$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/A20C3500BE6811EEBFF35870C4F9AE02.roa File: A20C3500BE6811EEBFF35870C4F9AE02.roa (raw, json) Hash identifier: C3yWvj3O2esI+T7iQpDge9me4mTghAYwQIvO//nNI9s= Subject key identifier: B1:34:69:0F:AE:A3:9B:19:F4:54:03:4E:50:EE:CB:B7:7B:B9:E6:FC Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: 0194 Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/A20C3500BE6811EEBFF35870C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:42:45 +0000 ROA not before: Fri 17 Jan 2025 04:17:43 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152447 IP address blocks: 2401:7ae0::/32 maxlen: 32 2401:7ae0::/36 maxlen: 36 2401:7ae0:4000::/36 maxlen: 36 2401:7ae0:4003::/48 maxlen: 48 2401:7ae0:8000::/36 maxlen: 36 2401:7ae0:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Validity Not Before: Jan 17 04:17:43 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3dfe5-03ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:93:b9:66:fa:21:af:eb:b0:ad:45:34:ba: b5:ed:a2:bd:b7:7d:3f:49:01:22:bc:ac:a6:00:72: c8:f9:62:45:7b:d7:a0:a4:3a:44:00:b9:87:62:de: 79:76:fe:b6:fc:43:29:aa:d4:fc:35:bc:90:20:16: df:d6:e6:ce:57:11:73:b3:d6:6b:0a:19:0a:fc:1c: 8d:fb:fd:69:17:b2:12:1a:e5:6a:b0:13:4d:a0:49: 3e:5e:c1:3b:29:64:9a:4b:36:61:ad:93:45:d0:14: 0e:2d:ee:36:c3:0f:8b:8b:45:38:d6:a5:77:48:c6: 32:df:d8:58:96:5e:6b:bc:24:52:65:8b:3f:3f:d1: a0:33:1c:b4:dd:75:9a:0d:b6:72:6c:24:f1:cb:f5: 09:ab:06:3f:e0:8d:3c:4e:48:09:75:81:cc:47:8a: 3f:6d:ea:b3:8d:39:56:93:2c:9e:25:ca:b5:5b:58: 15:f6:22:77:21:11:4f:60:ab:77:0f:14:73:91:f8: 0c:41:cf:4c:a5:c7:02:df:12:c6:00:fa:b7:fc:c3: 3c:c7:14:ed:85:12:8f:97:03:66:e1:b6:d1:e3:c8: 3f:2c:a5:34:7a:4c:28:48:0b:19:f0:f1:75:ed:93: 81:36:05:37:cd:2e:57:91:e7:6a:cc:df:96:d5:5a: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:34:69:0F:AE:A3:9B:19:F4:54:03:4E:50:EE:CB:B7:7B:B9:E6:FC X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/A20C3500BE6811EEBFF35870C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:7ae0::/32 Signature Algorithm: sha256WithRSAEncryption 41:c4:36:9e:bd:02:26:af:e6:e7:8f:22:29:58:83:b4:1b:30: 88:d1:3f:61:9e:fd:a3:89:67:42:ef:5c:7f:02:aa:62:91:7a: 79:44:d1:a3:78:20:3d:ec:57:1d:ac:03:30:9d:03:da:c6:35: ad:53:13:57:00:12:19:78:a5:aa:2e:00:37:0d:7c:25:3a:ef: 1a:db:2f:15:08:2c:80:bf:6d:22:e1:3e:3c:57:8f:43:63:19: 63:7f:15:d6:f8:e0:fd:94:bd:5e:f4:c9:4f:1c:40:94:df:e1: 42:87:f2:20:fd:8a:7f:44:89:9a:e1:25:e4:68:fc:29:e6:04: 6b:8d:26:2c:74:84:26:b7:92:26:32:38:cf:d9:01:96:c6:10: f8:36:d9:6e:8d:19:97:ee:4d:7f:bf:d5:3e:1e:ef:05:e9:21: a1:8f:f0:7a:25:0b:4d:7e:49:ae:15:4d:d1:d6:41:88:fc:32: b2:1e:66:85:69:b1:37:1c:ff:d7:0a:07:18:79:b1:9c:0b:f2: 05:ee:a0:fc:14:de:9e:09:12:3e:12:d3:7d:0b:04:1f:7f:95: a0:7c:e9:2c:b0:51:f2:76:88:da:6b:9f:60:bf:78:eb:6c:45: f6:72:97:37:51:21:1b:36:c7:6c:e6:7b:ce:5a:2f:b2:89:fc: 3d:d1:66:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD QjM1MjYxMTAwHhcNMjUwMTE3MDQxNzQzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGZlNS0wM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgOTuWb6Ia/rsK1FNLq17aK9t30/SQEivKymAHLI+WJFe9egpDpEALmHYt55 dv62/EMpqtT8NbyQIBbf1ubOVxFzs9ZrChkK/ByN+/1pF7ISGuVqsBNNoEk+XsE7 KWSaSzZhrZNF0BQOLe42ww+Li0U41qV3SMYy39hYll5rvCRSZYs/P9GgMxy03XWa DbZybCTxy/UJqwY/4I08TkgJdYHMR4o/beqzjTlWkyyeJcq1W1gV9iJ3IRFPYKt3 DxRzkfgMQc9MpccC3xLGAPq3/MM8xxTthRKPlwNm4bbR48g/LKU0ekwoSAsZ8PF1 7ZOBNgU3zS5XkedqzN+W1VqYBQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFLE0aQ+u o5sZ9FQDTlDuy7d7ueb8MB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0MwN0EvRkIxODI5OThCRTY3MTFFRUIzM0M2RDZFQzRGOUFFMDIvQTIwQzM1MDBC RTY4MTFFRUJGRjM1ODcwQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAF64DANBgkqhkiG9w0BAQsFAAOCAQEAQcQ2nr0CJq/m548iKViD tBswiNE/YZ79o4lnQu9cfwKqYpF6eUTRo3ggPexXHawDMJ0D2sY1rVMTVwASGXil qi4ANw18JTrvGtsvFQgsgL9tIuE+PFePQ2MZY38V1vjg/ZS9XvTJTxxAlN/hQofy IP2Kf0SJmuEl5Gj8KeYEa40mLHSEJreSJjI4z9kBlsYQ+DbZbo0Zl+5Nf7/VPh7v BekhoY/weiULTX5JrhVN0dZBiPwysh5mhWmxNxz/1woHGHmxnAvyBe6g/BTengkS PhLTfQsEH3+VoHzpLLBR8naI2mufYL9462xF9nKXN1EhGzbHbOZ7zlovson8PdFm mg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:30 2026 by rpki-client