$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2B04CC143D9F11EEACFF646FC4F9AE02.roa File: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (raw, json) Hash identifier: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE= Subject key identifier: 7D:D7:04:A6:5E:22:6E:18:DF:CA:65:FB:72:63:2F:65:60:9C:78:02 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 1898 Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2B04CC143D9F11EEACFF646FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:42:06 +0000 ROA not before: Mon 22 Dec 2025 17:13:55 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 23738 IP address blocks: 2401:f9c0:fac0::/48 maxlen: 48 2401:f9c0:fac1::/48 maxlen: 48 2401:f9c0:fac2::/48 maxlen: 48 2401:f9c0:fac3::/48 maxlen: 48 2401:f9c0:fac4::/48 maxlen: 48 2401:f9c0:fac5::/48 maxlen: 48 2401:f9c0:fac6::/48 maxlen: 48 2401:f9c0:fac7::/48 maxlen: 48 2401:f9c0:fac8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6296 (0x1898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: Dec 22 17:13:55 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46c5e-c5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:df:05:8b:86:7c:8c:ca:58:43:28:1a:83: 85:fd:6c:0a:6f:49:f3:5c:68:9b:af:35:f7:b0:c4: ae:e8:21:09:41:b9:3d:82:ff:03:1d:b7:07:9a:3e: 84:3d:e9:77:dc:55:0a:34:05:4b:2f:c0:bd:fe:f9: 7d:2b:f2:d8:a5:00:a4:32:0b:7c:8b:e4:d8:33:e4: 5f:40:ae:5b:98:e8:ae:4f:a3:84:6b:d8:28:b7:10: 77:29:a8:51:49:ce:76:3c:55:87:9f:5c:e1:97:b4: 9c:84:be:c1:ba:76:49:4c:0d:8e:61:38:49:fa:ba: 80:89:eb:2e:37:c2:77:ca:e8:6b:8a:dd:18:7e:6b: f9:77:81:c5:25:7b:ce:ac:31:4b:04:3c:b7:c9:e2: 13:d8:ae:26:e1:0f:91:8a:23:b0:57:b1:13:4b:f9: a7:87:43:1e:6f:a9:57:38:ee:ad:a8:79:8d:84:cd: 81:9e:90:cf:06:81:7a:52:55:bc:6b:1f:89:bf:e7: 1c:fa:99:56:04:07:9a:b6:cb:3c:ef:72:42:f4:ae: f8:55:06:86:82:0f:a0:23:0a:0d:16:8d:cf:eb:bf: 24:1a:c3:3d:54:6b:e4:88:e4:98:9f:c2:54:6c:e5: 9f:da:08:35:9e:05:f6:de:70:42:10:ed:f0:13:3b: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D7:04:A6:5E:22:6E:18:DF:CA:65:FB:72:63:2F:65:60:9C:78:02 X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2B04CC143D9F11EEACFF646FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:f9c0:fac0::-2401:f9c0:fac8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 70:c5:3e:9a:19:2b:cd:a0:8e:27:09:bd:23:90:f8:4a:4d:02: 8b:10:86:cf:90:d0:10:93:52:d1:a5:df:07:c6:55:93:72:b6: af:4c:f5:1c:5e:f1:ce:d9:60:a8:06:f1:14:5b:f3:13:38:94: 7a:eb:db:a5:5a:79:50:a0:56:14:a6:8a:53:24:60:4a:cc:b9: a9:b5:cb:f4:81:62:64:df:08:e9:46:9e:f6:76:17:ae:37:30: 5d:c2:62:1b:3f:23:04:35:a5:da:2e:4a:25:ce:b6:21:95:66: da:03:23:ac:44:fe:bf:6e:3d:3f:56:9c:74:57:61:00:67:2a: fc:33:42:ce:d2:fd:0b:80:73:60:97:14:7e:75:1e:1d:06:75: 3c:19:8b:df:a4:93:de:c8:d6:4c:9d:de:a5:0a:06:4c:6e:76: 28:81:7b:9f:bf:f4:98:1d:b8:71:91:81:bd:44:16:a9:3f:f4: 27:4e:23:97:da:61:b6:e8:5b:69:04:af:2f:4a:23:c9:46:87: bb:84:25:83:0d:de:38:12:dc:e6:ed:93:8f:0a:c4:7d:95:9e: 5b:5f:e3:95:ae:7d:2a:07:0e:cb:fd:18:ff:c4:a2:91:3e:78: 06:77:1c:9c:e9:63:f0:6a:3c:3f:9e:03:35:a3:25:d4:b3:eb: 26:df:3f:e0 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICGJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjUxMjIyMTcxMzU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmM1ZS1jNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocXfBYuGfIzKWEMoGoOF/WwKb0nzXGibrzX3sMSu6CEJQbk9gv8DHbcHmj6E Pel33FUKNAVLL8C9/vl9K/LYpQCkMgt8i+TYM+RfQK5bmOiuT6OEa9gotxB3KahR Sc52PFWHn1zhl7SchL7BunZJTA2OYThJ+rqAiesuN8J3yuhrit0Yfmv5d4HFJXvO rDFLBDy3yeIT2K4m4Q+RiiOwV7ETS/mnh0Meb6lXOO6tqHmNhM2BnpDPBoF6UlW8 ax+Jv+cc+plWBAeatss873JC9K74VQaGgg+gIwoNFo3P678kGsM9VGvkiOSYn8JU bOWf2gg1ngX23nBCEO3wEzumRwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFH3XBKZe Im4Y38pl+3JjL2VgnHgCMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEzMUUvQzFGQTA4MkNDOENCMTFFNzkwQTg4MTM4QzRGOUFFMDIvMkIwNENDMTQz RDlGMTFFRUFDRkY2NDZGQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwYkAfnA+sADBwAkAfnA+sgwDQYJKoZIhvcNAQELBQADggEBAHDF PpoZK82gjicJvSOQ+EpNAosQhs+Q0BCTUtGl3wfGVZNytq9M9Rxe8c7ZYKgG8RRb 8xM4lHrr26VaeVCgVhSmilMkYErMuam1y/SBYmTfCOlGnvZ2F643MF3CYhs/IwQ1 pdouSiXOtiGVZtoDI6xE/r9uPT9WnHRXYQBnKvwzQs7S/QuAc2CXFH51Hh0GdTwZ i9+kk97I1kyd3qUKBkxudiiBe5+/9JgduHGRgb1EFqk/9CdOI5faYbboW2kEry9K I8lGh7uEJYMN3jgS3Obtk48KxH2Vnltf45WufSoHDsv9GP/EopE+eAZ3HJzpY/Bq PD+eAzWjJdSz6ybfP+A= -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:22 2026 by rpki-client