$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/3CB0977C608811F1B5BB4F7F6F47A888.roa File: 3CB0977C608811F1B5BB4F7F6F47A888.roa (raw, json) Hash identifier: obvUvp1oAFlcd8oLgkACJL5wq5dkzfXfQHSgoe/uzAw= Subject key identifier: 54:2A:D2:5C:78:6A:D7:00:97:46:38:28:F4:76:3E:89:EA:C1:44:83 Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Certificate serial: 0DEB Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/3CB0977C608811F1B5BB4F7F6F47A888.roa Signing time: Fri 05 Jun 2026 02:42:48 +0000 ROA not before: Fri 05 Jun 2026 02:42:48 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 38587 IP address blocks: 2400:a980:4000::/40 maxlen: 40 2400:a980:40f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Validity Not Before: Jun 5 02:42:48 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a2237a8-cf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:26:e8:54:d4:62:7f:67:72:c0:fa:fe:e2: e7:1d:7c:2c:76:94:1e:e1:08:15:64:9b:36:a4:ca: 03:d0:18:2b:3a:3f:03:7e:5e:5e:69:78:54:ee:4f: 8f:34:3e:a5:40:0e:8b:31:a6:6d:94:41:9b:f0:05: 28:7c:0d:b7:15:0a:c0:83:97:8a:9e:aa:ff:33:2a: 50:7e:81:e6:fd:46:40:2c:ba:85:9f:6b:2b:e2:c8: d5:28:16:df:3a:9a:7e:87:3c:e7:aa:20:b0:e5:06: 33:4c:42:25:30:d6:fd:44:2f:b2:33:2f:40:c3:90: 40:d0:48:ff:f5:65:90:8c:05:8f:65:82:72:4d:f3: 8b:aa:6e:e5:e1:61:4e:1f:d0:1f:d8:24:3a:61:86: 37:f2:89:82:f3:84:23:64:98:a0:89:39:39:e3:2d: 0c:a5:ad:2e:ce:72:c3:92:6f:ea:03:73:1d:f3:ed: 6b:1e:4d:b5:34:af:36:e7:6c:5a:2a:51:55:23:92: 55:47:29:4f:17:2d:94:ba:5c:65:59:7a:3b:e0:1b: bf:6a:b1:7b:a9:b9:7e:bc:3e:74:0c:f4:c6:07:f9: 8e:f3:d6:b9:32:c8:08:0c:ef:b3:f8:2f:62:f0:9a: 34:03:e8:cd:7c:f5:fd:7f:40:a6:41:02:d8:21:6b: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2A:D2:5C:78:6A:D7:00:97:46:38:28:F4:76:3E:89:EA:C1:44:83 X509v3 Authority Key Identifier: keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/3CB0977C608811F1B5BB4F7F6F47A888.roa sbgp-ipAddrBlock: critical IPv6: 2400:a980:4000::/40 Signature Algorithm: sha256WithRSAEncryption 27:e7:b7:c3:be:61:44:4d:d2:a3:d9:fe:fc:26:1c:51:1d:92: 37:04:6c:e7:f4:41:15:f9:43:7e:4b:49:7d:c5:26:ad:13:f0: 4c:e5:a3:fd:ff:61:ce:c9:80:24:04:a1:4e:07:46:6d:bb:38: 60:1b:8a:16:02:06:cd:3b:be:33:41:37:58:b7:90:f3:fe:f9: 3d:23:6a:33:fc:51:00:ff:0a:63:dc:ae:3b:6c:cd:a3:f5:4e: 1e:8e:52:8f:84:c6:f8:0f:b0:e8:a1:87:b7:2e:5d:e4:91:af: a2:6f:ab:62:cd:fe:78:65:3c:8f:57:f3:c2:ca:94:78:70:8c: b1:b2:c5:9c:17:25:2e:d7:0c:48:51:ba:93:39:fa:88:33:6a: 52:89:03:48:ed:08:3c:e7:57:22:8a:75:b0:9b:e0:c4:80:f6: e9:81:3a:40:8d:5a:a1:48:08:b8:a3:4b:6d:2b:ef:ac:89:c1: 07:98:98:e6:69:b3:62:11:b9:c2:9a:2b:86:5c:62:76:05:ec: 48:16:f6:ea:5c:2e:68:b8:df:44:22:8a:a5:94:52:7a:61:7f: c8:7d:5e:a0:ce:ae:b2:f6:8e:1e:ae:a4:92:df:f6:08:47:83: 39:b5:62:91:1e:c2:d2:2e:34:33:1b:9c:9c:97:06:c0:a8:8e: 70:b8:89:14 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgICDeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTIxMTAvBgNVBAUTKDY4ODc0MjU0NTQ3QjM0QjNBRjg5RERCNUI0OEQwMjAy M0Y1N0FFMTcwHhcNMjYwNjA1MDI0MjQ4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyMzdhOC1jZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vgm6FTUYn9ncsD6/uLnHXwsdpQe4QgVZJs2pMoD0BgrOj8Dfl5eaXhU7k+P ND6lQA6LMaZtlEGb8AUofA23FQrAg5eKnqr/MypQfoHm/UZALLqFn2sr4sjVKBbf Opp+hzznqiCw5QYzTEIlMNb9RC+yMy9Aw5BA0Ej/9WWQjAWPZYJyTfOLqm7l4WFO H9Af2CQ6YYY38omC84QjZJigiTk54y0Mpa0uznLDkm/qA3Md8+1rHk21NK8252xa KlFVI5JVRylPFy2UulxlWXo74Bu/arF7qbl+vD50DPTGB/mO89a5MsgIDO+z+C9i 8Jo0A+jNfPX9f0CmQQLYIWvflwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFFQq0lx4 atcAl0Y4KPR2PonqwUSDMB8GA1UdIwQYMBaAFGiHQlRUezSzr4ndtbSNAgI/V64X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1Mi8xRDRCNDRFRURC NkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05MT3ZpZDIxdEkwQ0FqOVhy aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJZENWRlI3TkxPdmlkMjF0STBDQWo5WHJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhENTIvMUQ0QjQ0RUVEQjZCMTFFOTkyOTg3RjQxQzRGOUFFMDIvM0NCMDk3N0M2 MDg4MTFGMUI1QkI0RjdGNkY0N0E4ODgucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJACpgEAwDQYJKoZIhvcNAQELBQADggEBACfnt8O+YURN0qPZ/vwm HFEdkjcEbOf0QRX5Q35LSX3FJq0T8Ezlo/3/Yc7JgCQEoU4HRm27OGAbihYCBs07 vjNBN1i3kPP++T0jajP8UQD/CmPcrjtszaP1Th6OUo+ExvgPsOihh7cuXeSRr6Jv q2LN/nhlPI9X88LKlHhwjLGyxZwXJS7XDEhRupM5+ogzalKJA0jtCDznVyKKdbCb 4MSA9umBOkCNWqFICLijS20r76yJwQeYmOZps2IRucKaK4ZcYnYF7EgW9upcLmi4 30QiiqWUUnphf8h9XqDOrrL2jh6upJLf9ghHgzm1YpEewtIuNDMbnJyXBsCojnC4 iRQ= -----END CERTIFICATE-----Generated at Sat Jun 13 08:23:18 2026 by rpki-client