$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/20B02A7A2C6D11EF9E3D5230C4F9AE02.roa File: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (raw, json) Hash identifier: gDvhZeKRyXcv6nLkaGGw/qTmt1bBaRjor9ch6Q6/OZw= Subject key identifier: FA:F9:21:97:12:86:61:1E:CB:10:66:CA:96:FE:25:9A:51:54:19:F8 Certificate issuer: /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Certificate serial: 01B4 Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/20B02A7A2C6D11EF9E3D5230C4F9AE02.roa Signing time: Thu 13 Aug 2026 04:54:20 +0000 ROA not before: Thu 13 Aug 2026 04:54:20 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 138933 IP address blocks: 2401:a820::/32 maxlen: 32 2401:a820:22::/48 maxlen: 48 2401:a820:100::/48 maxlen: 48 2401:a820:200::/48 maxlen: 48 2401:a820:300::/48 maxlen: 48 2401:a820:400::/48 maxlen: 48 2401:a820:500::/48 maxlen: 48 2401:a820:600::/48 maxlen: 48 2401:a820:700::/48 maxlen: 48 2401:a820:800::/48 maxlen: 48 2401:a820:900::/48 maxlen: 48 2401:a820:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23, serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Validity Not Before: Aug 13 04:54:20 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a7d4dfc-e46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ec:bd:8c:b3:98:24:5d:8f:27:66:4d:50:cb: 00:c6:26:ea:3b:fc:d1:79:89:51:10:30:fc:26:4f: 09:da:d3:74:e4:1f:36:9a:fa:93:2d:1e:76:86:ef: 7a:c7:44:78:21:97:7a:36:a5:49:67:5f:24:cd:db: d0:0f:fa:c4:1b:fc:f5:45:af:ff:ba:c1:89:b3:9b: b9:21:5c:51:02:3e:9f:eb:8a:df:52:6d:f0:db:19: 95:18:47:1f:98:fd:d8:aa:70:9d:b9:b2:32:0a:32: 24:3e:36:01:dd:00:26:c2:0e:ab:ec:c4:d6:ea:65: 4e:4f:6f:06:b5:cc:63:8b:38:e7:33:49:8e:e6:f7: 77:5d:56:3f:5b:e2:c6:30:2a:95:7e:75:e7:73:3a: 7c:91:96:6e:81:8a:0f:13:4b:f0:46:48:6c:2c:9d: 5c:66:9b:38:79:ec:8e:1c:cb:0b:f4:05:0c:23:d8: 78:ed:6e:b6:f7:31:14:49:03:cf:7a:4c:f9:06:05: ab:f0:38:82:7f:fc:21:26:9b:e0:dd:48:f4:71:8d: 76:27:a5:36:22:3f:1f:8e:65:7b:20:e4:45:45:f9: df:ef:2d:95:77:24:ce:81:ae:f8:6e:e2:10:53:a3: a5:db:83:0e:80:58:62:ae:55:0f:61:90:bc:8d:f3: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F9:21:97:12:86:61:1E:CB:10:66:CA:96:FE:25:9A:51:54:19:F8 X509v3 Authority Key Identifier: keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/20B02A7A2C6D11EF9E3D5230C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:a820::/32 Signature Algorithm: sha256WithRSAEncryption 3e:45:6c:a8:1d:c0:ea:dd:c6:c1:1e:52:6e:f2:bc:26:bf:40: 62:b7:1a:c5:db:eb:e8:85:84:18:73:57:9f:66:8c:e1:fa:8f: 36:5c:5c:af:41:f4:9e:0c:3f:e6:df:39:ce:6f:95:f5:fe:ea: e9:db:63:5e:f7:16:7b:23:d9:48:ec:fe:10:af:62:97:cf:02: 44:0b:74:fb:3c:e1:e3:51:13:a5:ca:eb:f0:0c:25:46:88:c4: 7d:3b:cb:d5:5c:d4:95:a4:b0:57:b1:62:85:14:68:e9:1e:d2: 37:e8:ea:db:fc:bb:3d:25:e7:ed:0d:56:29:31:87:57:03:e8: 6c:65:1e:09:ef:22:5d:0c:1f:12:73:13:ee:9c:49:3e:8f:d1: 66:05:81:66:1b:61:88:38:64:9c:52:d4:cd:21:57:45:39:f7: 39:c7:a5:6a:18:a1:84:d4:b4:f0:30:eb:1c:8e:9f:77:8a:62: 89:4d:79:0f:e2:a7:da:98:ad:45:1e:a5:3b:3e:35:f7:24:8e: d6:23:81:6f:6f:a4:6b:c0:27:17:01:10:f1:b5:8e:07:95:e5: 8c:bf:a6:7b:cd:c8:24:86:ea:5d:a7:f3:38:9c:f8:b8:f5:42: 10:e1:e0:fd:88:6a:19:5d:72:69:24:0d:bd:76:35:99:07:2f: e9:6b:8a:77 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKEU4ODc2QjUxQUIyQjE3NzQ0MENENEM0Q0QyRTRGMEE1 OThFMDM4MUMwHhcNMjYwODEzMDQ1NDIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdkNGRmYy1lNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uy9jLOYJF2PJ2ZNUMsAxibqO/zReYlREDD8Jk8J2tN05B82mvqTLR52hu96 x0R4IZd6NqVJZ18kzdvQD/rEG/z1Ra//usGJs5u5IVxRAj6f64rfUm3w2xmVGEcf mP3YqnCdubIyCjIkPjYB3QAmwg6r7MTW6mVOT28GtcxjizjnM0mO5vd3XVY/W+LG MCqVfnXnczp8kZZugYoPE0vwRkhsLJ1cZps4eeyOHMsL9AUMI9h47W629zEUSQPP ekz5BgWr8DiCf/whJpvg3Uj0cY12J6U2Ij8fjmV7IORFRfnf7y2VdyTOga74buIQ U6Ol24MOgFhirlUPYZC8jfOlWQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFPr5IZcS hmEeyxBmypb+JZpRVBn4MB8GA1UdIwQYMBaAFOiHa1GrKxd0QM1MTNLk8KWY4Dgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zQTcyQUJGQTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi82SWRyVWFzckYzUkF6VXhNMHVUd3BaamdP QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJZHJVYXNyRjNSQXpVeE0wdVR3cFpqZ09Cdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFMjMvM0E3MkFCRkEyQzZDMTFFRkEzNDY5NDJEQzRGOUFFMDIvMjBCMDJBN0Ey QzZEMTFFRjlFM0Q1MjMwQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAGoIDANBgkqhkiG9w0BAQsFAAOCAQEAPkVsqB3A6t3GwR5SbvK8 Jr9AYrcaxdvr6IWEGHNXn2aM4fqPNlxcr0H0ngw/5t85zm+V9f7q6dtjXvcWeyPZ SOz+EK9il88CRAt0+zzh41ETpcrr8AwlRojEfTvL1VzUlaSwV7FihRRo6R7SN+jq 2/y7PSXn7Q1WKTGHVwPobGUeCe8iXQwfEnMT7pxJPo/RZgWBZhthiDhknFLUzSFX RTn3OcelahihhNS08DDrHI6fd4piiU15D+Kn2pitRR6lOz419ySO1iOBb2+ka8An FwEQ8bWOB5XljL+me83IJIbqXafzOJz4uPVCEOHg/YhqGV1yaSQNvXY1mQcv6WuK dw== -----END CERTIFICATE-----Generated at Wed Sep 23 02:59:04 2026 by rpki-client