$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa File: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (raw, json) Hash identifier: YLQu+XBkP0u4scPVL2HjSFkhwvlDsdMdNxwXV2B40qg= Subject key identifier: 7C:37:87:32:AE:90:55:08:83:DE:59:A0:D7:FD:09:6D:3C:C2:16:1B Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Certificate serial: 01B2 Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa Signing time: Fri 27 Mar 2026 04:38:51 +0000 ROA not before: Fri 27 Mar 2026 04:38:51 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 152332 IP address blocks: 2401:76e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Validity Not Before: Mar 27 04:38:51 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69c609db-9584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:9f:f1:ed:d7:a6:bd:51:11:66:04:c4:1a: 1c:e5:ec:0b:da:20:78:68:20:60:c8:83:81:e6:67: 6d:65:e4:f2:bc:4d:0a:3f:e5:4d:e7:72:73:96:ed: 07:9e:f3:58:de:11:b1:93:e8:29:a7:7f:c9:38:5e: eb:3e:63:6d:cd:26:51:1b:f3:d8:da:fd:78:88:c5: b0:ce:ec:bd:10:d6:42:bd:1e:4f:29:bf:cf:05:a6: 6d:f1:d7:73:ea:2a:86:52:c8:05:34:b0:0f:f1:34: e6:5d:c4:29:e6:7f:b9:73:0a:34:3a:39:d1:e9:95: 16:6c:9e:d2:4d:8b:cf:42:22:65:a2:36:79:3f:86: 45:e5:0f:54:ef:b4:cf:1d:1e:92:a1:e3:2f:c4:f6: aa:28:8b:c0:d9:12:56:a9:56:77:a6:a1:db:a5:41: 90:00:cc:6d:88:49:9c:94:41:11:0a:9e:d4:91:f1: f1:47:7a:33:9d:b0:d6:60:8e:80:0d:d1:0a:6b:66: 87:c0:76:59:6f:0a:fc:02:f7:4d:77:e9:4d:14:f8: 89:2c:1d:2b:16:53:e5:b7:2d:bc:11:58:83:ed:f8: 24:8c:a5:c7:1f:db:39:25:be:f5:13:c8:56:6c:e7: d3:ba:6b:19:01:0c:7c:21:ee:fc:8c:dd:00:a7:10: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:37:87:32:AE:90:55:08:83:DE:59:A0:D7:FD:09:6D:3C:C2:16:1B X509v3 Authority Key Identifier: keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/4BFDDACCEB3311EE9D65C57DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:76e0::/32 Signature Algorithm: sha256WithRSAEncryption a9:42:a2:e8:29:ae:9f:84:f5:0e:39:01:6d:e7:7a:5b:2a:d3: 42:f4:ff:f7:35:eb:f1:c5:98:b1:54:67:20:1e:22:a9:71:12: 0a:7c:54:28:8f:8b:4c:c9:3d:8e:29:6b:d0:90:de:92:cc:ac: a0:d4:77:70:f1:4e:07:a3:c2:2d:2b:82:94:73:85:18:15:12: 3a:c9:f8:14:1c:ab:73:41:00:dd:08:dd:70:8c:0f:88:9b:0a: 56:11:20:0d:72:d9:da:b6:33:2e:5d:a2:4e:50:73:51:2a:8c: d2:a4:83:42:57:c9:09:a6:80:9b:60:fe:3e:35:0b:ea:a9:d9: 5b:f9:f1:5c:7f:32:69:ac:9a:62:25:ef:77:99:e7:84:31:8a: e6:c3:72:1e:5f:b5:20:a1:7d:6f:f8:b7:eb:7b:d3:7f:e2:21: 27:3c:8d:d3:1b:30:22:c1:87:8e:ff:1a:8e:e4:d4:74:7c:e5: e2:b5:1b:02:5d:c4:2f:75:04:b9:e1:68:29:d5:b5:05:b9:53: 85:b8:72:0b:f0:2a:4a:c0:4e:a2:4c:07:d6:cd:e3:09:56:c8: 04:b0:77:bc:18:03:13:3e:77:d5:61:5f:cc:ca:bd:af:48:87: 5a:1b:72:84:33:67:da:46:f2:c2:cb:17:e0:79:eb:93:4a:ba: 29:87:42:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEFGQjhGRkUxRTg2ODYyOTZCOTk2QzYzQUE5MDJFQTlD MTI4RjQ4RkUwHhcNMjYwMzI3MDQzODUxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWM2MDlkYi05NTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkIqf8e3Xpr1REWYExBoc5ewL2iB4aCBgyIOB5mdtZeTyvE0KP+VN53Jzlu0H nvNY3hGxk+gpp3/JOF7rPmNtzSZRG/PY2v14iMWwzuy9ENZCvR5PKb/PBaZt8ddz 6iqGUsgFNLAP8TTmXcQp5n+5cwo0OjnR6ZUWbJ7STYvPQiJlojZ5P4ZF5Q9U77TP HR6SoeMvxPaqKIvA2RJWqVZ3pqHbpUGQAMxtiEmclEERCp7UkfHxR3oznbDWYI6A DdEKa2aHwHZZbwr8AvdNd+lNFPiJLB0rFlPlty28EViD7fgkjKXHH9s5Jb71E8hW bOfTumsZAQx8Ie78jN0ApxB3cwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFHw3hzKu kFUIg95ZoNf9CW08whYbMB8GA1UdIwQYMBaAFK+4/+HoaGKWuZbGOqkC6pwSj0j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GQkREQUMyNENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lwYTVsc1k2cVFMcW5CS1BT UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJBODIvRkJEREFDMjRDRTVBMTFFRThDM0JEMDNBQzRGOUFFMDIvNEJGRERBQ0NF QjMzMTFFRTlENjVDNTdEQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAF24DANBgkqhkiG9w0BAQsFAAOCAQEAqUKi6Cmun4T1DjkBbed6 WyrTQvT/9zXr8cWYsVRnIB4iqXESCnxUKI+LTMk9jilr0JDeksysoNR3cPFOB6PC LSuClHOFGBUSOsn4FByrc0EA3QjdcIwPiJsKVhEgDXLZ2rYzLl2iTlBzUSqM0qSD QlfJCaaAm2D+PjUL6qnZW/nxXH8yaayaYiXvd5nnhDGK5sNyHl+1IKF9b/i363vT f+IhJzyN0xswIsGHjv8ajuTUdHzl4rUbAl3EL3UEueFoKdW1BblThbhyC/AqSsBO okwH1s3jCVbIBLB3vBgDEz531WFfzMq9r0iHWhtyhDNn2kbywssX4Hnrk0q6KYdC aA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:24:39 2026 by rpki-client