$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa File: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (raw, json) Hash identifier: tPvJ6ibshTdXuKO8A/hjIL4g3XF4DuP5+2X5k3/lunM= Subject key identifier: AE:40:43:70:EF:F1:22:F4:9E:44:9E:52:F2:17:D5:FB:FE:D4:AC:11 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 0274 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:52:18 +0000 ROA not before: Sun 11 May 2025 02:31:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 204174 IP address blocks: 2400:e3e0:100::/40 maxlen: 48 2400:e3e0:f00::/40 maxlen: 48 2400:e3e0:f5d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 01:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: May 11 02:31:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a47cd2-46a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:be:2d:47:70:71:ca:ef:a6:d7:6c:99:bb: ec:08:c0:15:5d:4a:a4:8c:5b:95:1d:4d:dd:c3:69: e7:67:75:dd:57:a6:4f:54:35:1c:16:39:81:93:8b: 90:6b:99:da:ff:0e:58:d9:c3:bb:ac:cf:00:4e:75: c0:54:5c:78:98:98:af:da:95:60:44:9a:4b:a1:e4: fa:02:52:76:ae:bd:7b:27:b9:5f:3f:24:18:67:a1: f6:28:97:cf:ae:d0:ec:c8:1e:f2:df:3c:47:9a:5f: 25:4d:44:c4:75:93:6a:0b:27:16:76:5e:fd:c8:8f: cc:4a:84:3b:1d:22:f5:27:ef:3e:fd:f8:fe:a5:a4: f5:75:f4:bf:c2:2b:f3:7b:a5:b6:fa:c2:74:58:56: bb:d5:6a:f9:21:fc:b6:0b:56:bc:f6:bd:d4:5d:15: 08:73:92:fb:12:53:e0:3d:8b:42:ed:3f:67:80:72: b3:33:d0:16:05:8c:c7:da:72:c2:70:a5:df:f8:e7: 7a:32:52:05:ea:d9:25:fb:e3:ba:d4:50:b4:52:c0: 5d:c8:45:d0:1e:1f:a5:7e:fa:ad:5d:08:0a:50:92: 8d:9a:c3:0b:b7:4b:e2:57:66:d5:31:5f:00:aa:23: df:9a:e0:bf:7c:6d:e0:00:b5:b1:4e:47:01:0f:bc: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:40:43:70:EF:F1:22:F4:9E:44:9E:52:F2:17:D5:FB:FE:D4:AC:11 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:100::/40 2400:e3e0:f00::/40 2400:e3e0:f5d9::/48 Signature Algorithm: sha256WithRSAEncryption 1f:b1:08:2e:60:9d:24:63:f8:5d:d5:c7:06:1f:42:5f:7f:e7: d9:2b:90:93:49:26:31:3d:73:35:02:4a:b8:88:52:80:c7:a8: 10:e5:27:d4:28:66:93:89:79:57:b8:8b:3c:c8:a0:14:b9:60: d8:e4:7f:c6:a3:2c:d9:92:6b:3d:e7:b8:38:b0:c1:95:2b:13: d3:1e:7e:11:33:9b:d1:d6:3a:78:66:6a:67:0d:8b:a7:ff:27: ed:45:51:db:ba:d6:fe:63:fe:3f:d9:d6:7a:bf:af:be:67:6d: b6:23:45:df:88:fe:55:a8:a2:23:93:25:30:09:18:b9:98:fd: 8f:7b:29:6b:df:7c:b5:5a:f2:3f:23:dd:90:b5:16:4d:64:e1: 0c:b7:43:28:2e:b2:37:ef:fd:88:29:31:51:99:a2:dd:a0:e4: 03:59:11:de:4b:c1:ba:b0:50:ed:34:7c:c3:f3:f5:48:16:69: 1f:a2:ab:3a:b3:e3:65:11:40:3f:02:fd:ce:fe:21:e8:28:b2: db:67:b8:94:1e:af:be:7e:b1:75:5a:ff:8e:81:89:a9:45:68: 60:b9:71:d9:97:91:9d:c6:9d:37:51:ac:01:bb:f7:7b:3d:47: 96:1a:e3:48:56:88:3d:ac:0a:9f:58:a9:e0:54:bb:9f:86:34: fc:a1:db:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNTExMDIzMTQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2NkMi00NmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHS+LUdwccrvptdsmbvsCMAVXUqkjFuVHU3dw2nnZ3XdV6ZPVDUcFjmBk4uQ a5na/w5Y2cO7rM8ATnXAVFx4mJiv2pVgRJpLoeT6AlJ2rr17J7lfPyQYZ6H2KJfP rtDsyB7y3zxHml8lTUTEdZNqCycWdl79yI/MSoQ7HSL1J+8+/fj+paT1dfS/wivz e6W2+sJ0WFa71Wr5Ify2C1a89r3UXRUIc5L7ElPgPYtC7T9ngHKzM9AWBYzH2nLC cKXf+Od6MlIF6tkl++O61FC0UsBdyEXQHh+lfvqtXQgKUJKNmsMLt0viV2bVMV8A qiPfmuC/fG3gALWxTkcBD7xBjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5AQ3Dv 8SL0nkSeUvIX1fv+1KwRMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvMzRENUVEMTIx MEY1MTFFRUJDRTJBODFFQzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAf BAIAAjAZAwYAJADj4AEDBgAkAOPgDwMHACQA4+D12TANBgkqhkiG9w0BAQsFAAOC AQEAH7EILmCdJGP4XdXHBh9CX3/n2SuQk0kmMT1zNQJKuIhSgMeoEOUn1Chmk4l5 V7iLPMigFLlg2OR/xqMs2ZJrPee4OLDBlSsT0x5+ETOb0dY6eGZqZw2Lp/8n7UVR 27rW/mP+P9nWer+vvmdttiNF34j+VaiiI5MlMAkYuZj9j3spa998tVryPyPdkLUW TWThDLdDKC6yN+/9iCkxUZmi3aDkA1kR3kvBurBQ7TR8w/P1SBZpH6KrOrPjZRFA PwL9zv4h6Ciy22e4lB6vvn6xdVr/joGJqUVoYLlx2ZeRncadN1GsAbv3ez1Hlhrj SFaIPawKn1ip4FS7n4Y0/KHbWw== -----END CERTIFICATE-----Generated at Wed Mar 11 12:50:29 2026 by rpki-client