$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BC58A5C66DD311F09E550D38C4F9AE02.roa File: BC58A5C66DD311F09E550D38C4F9AE02.roa (raw, json) Hash identifier: M/opGFmlb9jaN3RmTRwWVxME38lrA5KzlqcKDnyMekw= Subject key identifier: 20:8A:66:55:84:76:56:90:F2:27:20:1D:F8:CA:14:D8:37:05:04:92 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 04AE Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BC58A5C66DD311F09E550D38C4F9AE02.roa Signing time: Wed 11 Mar 2026 00:32:05 +0000 ROA not before: Wed 11 Mar 2026 00:32:05 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 150744 IP address blocks: 2400:52a0:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 23:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Mar 11 00:32:05 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b0b804-28f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:57:6f:14:94:3f:48:5f:6f:07:5e:e2:99: cb:b6:48:64:75:65:77:1c:a5:37:db:da:78:f4:1f: eb:16:04:8d:b3:9b:55:dd:50:a4:bd:3c:88:19:2f: ae:5e:53:53:14:a0:2f:a7:3c:ca:2f:e7:9d:05:31: 64:46:18:fe:ef:75:4a:48:5c:6b:6e:f7:18:a6:bd: 06:cb:5d:6f:55:4f:38:0f:06:b6:af:e3:7f:55:20: c3:17:5d:d4:a9:38:48:67:6b:d1:20:41:d5:6e:b4: 34:9c:95:0b:83:30:83:d6:70:45:4f:85:61:69:bc: 04:33:d0:6f:2c:85:5f:8b:2a:61:e6:e7:ab:0e:6a: 35:8b:c6:24:ab:d3:f4:03:65:c2:a3:c2:a6:3d:0b: 9a:5f:f8:72:32:2c:37:3b:ab:8b:71:49:da:43:ae: 63:89:55:f6:45:c3:59:6b:a6:14:8f:a3:00:e1:ea: 46:11:78:cb:9e:d4:97:56:62:9c:c8:4e:18:d9:75: d5:b9:d3:c8:e3:f6:7c:67:6b:24:d7:ed:59:68:0e: 2d:fc:1d:47:a8:6e:99:2c:04:c1:1e:56:d0:a8:16: 3c:61:f2:0d:48:e5:23:9e:14:e6:ac:d5:51:f9:b2: bb:c1:19:5c:a7:bf:4f:17:d9:31:6c:7f:02:80:5a: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:66:55:84:76:56:90:F2:27:20:1D:F8:CA:14:D8:37:05:04:92 X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BC58A5C66DD311F09E550D38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:52a0:50::/48 Signature Algorithm: sha256WithRSAEncryption 93:25:28:8e:42:c6:f2:0e:85:e7:b1:ec:4f:16:e7:20:aa:df: 2d:a5:ab:85:b7:54:65:f6:42:94:c6:74:f2:e5:01:2f:16:64: 26:60:42:93:58:c0:c1:63:55:7e:b0:bd:3b:87:8d:4b:1a:0f: 35:45:ad:58:6d:00:28:1a:23:8f:94:6b:70:47:16:8f:63:ac: 0e:3e:3c:1e:2b:4a:9c:f2:dd:47:78:5d:5c:44:24:ff:1e:05: e2:c2:c8:aa:bd:82:92:3a:8f:af:f2:14:4f:76:72:15:9a:95: 29:2d:3e:a2:bb:b5:17:db:54:4d:d1:69:72:0b:03:2f:b9:2b: ad:35:a1:9a:b1:e9:f6:2f:05:f3:eb:19:b7:21:3b:e1:a6:34: 6a:50:60:47:05:30:29:6b:8f:89:ef:09:02:5e:f9:f3:c2:af: 78:7c:a9:83:2c:61:3e:54:e1:98:f2:e9:9a:d6:1e:4b:ee:bf: bc:7b:2b:df:5c:37:17:09:51:2f:96:67:3a:d5:6b:1e:ca:87: cb:c9:30:84:c3:a9:9e:79:e9:f2:2f:2e:1a:d2:51:71:20:6e: be:e0:fa:c6:85:3f:2b:b5:ee:db:0b:61:90:66:25:7f:04:72: d4:68:5a:31:a0:b7:69:03:f3:3c:61:85:2b:d2:80:19:d8:ba: 37:7b:3e:f7 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjYwMzExMDAzMjA1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIwYjgwNC0yOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlNXbxSUP0hfbwde4pnLtkhkdWV3HKU329p49B/rFgSNs5tV3VCkvTyIGS+u XlNTFKAvpzzKL+edBTFkRhj+73VKSFxrbvcYpr0Gy11vVU84Dwa2r+N/VSDDF13U qThIZ2vRIEHVbrQ0nJULgzCD1nBFT4VhabwEM9BvLIVfiyph5uerDmo1i8Ykq9P0 A2XCo8KmPQuaX/hyMiw3O6uLcUnaQ65jiVX2RcNZa6YUj6MA4epGEXjLntSXVmKc yE4Y2XXVudPI4/Z8Z2sk1+1ZaA4t/B1HqG6ZLATBHlbQqBY8YfINSOUjnhTmrNVR +bK7wRlcp79PF9kxbH8CgFrHzQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFCCKZlWE dlaQ8icgHfjKFNg3BQSSMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1NTYvMTA0NTJBRkE3REM5MTFFQzhFOUY2QjIzQzRGOUFFMDIvQkM1OEE1QzY2 REQzMTFGMDlFNTUwRDM4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABSoABQMA0GCSqGSIb3DQEBCwUAA4IBAQCTJSiOQsbyDoXnsexP Fucgqt8tpauFt1Rl9kKUxnTy5QEvFmQmYEKTWMDBY1V+sL07h41LGg81Ra1YbQAo GiOPlGtwRxaPY6wOPjweK0qc8t1HeF1cRCT/HgXiwsiqvYKSOo+v8hRPdnIVmpUp LT6iu7UX21RN0WlyCwMvuSutNaGasen2LwXz6xm3ITvhpjRqUGBHBTApa4+J7wkC Xvnzwq94fKmDLGE+VOGY8uma1h5L7r+8eyvfXDcXCVEvlmc61WseyofLyTCEw6me eenyLy4a0lFxIG6+4PrGhT8rte7bC2GQZiV/BHLUaFoxoLdpA/M8YYUr0oAZ2Lo3 ez73 -----END CERTIFICATE-----Generated at Fri Mar 13 18:57:07 2026 by rpki-client