$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/E98F15362B3811EF926F1555C4F9AE02.roa File: E98F15362B3811EF926F1555C4F9AE02.roa (raw, json) Hash identifier: 6QSIJmWvvqqKmVUGIf2JJLiSEAGvWSmGSyg7Gl9k5fE= Subject key identifier: F0:5E:ED:95:70:86:A9:E5:B2:6D:8D:BE:81:C4:6E:16:03:21:82:20 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 0278 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/E98F15362B3811EF926F1555C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:52:21 +0000 ROA not before: Sun 11 May 2025 02:31:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 61112 IP address blocks: 2400:e3e0:6900::/40 maxlen: 48 2400:e3e0:f5a9::/48 maxlen: 48 2400:e3e0:f5aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 01:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: May 11 02:31:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a47cd5-3a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:c1:a9:b2:bc:27:12:5d:48:9c:15:42:54: 72:ea:55:83:52:45:a8:a6:10:4a:63:97:22:9e:70: 50:44:8c:90:16:72:6e:69:5a:ec:31:08:e4:a1:4c: d2:b3:13:34:a9:50:7a:8a:bb:06:f8:25:af:1f:ed: 64:56:24:1b:fa:b0:1e:7a:aa:36:0f:41:58:7d:b3: 5a:f5:75:99:f7:a5:43:7c:6f:61:90:67:aa:73:f5: d4:28:12:82:34:56:95:6c:5d:ec:5f:db:30:c4:22: e8:58:66:ab:fc:99:56:e2:83:55:58:19:04:62:a9: 3c:22:da:22:b7:f2:80:15:0a:ed:b7:80:84:6d:e4: d1:65:9a:66:cd:38:62:70:a5:2b:8c:65:fb:51:f8: a5:4a:68:81:12:df:df:ba:f8:89:ac:26:fa:45:5e: 5e:e8:2f:e0:25:9f:9a:ed:a0:b9:01:36:cd:6e:60: 96:e8:19:6c:e6:0c:d2:9f:1d:46:38:a6:51:9d:7f: e5:7c:07:67:95:c0:e4:64:71:08:07:a5:0e:36:aa: 20:d5:6a:a8:f7:e5:e3:5d:23:1d:43:de:30:ef:ec: b9:84:a9:d9:2c:6f:0a:9f:ac:64:ed:b8:19:13:7a: ab:82:09:d8:78:b8:6c:16:67:e1:8f:f9:2c:87:9a: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5E:ED:95:70:86:A9:E5:B2:6D:8D:BE:81:C4:6E:16:03:21:82:20 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/E98F15362B3811EF926F1555C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:6900::/40 2400:e3e0:f5a9::-2400:e3e0:f5aa:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 26:17:ed:e7:4b:47:4a:06:7c:40:7b:15:18:8e:eb:49:df:b6: 93:f5:23:62:61:d1:53:c6:b1:7e:d7:a5:9f:a0:fd:61:f9:ea: d0:c3:dc:22:e7:f9:d0:d0:89:61:bd:ad:0e:29:84:a2:22:13: 31:6b:23:38:aa:02:e4:dd:75:a5:ff:cf:6f:09:7e:c5:22:66: 33:55:1e:ca:12:2a:5d:35:7b:db:40:84:92:4d:f4:ac:38:e6: bf:8b:3f:80:70:07:ec:2d:64:1c:ab:67:a2:66:1b:10:6d:ae: ac:9f:39:d9:83:84:d0:c1:de:21:f9:ba:02:e8:4b:c1:ed:1c: 39:bb:fb:e9:b1:de:75:b9:39:3c:f3:4b:2b:bc:fe:99:45:95: 9f:24:67:da:77:f3:06:af:a5:5a:db:00:33:82:dd:a8:ff:03: cc:da:ba:7f:fd:38:07:89:84:05:05:3f:b6:dd:fd:0c:e7:0d: 70:a8:d2:0a:58:c9:a4:0e:f8:ab:bb:7e:5b:16:af:31:37:c5: a8:03:18:5a:43:c0:3f:8b:4f:8f:fb:fc:60:ff:45:9d:e5:3b: 90:5b:78:d9:de:51:d6:0b:19:b0:f5:46:b8:75:10:40:e3:04: 50:c0:43:52:6a:8d:38:43:31:5d:90:94:3d:90:e1:86:b7:d2: 09:f9:ce:59 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNTExMDIzMTQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2NkNS0zYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxijBqbK8JxJdSJwVQlRy6lWDUkWophBKY5cinnBQRIyQFnJuaVrsMQjkoUzS sxM0qVB6irsG+CWvH+1kViQb+rAeeqo2D0FYfbNa9XWZ96VDfG9hkGeqc/XUKBKC NFaVbF3sX9swxCLoWGar/JlW4oNVWBkEYqk8Itoit/KAFQrtt4CEbeTRZZpmzThi cKUrjGX7UfilSmiBEt/fuviJrCb6RV5e6C/gJZ+a7aC5ATbNbmCW6Bls5gzSnx1G OKZRnX/lfAdnlcDkZHEIB6UONqog1Wqo9+XjXSMdQ94w7+y5hKnZLG8Kn6xk7bgZ E3qrggnYeLhsFmfhj/ksh5oYSQIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFPBe7ZVw hqnlsm2NvoHEbhYDIYIgMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvRTk4RjE1MzYy QjM4MTFFRjkyNkYxNTU1QzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi BAIAAjAcAwYAJADj4GkwEgMHACQA4+D1qQMHACQA4+D1qjANBgkqhkiG9w0BAQsF AAOCAQEAJhft50tHSgZ8QHsVGI7rSd+2k/UjYmHRU8axfteln6D9Yfnq0MPcIuf5 0NCJYb2tDimEoiITMWsjOKoC5N11pf/Pbwl+xSJmM1UeyhIqXTV720CEkk30rDjm v4s/gHAH7C1kHKtnomYbEG2urJ852YOE0MHeIfm6AuhLwe0cObv76bHedbk5PPNL K7z+mUWVnyRn2nfzBq+lWtsAM4LdqP8DzNq6f/04B4mEBQU/tt39DOcNcKjSCljJ pA74q7t+WxavMTfFqAMYWkPAP4tPj/v8YP9FneU7kFt42d5R1gsZsPVGuHUQQOME UMBDUmqNOEMxXZCUPZDhhrfSCfnOWQ== -----END CERTIFICATE-----Generated at Wed Mar 11 12:51:54 2026 by rpki-client