$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa File: E367308E8D8811EDB3C13D6CC4F9AE02.roa (raw, json) Hash identifier: +sR0reUxc7B8aN9ftONoJd9EcDxqs4AGo23fd7H99yU= Subject key identifier: 64:B7:E0:FC:51:26:64:40:51:5B:15:D8:13:D1:3D:10:B9:84:29:99 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 36A5 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa Signing time: Wed 30 Sep 2026 16:17:16 +0000 ROA not before: Wed 30 Sep 2026 16:17:16 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38620 IP address blocks: 2409::/40 maxlen: 40 240a:e000::/21 maxlen: 22 240a:e800::/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13989 (0x36a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Sep 30 16:17:16 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd360c-80ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:96:61:de:af:4b:01:ef:91:b3:db:82:2c: 78:20:24:99:e2:a2:1b:54:d2:3a:14:e9:5f:92:62: 78:e8:48:42:76:99:e6:ca:3d:b4:c3:df:8f:26:b4: 38:0f:5d:b5:1f:d4:e6:b7:27:2f:ed:18:d1:72:cf: 21:96:c7:5c:8c:fe:7c:63:a0:d3:7a:7d:0e:da:05: a7:d4:c2:44:0d:aa:bf:9a:3c:1f:c7:52:bd:fe:ec: 74:b7:b8:a9:81:67:90:80:bb:68:bb:82:2c:e7:57: 4d:0d:d6:fa:a0:d6:95:55:0b:13:9c:72:a0:4c:05: ae:cc:3b:38:ed:94:22:83:8e:f9:86:1a:74:48:3d: 75:96:4c:3c:3a:79:99:5c:d2:3b:92:20:7e:09:b1: 76:34:ae:42:29:ec:cf:57:bd:06:92:f6:0e:d4:d3: 46:0d:b6:e5:f7:d0:8d:a1:17:a1:b7:34:cb:b7:42: f9:61:3f:93:9a:05:7f:fe:af:22:86:ba:be:35:38: 30:46:aa:1b:7d:d0:a4:ca:26:df:a6:e7:54:e9:17: 69:35:af:86:17:67:f6:bc:18:d8:ae:61:96:80:5c: eb:74:f5:54:5b:e1:0e:03:72:22:50:bd:16:e9:55: 5f:f7:fb:72:0b:66:7a:10:cc:8a:ac:19:68:6e:86: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B7:E0:FC:51:26:64:40:51:5B:15:D8:13:D1:3D:10:B9:84:29:99 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2409::/40 240a:e000::/20 Signature Algorithm: sha256WithRSAEncryption 74:8f:66:3f:64:4c:1b:c0:92:7e:c3:9f:4b:9b:86:5b:c1:b9: 9e:2c:be:93:58:03:17:74:49:cc:ad:f5:63:31:4d:10:aa:2a: 91:b4:e2:f1:b5:3a:57:bf:b6:18:0b:20:64:1c:77:2c:41:ce: 2c:e0:a1:71:d2:7d:91:45:0c:dc:8f:32:a0:07:61:a7:5f:e2: 1c:ec:06:b9:71:e7:6b:59:b4:ac:39:9f:86:e3:75:9b:6f:49: 8b:2b:85:76:86:29:11:41:61:6f:11:cc:86:36:81:1b:a8:37: 00:26:e3:63:68:5e:fb:10:73:40:54:2b:73:10:e5:de:03:f7: d7:f2:b0:44:fc:4f:b3:19:77:14:cf:da:b8:80:29:a5:c6:bc: f8:e9:1b:a8:ea:35:6a:28:cf:dd:ed:ed:67:a9:3f:a5:6e:73: dd:42:1c:94:49:1b:73:da:01:df:df:70:c8:54:94:3b:25:37: 37:30:d8:4a:b3:10:f1:20:08:73:97:04:d7:fd:24:a9:77:26: c3:ec:12:53:8f:fe:ae:a9:d4:3d:12:ae:a0:94:f7:47:50:08: fd:f0:13:99:b1:d6:e3:98:d7:33:14:a3:b3:11:05:51:ef:89: 9d:95:9a:9a:39:80:55:95:66:de:92:42:d6:2d:a5:09:ca:a5: 18:f7:c3:b6 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICNqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjYwOTMwMTYxNzE2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzYwYy04MGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAWWYd6vSwHvkbPbgix4ICSZ4qIbVNI6FOlfkmJ46EhCdpnmyj20w9+PJrQ4 D121H9Tmtycv7RjRcs8hlsdcjP58Y6DTen0O2gWn1MJEDaq/mjwfx1K9/ux0t7ip gWeQgLtou4Is51dNDdb6oNaVVQsTnHKgTAWuzDs47ZQig475hhp0SD11lkw8OnmZ XNI7kiB+CbF2NK5CKezPV70GkvYO1NNGDbbl99CNoRehtzTLt0L5YT+TmgV//q8i hrq+NTgwRqobfdCkyibfpudU6RdpNa+GF2f2vBjYrmGWgFzrdPVUW+EOA3IiUL0W 6VVf9/tyC2Z6EMyKrBloboaPNwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFGS34PxR JmRAUVsV2BPRPRC5hCmZMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvRTM2NzMwOEU4 RDg4MTFFREIzQzEzRDZDQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAAjAOAwYAJAkAAAADBAQkCuAwDQYJKoZIhvcNAQELBQADggEBAHSPZj9kTBvA kn7Dn0ubhlvBuZ4svpNYAxd0Scyt9WMxTRCqKpG04vG1Ole/thgLIGQcdyxBzizg oXHSfZFFDNyPMqAHYadf4hzsBrlx52tZtKw5n4bjdZtvSYsrhXaGKRFBYW8RzIY2 gRuoNwAm42NoXvsQc0BUK3MQ5d4D99fysET8T7MZdxTP2riAKaXGvPjpG6jqNWoo z93t7WepP6Vuc91CHJRJG3PaAd/fcMhUlDslNzcw2EqzEPEgCHOXBNf9JKl3JsPs ElOP/q6p1D0SrqCU90dQCP3wE5mx1uOY1zMUo7MRBVHviZ2Vmpo5gFWVZt6SQtYt pQnKpRj3w7Y= -----END CERTIFICATE-----Generated at Sun Oct 11 07:32:34 2026 by rpki-client