$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa File: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (raw, json) Hash identifier: sogBCjppD56h+GcWQ3rByWlelY4eKvIMYEluAiQ+/rw= Subject key identifier: 0D:8B:18:F9:D0:44:45:2E:9C:8D:02:9F:83:25:0E:2F:4B:25:5A:BD Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 19AD Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:25:42 +0000 ROA not before: Fri 20 Jun 2025 16:16:26 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 202623 IP address blocks: 2400:cb00:420::/48 maxlen: 48 2400:cb00:1028::/48 maxlen: 48 2400:cb00:1029::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6573 (0x19ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Jun 20 16:16:26 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4aed6-c60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:90:66:f2:f3:5d:c4:8e:0d:47:a6:84:53: 27:f4:49:d0:5a:3a:7f:af:e8:74:60:82:2f:ed:e0: 61:bf:a1:75:4f:60:39:7f:e1:75:43:41:09:3e:b4: cc:c1:01:e4:da:3f:d2:f8:00:0f:80:eb:23:4e:5f: 89:b5:41:83:76:9b:99:1d:53:18:6d:78:58:0d:21: 6c:57:c9:b5:3f:5f:3d:1c:7d:01:f2:f8:ee:c9:a3: 28:20:26:7a:8b:da:23:5b:06:55:40:9b:05:88:18: 8a:a1:1d:87:7b:a1:61:99:26:a3:f7:97:13:80:08: 0d:ea:80:3b:bf:39:cf:e8:21:81:1c:ac:82:00:49: 2d:7f:9f:44:ff:22:02:1f:4a:3e:4e:4f:ad:49:98: 92:cc:53:81:3d:a6:d5:bc:67:d1:9c:b9:c7:cf:af: 75:cd:ba:97:2d:c9:13:af:31:06:01:74:22:e0:53: 16:95:48:33:06:38:ee:b3:c5:60:73:9f:4c:22:9d: 86:60:a2:1a:17:66:ec:f2:4f:c3:37:d4:f6:2b:bd: 72:1f:49:bb:e2:4a:6c:ca:9e:d8:53:8a:ab:81:70: 9c:93:49:c8:bb:98:5d:b3:9f:24:fe:af:72:2d:5b: 6d:50:e9:98:78:06:c3:7b:25:1f:e7:5a:8f:f2:08: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8B:18:F9:D0:44:45:2E:9C:8D:02:9F:83:25:0E:2F:4B:25:5A:BD X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:cb00:420::/48 2400:cb00:1028::/47 Signature Algorithm: sha256WithRSAEncryption b5:03:1b:bd:67:1a:36:88:6f:c1:fc:08:df:a3:f8:6e:98:17: 8f:6b:d3:88:1a:db:b4:44:ec:d8:c6:aa:bc:be:7c:18:3e:cb: 74:e7:26:c1:e8:75:f7:f1:31:8e:99:9f:3e:4f:31:df:78:a8: 07:29:88:86:80:2d:50:73:d1:fb:c2:a5:54:b1:dc:e3:21:2d: bf:66:ef:67:f1:ab:b2:e8:d8:d4:49:3a:8d:d3:e4:0b:11:10: a5:3a:08:72:ac:fb:d6:08:8c:a3:40:f7:49:f6:1d:ae:14:74: a1:b9:c2:4d:98:a7:55:e6:56:82:e9:84:c6:a3:ec:52:97:b9: f6:45:51:4b:9e:5b:a8:14:1a:e0:84:83:b8:43:70:72:cd:e4: f7:82:b2:8d:48:10:96:24:fe:54:f0:f0:81:8a:6d:f3:2a:72: 42:80:bb:ed:7b:6b:25:bf:42:0a:a7:09:5e:4c:e9:ed:5f:9f: d6:21:ac:72:fb:c9:2d:ec:c7:e0:e2:c0:81:17:b8:06:a8:8b: f1:26:89:4a:00:26:04:5d:da:1e:8f:ef:c8:70:99:a2:54:a1: f8:4c:65:b2:c3:be:22:1a:c0:93:a9:42:41:8d:39:2c:26:50: 8e:5f:92:02:d8:d8:48:14:e0:06:23:49:fe:06:1c:06:76:ac: d3:54:fc:f2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICGa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNjIwMTYxNjI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWVkNi1jNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDWQZvLzXcSODUemhFMn9EnQWjp/r+h0YIIv7eBhv6F1T2A5f+F1Q0EJPrTM wQHk2j/S+AAPgOsjTl+JtUGDdpuZHVMYbXhYDSFsV8m1P189HH0B8vjuyaMoICZ6 i9ojWwZVQJsFiBiKoR2He6FhmSaj95cTgAgN6oA7vznP6CGBHKyCAEktf59E/yIC H0o+Tk+tSZiSzFOBPabVvGfRnLnHz691zbqXLckTrzEGAXQi4FMWlUgzBjjus8Vg c59MIp2GYKIaF2bs8k/DN9T2K71yH0m74kpsyp7YU4qrgXCck0nIu5hds58k/q9y LVttUOmYeAbDeyUf51qP8ggQAwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFA2LGPnQ REUunI0Cn4MlDi9LJVq9MB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvRTNGN0I5NjZF NUE4MTFFQ0JFMTFEQTZEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAJADLAAQgAwcBJADLABAoMA0GCSqGSIb3DQEBCwUAA4IBAQC1Axu9 Zxo2iG/B/Ajfo/humBePa9OIGtu0ROzYxqq8vnwYPst05ybB6HX38TGOmZ8+TzHf eKgHKYiGgC1Qc9H7wqVUsdzjIS2/Zu9n8auy6NjUSTqN0+QLERClOghyrPvWCIyj QPdJ9h2uFHShucJNmKdV5laC6YTGo+xSl7n2RVFLnluoFBrghIO4Q3ByzeT3grKN SBCWJP5U8PCBim3zKnJCgLvte2slv0IKpwleTOntX5/WIaxy+8kt7Mfg4sCBF7gG qIvxJolKACYEXdoej+/IcJmiVKH4TGWyw74iGsCTqUJBjTksJlCOX5IC2NhIFOAG I0n+BhwGdqzTVPzy -----END CERTIFICATE-----Generated at Tue Mar 24 14:05:04 2026 by rpki-client