$ rpki-client -vvf rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/0208B39E601E11F1B4F202588C47A888.roa File: 0208B39E601E11F1B4F202588C47A888.roa (raw, json) Hash identifier: dZXspaelPSf6p7zRYrOdmCIidl6IgNDXHd3ZtaJRbVk= Subject key identifier: 4F:D5:7F:DC:64:6C:2D:3B:A7:5C:AF:96:68:FF:A6:48:25:5A:6F:8B Certificate issuer: /CN=A915F1EE/serialNumber=40AD984AAB599C8EFCE5FA0B3E65D1C436962E9A Certificate serial: 02 Authority key identifier: 40:AD:98:4A:AB:59:9C:8E:FC:E5:FA:0B:3E:65:D1:C4:36:96:2E:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/0208B39E601E11F1B4F202588C47A888.roa Signing time: Thu 04 Jun 2026 14:02:22 +0000 ROA not before: Thu 04 Jun 2026 14:02:22 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 133365 IP address blocks: 2402:60e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.crl rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 09:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F1EE, serialNumber=40AD984AAB599C8EFCE5FA0B3E65D1C436962E9A Validity Not Before: Jun 4 14:02:22 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a21856e-7ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:f3:52:64:3b:e9:6e:5a:3c:77:ee:ec:1b: 95:df:42:b1:be:5c:eb:e3:74:19:f0:5a:b8:85:30: ce:5a:96:20:b0:4e:e7:d6:e9:22:f1:b1:ce:7e:15: 00:12:c0:97:48:86:aa:65:78:69:d0:f9:4e:61:0b: 6a:89:40:c2:bc:a0:94:c8:7c:9b:3f:ba:ab:0f:d6: 37:73:43:e1:4f:f0:55:1f:d4:14:77:f9:fb:a9:8e: 6b:f8:d0:72:d0:34:e5:f8:c0:7a:38:7b:c7:13:bb: 4d:24:6c:ba:61:1e:dd:f4:c2:80:11:da:f8:1e:87: 89:76:85:e4:5e:31:1f:48:1e:e5:84:35:3f:77:65: f3:27:fb:ec:c7:7c:db:bd:eb:70:87:0f:5f:26:b1: 26:88:2a:0c:ad:e2:dc:25:1a:d9:3c:f9:99:36:50: 31:82:aa:ae:82:15:eb:fb:db:35:44:3d:03:b6:05: 91:f5:85:1a:84:c2:20:4c:b4:09:8d:60:c4:6c:ff: 21:ee:ce:97:bf:08:39:42:9d:7e:af:ad:86:c5:df: 66:99:7d:4d:1b:32:69:d6:a5:7f:c7:05:03:7d:4b: ad:83:99:2c:a6:29:06:8f:29:63:a2:2a:c6:b2:30: d8:a5:cd:74:76:97:b7:6e:c7:6b:2b:a5:50:df:2a: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D5:7F:DC:64:6C:2D:3B:A7:5C:AF:96:68:FF:A6:48:25:5A:6F:8B X509v3 Authority Key Identifier: keyid:40:AD:98:4A:AB:59:9C:8E:FC:E5:FA:0B:3E:65:D1:C4:36:96:2E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/0208B39E601E11F1B4F202588C47A888.roa sbgp-ipAddrBlock: critical IPv6: 2402:60e0::/32 Signature Algorithm: sha256WithRSAEncryption 56:33:83:e7:f7:7c:d6:6e:96:df:d9:96:2b:d2:8e:3f:21:58: f6:6e:a6:44:7d:86:03:dc:60:f0:d6:9e:f2:57:94:83:24:33: 18:f0:b3:52:2f:2c:f7:93:e1:20:31:c3:39:b9:cc:c7:ec:81: 77:56:13:1b:e4:cb:dc:e6:42:44:d7:f4:f4:76:d8:40:70:e4: 27:1d:cb:50:42:62:a4:16:ab:cf:87:c6:bd:c0:b1:c0:0f:e5: 1d:ef:e4:da:ae:f6:87:4e:4a:1a:bc:21:00:63:e5:c5:29:5e: ab:e9:be:3a:3d:dc:55:1f:c4:0c:40:41:0b:23:9a:2d:f1:6e: 9e:35:60:44:8e:eb:8d:26:07:16:40:d8:5b:62:05:57:e6:f7: 6c:a4:91:c4:48:04:cb:f4:2b:26:16:91:4b:39:c0:f6:c5:bf: 8b:b6:d5:b5:a3:a1:d3:2a:c4:17:56:04:2a:6a:58:3d:f2:2c: 90:5c:11:42:04:ad:73:16:65:16:02:dd:46:91:50:a3:63:13: 4b:72:45:bd:ef:90:e2:db:bf:02:07:a1:09:54:f9:0a:fa:44: 55:26:03:31:f4:85:ac:e7:ee:c5:c3:ff:44:b7:75:f0:79:b8: b8:f8:3b:24:36:32:fa:d5:8a:11:d0:09:97:89:e2:26:02:fc: db:51:4e:d4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RjFFRTExMC8GA1UEBRMoNDBBRDk4NEFBQjU5OUM4RUZDRTVGQTBCM0U2NUQxQzQz Njk2MkU5QTAeFw0yNjA2MDQxNDAyMjJaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMjE4NTZlLTdmZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/EvNSZDvpblo8d+7sG5XfQrG+XOvjdBnwWriFMM5aliCwTufW6SLxsc5+FQAS wJdIhqpleGnQ+U5hC2qJQMK8oJTIfJs/uqsP1jdzQ+FP8FUf1BR3+fupjmv40HLQ NOX4wHo4e8cTu00kbLphHt30woAR2vgeh4l2heReMR9IHuWENT93ZfMn++zHfNu9 63CHD18msSaIKgyt4twlGtk8+Zk2UDGCqq6CFev72zVEPQO2BZH1hRqEwiBMtAmN YMRs/yHuzpe/CDlCnX6vrYbF32aZfU0bMmnWpX/HBQN9S62DmSymKQaPKWOiKsay MNilzXR2l7dux2srpVDfKvVNAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUT9V/3GRs LTunXK+WaP+mSCVab4swHwYDVR0jBBgwFoAUQK2YSqtZnI785foLPmXRxDaWLpow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGMUVFLzlGOTAyRkM2NjAx RDExRjFBRDcwQTAzNjhDNDdBODg4L1FLMllTcXRabkk3ODVmb0xQbVhSeERhV0xw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUsyWVNxdFpuSTc4NWZvTFBtWFJ4RGFXTHBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjFFRS85RjkwMkZDNjYwMUQxMUYxQUQ3MEEwMzY4QzQ3QTg4OC8wMjA4QjM5RTYw MUUxMUYxQjRGMjAyNTg4QzQ3QTg4OC5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAmDgMA0GCSqGSIb3DQEBCwUAA4IBAQBWM4Pn93zWbpbf2ZYr0o4/ IVj2bqZEfYYD3GDw1p7yV5SDJDMY8LNSLyz3k+EgMcM5uczH7IF3VhMb5Mvc5kJE 1/T0dthAcOQnHctQQmKkFqvPh8a9wLHAD+Ud7+TarvaHTkoavCEAY+XFKV6r6b46 PdxVH8QMQEELI5ot8W6eNWBEjuuNJgcWQNhbYgVX5vdspJHESATL9CsmFpFLOcD2 xb+LttW1o6HTKsQXVgQqalg98iyQXBFCBK1zFmUWAt1GkVCjYxNLckW975Di278C B6EJVPkK+kRVJgMx9IWs5+7Fw/9Et3Xwebi4+DskNjL61YoR0AmXieImAvzbUU7U -----END CERTIFICATE-----Generated at Sun Jun 14 04:11:13 2026 by rpki-client