$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa File: 3AB77B58E23311F0B92C3AF56C6F56BC.roa (raw, json) Hash identifier: 0x2lcoJZK/6F0r+tjSBU9v751EGq26RMxto1uQGmF+g= Subject key identifier: D8:C2:32:0E:03:84:D8:0D:B6:CF:E7:6D:BC:3A:D5:F2:51:52:77:2B Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 01A6 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa Signing time: Mon 02 Mar 2026 13:40:12 +0000 ROA not before: Fri 26 Dec 2025 08:16:50 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152586 IP address blocks: 2401:8360:2::/48 maxlen: 48 2401:8360:6::/48 maxlen: 48 2401:8360:b::/48 maxlen: 48 2401:8360:c::/48 maxlen: 48 2401:8360:d::/48 maxlen: 48 2401:8360:e::/48 maxlen: 48 2401:8360:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 03:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Dec 26 08:16:50 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5933c-f520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:df:d4:9c:9f:0e:d5:6b:42:3c:5f:ff:70: b3:82:ef:4a:ed:7e:b0:d5:fa:f3:91:e4:b1:5c:ea: fb:47:c3:bb:c7:5a:ea:5d:99:1b:43:59:49:25:a5: a0:1f:16:4b:fe:68:f7:4e:0c:aa:d9:da:e5:e8:f7: b6:80:77:4e:f7:8d:cb:35:c3:68:be:10:3b:9e:c2: da:3f:69:88:08:e5:29:96:92:a3:6f:9e:33:cd:08: 02:12:8a:0c:77:d2:52:37:39:2b:e0:33:08:83:cd: c5:2a:52:47:83:9e:ee:d4:a5:a6:28:17:a4:05:58: 0c:0e:f1:ce:64:9f:b4:ba:e0:82:87:e6:3d:98:81: e6:f7:ac:62:c8:3f:c9:86:1e:93:02:4d:9b:3d:61: 82:a8:b1:92:c7:43:21:03:9b:f3:17:10:ea:cc:49: 70:1f:81:df:32:2b:20:fb:c7:da:2a:3b:9d:8c:31: 0a:29:19:42:a8:ca:78:e3:c3:ac:9a:ff:2b:2b:8f: a5:1c:bb:34:a6:4a:5b:dd:1b:ae:71:e9:a2:b6:99: d7:5c:ca:fa:94:1b:5f:7d:2b:5e:af:59:56:39:9e: 71:b5:fc:d5:39:ba:7b:a1:ac:f8:2b:c5:52:f4:2a: c4:4f:cc:be:e0:58:a9:98:fb:9e:dd:e3:0f:87:c5: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C2:32:0E:03:84:D8:0D:B6:CF:E7:6D:BC:3A:D5:F2:51:52:77:2B X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2401:8360:2::/48 2401:8360:6::/48 2401:8360:b::-2401:8360:e:ffff:ffff:ffff:ffff:ffff 2401:8360:a1::/48 Signature Algorithm: sha256WithRSAEncryption 64:fc:9d:98:d3:aa:c3:72:d0:b8:65:d3:5f:6f:b6:cc:e8:07: 75:fa:33:fd:bc:f2:db:b1:f6:0f:b3:bd:0c:89:3b:44:f2:40: 75:2d:46:2f:b3:9c:a3:a4:07:c4:b7:3d:59:27:ce:91:08:ac: a0:ad:df:cf:83:fa:47:26:86:1a:e4:de:9b:d4:81:30:18:fa: 81:57:17:d7:60:d0:e9:e8:78:f2:d5:20:e9:ca:3b:fe:a6:c7: 76:d2:03:2e:72:0f:62:cc:46:97:cd:a9:e0:3c:c2:04:f0:f1: 8d:51:38:f1:c9:2d:a9:70:b8:d6:c5:e8:6a:a8:06:e4:cf:4e: e9:49:94:79:e0:6e:7d:f3:c3:bc:8d:db:d9:be:68:f7:61:b3: 22:11:89:03:66:1d:33:97:ed:e2:ed:b9:11:d3:10:4d:2c:80: 36:f5:57:89:7d:30:62:5b:42:17:84:aa:15:e2:d6:25:f1:03: 74:b1:8e:30:de:71:f7:4b:5f:78:ad:11:2e:f0:60:28:65:6b: 35:7f:6f:30:01:e5:67:58:a2:ff:cd:25:07:4e:c6:75:d2:f0: fe:5e:e1:d4:c1:5e:90:2f:55:d5:0b:95:8b:79:14:fc:51:88: cf:5a:d1:cc:c3:00:4a:be:b0:40:f2:4d:dd:e3:0e:7b:10:ba: 86:e1:36:e7 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUxMjI2MDgxNjUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTMzYy1mNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13ff1JyfDtVrQjxf/3Czgu9K7X6w1frzkeSxXOr7R8O7x1rqXZkbQ1lJJaWg HxZL/mj3Tgyq2drl6Pe2gHdO943LNcNovhA7nsLaP2mICOUplpKjb54zzQgCEooM d9JSNzkr4DMIg83FKlJHg57u1KWmKBekBVgMDvHOZJ+0uuCCh+Y9mIHm96xiyD/J hh6TAk2bPWGCqLGSx0MhA5vzFxDqzElwH4HfMisg+8faKjudjDEKKRlCqMp448Os mv8rK4+lHLs0pkpb3RuucemitpnXXMr6lBtffSter1lWOZ5xtfzVObp7oaz4K8VS 9CrET8y+4FipmPue3eMPh8WimQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFNjCMg4D hNgNts/nbbw61fJRUncrMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBENzIvOEIyNUFEMDREMjJCMTFFRUJDMTQ1MzQzQzRGOUFFMDIvM0FCNzdCNThF MjMzMTFGMEI5MkMzQUY1NkM2RjU2QkMucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzA1 BAIAAjAvAwcAJAGDYAACAwcAJAGDYAAGMBIDBwAkAYNgAAsDBwAkAYNgAA4DBwAk AYNgAKEwDQYJKoZIhvcNAQELBQADggEBAGT8nZjTqsNy0Lhl019vtszoB3X6M/28 8tux9g+zvQyJO0TyQHUtRi+znKOkB8S3PVknzpEIrKCt38+D+kcmhhrk3pvUgTAY +oFXF9dg0OnoePLVIOnKO/6mx3bSAy5yD2LMRpfNqeA8wgTw8Y1ROPHJLalwuNbF 6GqoBuTPTulJlHngbn3zw7yN29m+aPdhsyIRiQNmHTOX7eLtuRHTEE0sgDb1V4l9 MGJbQheEqhXi1iXxA3SxjjDecfdLX3itES7wYChlazV/bzAB5WdYov/NJQdOxnXS 8P5e4dTBXpAvVdULlYt5FPxRiM9a0czDAEq+sEDyTd3jDnsQuobhNuc= -----END CERTIFICATE-----Generated at Thu Mar 5 22:04:16 2026 by rpki-client