$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/D26DDCB6F36C11E88E372D61C4F9AE02.roa File: D26DDCB6F36C11E88E372D61C4F9AE02.roa (raw, json) Hash identifier: udH7VqFuj24SImPiW/5wQH4EZuTGeAeHle7Uqa/NLtg= Subject key identifier: 6B:BE:0E:13:02:B3:2E:34:52:BF:5A:98:28:D0:82:A4:90:CE:A0:26 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 19AE Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/D26DDCB6F36C11E88E372D61C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:25:43 +0000 ROA not before: Thu 23 Oct 2025 16:50:33 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 395747 IP address blocks: 2400:cb00:131::/48 maxlen: 48 2400:cb00:133::/48 maxlen: 48 2400:cb00:164::/48 maxlen: 48 2400:cb00:171::/48 maxlen: 48 2400:cb00:251::/48 maxlen: 48 2400:cb00:302::/48 maxlen: 48 2400:cb00:517::/48 maxlen: 48 2400:cb00:518::/48 maxlen: 48 2400:cb00:531::/48 maxlen: 48 2400:cb00:539::/48 maxlen: 48 2400:cb00:692::/48 maxlen: 48 2400:cb00:693::/48 maxlen: 48 2400:cb00:748::/48 maxlen: 48 2400:cb00:922::/48 maxlen: 48 2400:cb00:1057::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6574 (0x19ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Oct 23 16:50:33 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4aed6-6f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:2b:9c:ef:86:67:7f:da:29:9e:08:f7:79: 13:3c:a6:eb:c6:78:a1:71:c0:8e:c5:20:0f:cb:72: 76:0d:d1:c9:f2:6f:cd:d0:d8:de:7f:09:fa:70:fd: da:6b:68:a5:e7:d9:c7:0c:06:71:9d:94:9f:93:4e: 31:99:78:5a:02:80:4b:7c:0b:fe:93:81:bb:5e:90: cd:45:d7:52:36:5c:df:89:a4:fe:d6:5a:af:ca:3e: 8d:3e:4e:57:66:be:11:67:f3:a5:62:4e:9a:95:53: 6e:91:a1:e9:0b:8c:c4:86:63:8e:7f:b6:3c:5e:58: a1:31:5b:d9:58:bb:e8:23:b5:90:cb:60:7a:cd:c0: ea:47:5d:6f:b2:d9:7d:7e:f9:c3:86:6f:0c:3f:3d: 68:86:87:37:72:8d:49:e6:ff:83:71:83:87:21:f2: 3d:cd:ae:7b:ee:e1:f0:0a:7d:3e:9f:ed:04:34:f9: 95:ff:29:4c:96:36:bb:f9:eb:87:e4:e2:d7:1c:5c: 64:71:32:da:bb:7a:aa:d7:84:36:9b:2d:e9:20:ba: af:ed:d9:7c:ed:f0:36:f2:0f:99:0b:cd:0b:76:20: 3c:dc:fd:71:45:9e:13:56:44:6d:ac:5c:5e:c5:0b: b3:4b:dd:46:0b:35:f8:87:17:65:c1:4e:b2:d7:cc: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BE:0E:13:02:B3:2E:34:52:BF:5A:98:28:D0:82:A4:90:CE:A0:26 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/D26DDCB6F36C11E88E372D61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:cb00:131::/48 2400:cb00:133::/48 2400:cb00:164::/48 2400:cb00:171::/48 2400:cb00:251::/48 2400:cb00:302::/48 2400:cb00:517::-2400:cb00:518:ffff:ffff:ffff:ffff:ffff 2400:cb00:531::/48 2400:cb00:539::/48 2400:cb00:692::/47 2400:cb00:748::/48 2400:cb00:922::/48 2400:cb00:1057::/48 Signature Algorithm: sha256WithRSAEncryption 02:bb:27:29:91:39:c9:c1:73:fc:ee:e1:b4:9c:ce:50:e8:0e: cc:03:41:e9:67:05:2f:44:e2:0c:59:5f:18:b2:53:c7:88:16: a0:d3:68:49:5e:e2:4b:de:f0:b6:09:ae:e7:f4:2a:52:ef:87: 11:be:02:54:fd:3e:71:f2:96:2f:df:fe:7b:1e:eb:ff:ab:34: 1b:4a:ba:c8:af:25:eb:bf:b9:33:e8:64:6f:91:56:13:1b:59: 4f:ba:85:65:59:05:9b:d9:2a:9c:72:92:6a:fb:d6:bd:65:db: 14:8e:fd:69:ab:a6:b1:22:c4:37:29:36:1a:8d:69:b4:ee:55: fc:f7:f8:1d:15:a1:ee:5c:41:55:3e:f5:10:7e:85:c9:d6:e3: c6:5d:8f:c2:9c:03:9f:f1:a2:68:26:de:4b:f2:70:1f:6b:d6: 1f:1e:29:a3:68:d9:32:f8:6b:94:1d:ac:b8:65:5c:cb:5b:ea: a7:7b:9c:a0:f7:ec:e6:ed:3f:3e:47:b1:1c:17:68:d8:26:d1: 71:ae:d6:03:f2:a6:64:b6:47:7e:e2:ed:b6:86:3a:08:8f:e4: 8d:08:2b:15:64:de:f8:9c:6a:72:fa:bd:18:8f:8d:26:d3:0a: f5:3f:c1:79:db:01:2d:4e:c2:2b:9a:c6:4a:30:8d:40:79:4f: 14:6a:4a:93 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICGa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUxMDIzMTY1MDMzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWVkNi02ZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oQrnO+GZ3/aKZ4I93kTPKbrxnihccCOxSAPy3J2DdHJ8m/N0Njefwn6cP3a a2il59nHDAZxnZSfk04xmXhaAoBLfAv+k4G7XpDNRddSNlzfiaT+1lqvyj6NPk5X Zr4RZ/OlYk6alVNukaHpC4zEhmOOf7Y8XlihMVvZWLvoI7WQy2B6zcDqR11vstl9 fvnDhm8MPz1ohoc3co1J5v+DcYOHIfI9za577uHwCn0+n+0ENPmV/ylMlja7+euH 5OLXHFxkcTLau3qq14Q2my3pILqv7dl87fA28g+ZC80LdiA83P1xRZ4TVkRtrFxe xQuzS91GCzX4hxdlwU6y18xv6wIDAQABo4IC3zCCAtswHQYDVR0OBBYEFGu+DhMC sy40Ur9amCjQgqSQzqAmMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvRDI2RERDQjZG MzZDMTFFODhFMzcyRDYxQzRGOUFFMDIucm9hMIGdBggrBgEFBQcBBwEB/wSBjTCB ijCBhwQCAAIwgYADBwAkAMsAATEDBwAkAMsAATMDBwAkAMsAAWQDBwAkAMsAAXED BwAkAMsAAlEDBwAkAMsAAwIwEgMHACQAywAFFwMHACQAywAFGAMHACQAywAFMQMH ACQAywAFOQMHASQAywAGkgMHACQAywAHSAMHACQAywAJIgMHACQAywAQVzANBgkq hkiG9w0BAQsFAAOCAQEAArsnKZE5ycFz/O7htJzOUOgOzANB6WcFL0TiDFlfGLJT x4gWoNNoSV7iS97wtgmu5/QqUu+HEb4CVP0+cfKWL9/+ex7r/6s0G0q6yK8l67+5 M+hkb5FWExtZT7qFZVkFm9kqnHKSavvWvWXbFI79aaumsSLENyk2Go1ptO5V/Pf4 HRWh7lxBVT71EH6Fydbjxl2PwpwDn/GiaCbeS/JwH2vWHx4po2jZMvhrlB2suGVc y1vqp3ucoPfs5u0/PkexHBdo2CbRca7WA/KmZLZHfuLttoY6CI/kjQgrFWTe+Jxq cvq9GI+NJtMK9T/BedsBLU7CK5rGSjCNQHlPFGpKkw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:08 2026 by rpki-client