E7 X509v3 Authority Key Identifier: keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:3740:374::/47 Signature Algorithm: sha256WithRSAEncryption 0f:e3:1a:c2:9f:46:19:53:eb:75:94:99:4d:e4:40:c9:9f:de: 4c:b3:dc:49:aa:92:b7:53:e1:a0:f8:7c:81:2f:e7:92:ea:6f: e7:41:d1:6d:28:17:9b:f6:74:3f:90:68:fe:6f:00:be:2e:0f: 5c:de:10:16:23:c3:2a:74:35:7d:86:8d:cc:de:d6:a4:45:c1: b3:be:7d:7b:0b:b9:45:dc:8f:c8:d8:41:0a:6f:61:0e:06:3b: 9b:d7:29:eb:3b:07:f2:2d:ee:a4:56:59:de:2c:36:1f:c4:7b: f9:e9:c4:b7:89:8e:67:22:36:2e:2c:7c:37:83:8a:e9:f2:a6: 24:15:5c:da:45:db:eb:93:1a:69:99:96:79:cc:dc:e0:41:28: 9c:68:de:88:2b:ae:b5:8b:70:92:6b:43:bd:42:7d:9a:f2:7b: 18:90:1c:5b:c6:ee:7a:f2:8b:2a:73:70:32:18:9e:5a:5b:70: 32:63:6f:33:fb:f5:3d:2d:02:d8:24:90:73:f7:33:20:00:d6: 11:d9:8a:10:c9:7d:c5:09:92:b2:8d:32:24:4a:03:dd:14:02: 07:b0:48:d3:cb:57:51:1e:b3:76:f8:ac:72:27:92:b4:bf:2f: fb:40:dc:92:ad:00:eb:cc:3b:c5:0e:42:5f:52:b1:c6:b3:ef: 6f:3a:78:d8 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICGzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG ODhFMzlFRUYwHhcNMjUwNDA0MTY0NTA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGU1ZC1hMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA2gvSOCGmg6r4duzQQqXhpgBWeZppgCh7RIUJ55qFNzvoXODkvaE5FVIWj5 y51F6K75QEKsbaK3AJJMUp2oJu7uw1AF/nA2UrwZ00Wq/4wgEJDmZVfmk8G2CVDr Od6HSpPTgbqHafWVsN3FnRPskctY6qUGtkzHLRvLg3ttj1yabpPi2pGMTK3pC8GK H+cSnMKXe4a5Hvpp7VMlOSmcPRgY8BhOGliBmQb02F9TMxPRfOyhuguZ3DbLrZBI uoOLKhKgx6CL0z3kXFByTyMXgiDK5zVh296ZVa9P4xbbpaRT1sf+cEndc5zDC1R/ 9dA0Yd8gYipk2bkgaN5ewWF1gQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFL93GrZ Vf+TP61seGFLCkCnuOXnMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5 Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUY2QTgvRjNCRDRDMzY0OUNCMTFFN0E0QTg3QzdCQzRGOUFFMDIvMUUxN0YzNDA3 MjQ5MTFFODhDQUU4RTg0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcBJAE3QAN0MA0GCSqGSIb3DQEBCwUAA4IBAQAP4xrCn0YZU+t1lJlN 5EDJn95Ms9xJqpK3U+Gg+HyBL+eS6m/nQdFtKBeb9nQ/kGj+bwC+Lg9c3hAWI8Mq dDV9ho3M3takRcGzvn17C7lF3I/I2EEKb2EOBjub1ynrOwfyLe6kVlneLDYfxHv5 6cS3iY5nIjYuLHw3g4rp8qYkFVzaRdvrkxppmZZ5zNzgQSicaN6IK661i3CSa0O9 Qn2a8nsYkBxbxu568osqc3AyGJ5aW3AyY28z+/U9LQLYJJBz9zMgANYR2YoQyX3F CZKyjTIkSgPdFAIHsEjTy1dRHrN2+KxyJ5K0vy/7QNySrQDrzDvFDkJfUrHGs+9v OnjY -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:51 2026 by rpki-client