$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/D26DDCB6F36C11E88E372D61C4F9AE02.roa File: D26DDCB6F36C11E88E372D61C4F9AE02.roa (raw, json) Hash identifier: +B/cYcsSzsw7yQo6HYp5CEsauNY3ej5R1D+A17Ni44Q= Subject key identifier: 85:2A:FA:68:AD:59:2B:5D:C2:36:C0:6B:51:12:BD:F6:9D:86:CC:93 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1AA9 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/D26DDCB6F36C11E88E372D61C4F9AE02.roa Signing time: Thu 28 May 2026 17:04:13 +0000 ROA not before: Thu 28 May 2026 17:04:13 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 395747 IP address blocks: 2400:cb00:131::/48 maxlen: 48 2400:cb00:133::/48 maxlen: 48 2400:cb00:164::/48 maxlen: 48 2400:cb00:171::/48 maxlen: 48 2400:cb00:251::/48 maxlen: 48 2400:cb00:302::/48 maxlen: 48 2400:cb00:517::/48 maxlen: 48 2400:cb00:518::/48 maxlen: 48 2400:cb00:531::/48 maxlen: 48 2400:cb00:539::/48 maxlen: 48 2400:cb00:692::/48 maxlen: 48 2400:cb00:693::/48 maxlen: 48 2400:cb00:748::/48 maxlen: 48 2400:cb00:922::/48 maxlen: 48 2400:cb00:1057::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6825 (0x1aa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: May 28 17:04:13 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a18758d-fc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:44:7d:aa:69:a2:02:e8:b2:92:08:b2:a9: a8:c6:06:6a:7c:da:23:e8:f6:ee:14:e7:0b:c7:c2: 5f:fa:49:58:bc:d1:95:17:db:19:f2:1e:79:da:dc: f0:c9:20:86:bf:42:ab:4c:dd:66:1c:01:cb:f7:31: 2f:97:18:3d:da:38:d4:58:b1:8a:42:ac:29:e0:9f: 83:3e:8c:a7:5a:bf:13:43:3a:3d:f9:fb:c2:60:ab: 9b:31:07:0c:67:a1:64:50:b7:f9:7a:0a:10:a2:7a: 67:df:c1:d3:78:0b:6a:53:5f:a5:0f:39:25:87:fb: 0d:1e:d1:cd:6e:89:8a:4b:f0:9c:9c:7a:06:e3:fe: e0:ef:03:69:8d:82:c8:f9:ca:83:4a:79:37:2a:d6: d6:3c:4d:3b:ef:a1:30:d9:f1:fd:2c:86:41:d7:9e: bc:ca:5f:2e:6b:c5:07:73:c0:6e:d5:87:06:61:31: d8:ee:6f:36:4b:b0:e1:a4:68:02:0b:c9:11:ad:98: 09:51:9e:97:6e:80:cf:2c:ad:31:3d:2b:0e:ba:e4: 63:be:a1:6e:09:76:fc:c6:04:49:a0:45:35:b8:f5: d3:7f:67:2f:71:96:8e:a9:c8:aa:5c:a8:da:3c:9e: d8:77:c4:86:c9:9a:8c:22:7e:79:ca:41:b2:cc:f7: 92:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2A:FA:68:AD:59:2B:5D:C2:36:C0:6B:51:12:BD:F6:9D:86:CC:93 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/D26DDCB6F36C11E88E372D61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:cb00:131::/48 2400:cb00:133::/48 2400:cb00:164::/48 2400:cb00:171::/48 2400:cb00:251::/48 2400:cb00:302::/48 2400:cb00:517::-2400:cb00:518:ffff:ffff:ffff:ffff:ffff 2400:cb00:531::/48 2400:cb00:539::/48 2400:cb00:692::/47 2400:cb00:748::/48 2400:cb00:922::/48 2400:cb00:1057::/48 Signature Algorithm: sha256WithRSAEncryption 5b:e7:db:cf:d0:1f:3d:4a:b3:89:75:45:14:06:42:6d:28:5f: 91:48:56:bb:79:ab:41:80:cf:25:54:7b:fa:15:23:fb:6c:d0: 4f:82:b1:f1:c4:37:c9:3a:a4:3b:05:e1:82:f3:cb:84:53:bf: 97:17:d9:81:36:05:5d:dc:5e:92:50:f2:2b:e7:f0:3d:50:be: 50:51:af:22:8f:39:71:60:dd:b5:24:f2:10:bd:3c:16:a5:f8: ba:b2:33:92:76:a6:24:3e:eb:56:2b:a7:ed:c1:f1:a9:75:7f: 04:c1:69:9b:01:bf:34:49:6f:32:53:cd:1e:7d:e7:f4:c8:05: 1f:33:bb:97:a1:80:e6:41:30:d1:dd:66:e4:3d:27:95:87:90: 3f:90:ba:75:11:12:b3:1d:37:e0:a9:27:ea:0f:d7:84:b5:10: af:39:5e:36:21:ee:da:dc:99:70:e4:f5:f1:31:85:46:94:b7: 20:cd:51:09:12:17:1c:85:aa:c7:dc:1d:19:4e:6f:e5:c0:b1: 5a:92:b0:f8:ea:b6:5d:45:20:c1:71:b7:06:c2:5d:37:a8:26: 56:99:ce:f5:e9:49:50:25:b7:2e:57:8b:4d:3d:a0:39:8a:cc: 6e:57:76:1f:cb:38:04:e8:e6:ec:3e:09:8d:ca:b9:e1:e6:c4: 28:a9:e1:6c -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICGqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwNTI4MTcwNDEzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE4NzU4ZC1mYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7tEfappogLospIIsqmoxgZqfNoj6PbuFOcLx8Jf+klYvNGVF9sZ8h552tzw ySCGv0KrTN1mHAHL9zEvlxg92jjUWLGKQqwp4J+DPoynWr8TQzo9+fvCYKubMQcM Z6FkULf5egoQonpn38HTeAtqU1+lDzklh/sNHtHNbomKS/CcnHoG4/7g7wNpjYLI +cqDSnk3KtbWPE0776Ew2fH9LIZB1568yl8ua8UHc8Bu1YcGYTHY7m82S7DhpGgC C8kRrZgJUZ6XboDPLK0xPSsOuuRjvqFuCXb8xgRJoEU1uPXTf2cvcZaOqciqXKja PJ7Yd8SGyZqMIn55ykGyzPeSAwIDAQABo4IC3zCCAtswHQYDVR0OBBYEFIUq+mit WStdwjbAa1ESvfadhsyTMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvRDI2RERDQjZG MzZDMTFFODhFMzcyRDYxQzRGOUFFMDIucm9hMIGdBggrBgEFBQcBBwEB/wSBjTCB ijCBhwQCAAIwgYADBwAkAMsAATEDBwAkAMsAATMDBwAkAMsAAWQDBwAkAMsAAXED BwAkAMsAAlEDBwAkAMsAAwIwEgMHACQAywAFFwMHACQAywAFGAMHACQAywAFMQMH ACQAywAFOQMHASQAywAGkgMHACQAywAHSAMHACQAywAJIgMHACQAywAQVzANBgkq hkiG9w0BAQsFAAOCAQEAW+fbz9AfPUqziXVFFAZCbShfkUhWu3mrQYDPJVR7+hUj +2zQT4Kx8cQ3yTqkOwXhgvPLhFO/lxfZgTYFXdxeklDyK+fwPVC+UFGvIo85cWDd tSTyEL08FqX4urIzknamJD7rViun7cHxqXV/BMFpmwG/NElvMlPNHn3n9MgFHzO7 l6GA5kEw0d1m5D0nlYeQP5C6dRESsx034Kkn6g/XhLUQrzleNiHu2tyZcOT18TGF RpS3IM1RCRIXHIWqx9wdGU5v5cCxWpKw+Oq2XUUgwXG3BsJdN6gmVpnO9elJUCW3 LleLTT2gOYrMbld2H8s4BOjm7D4Jjcq54ebEKKnhbA== -----END CERTIFICATE-----Generated at Sat Jun 13 20:45:04 2026 by rpki-client