$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa File: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (raw, json) Hash identifier: AjuChnART3ISDBvzklladAYGqLiagodKkP77AQzP1jg= Subject key identifier: 08:0B:C4:85:95:7C:42:0F:1E:83:33:56:7E:24:6A:24:9B:09:35:1E Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1AA8 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa Signing time: Thu 28 May 2026 17:04:11 +0000 ROA not before: Thu 28 May 2026 17:04:11 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 202623 IP address blocks: 2400:cb00:420::/48 maxlen: 48 2400:cb00:1028::/48 maxlen: 48 2400:cb00:1029::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6824 (0x1aa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: May 28 17:04:11 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a18758b-4281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ed:77:42:a5:fb:34:b6:10:0e:bd:fa:7a:e5: 7a:42:84:33:35:51:d8:61:a0:47:31:19:b1:77:33: 6d:50:ba:fe:3b:93:ee:26:26:10:9a:cd:9e:75:53: d2:79:e9:b9:ff:c9:f1:c7:18:7d:19:85:e3:b0:5e: 8d:69:a8:32:76:1b:f8:b3:56:21:8e:4d:f0:cb:60: 8d:fc:fe:8c:dc:9a:c0:e2:1e:f1:55:0e:a8:a3:95: db:1d:e1:00:e8:83:2a:05:e3:4d:01:e9:76:19:de: 8f:a5:d3:12:08:d2:d5:d3:a6:c8:f4:f5:fd:65:20: 28:d0:a7:d0:06:30:0a:ec:ed:4e:e0:6b:27:d5:73: f4:36:c2:9e:82:b9:2c:6e:58:96:12:9a:5c:1b:01: 52:33:f6:33:0e:15:91:ad:ac:3a:8f:6d:ab:20:a9: 6a:94:50:f9:6b:1f:0c:98:0e:55:8b:54:c0:16:bc: 69:a7:e0:39:78:4f:80:9e:14:fb:4e:73:20:11:be: a4:fb:c7:a0:30:18:a4:d3:74:0a:9d:d1:ec:bf:13: 8b:68:d0:57:ae:eb:e7:5c:f8:c5:16:59:ef:3e:9a: 1b:18:dc:f4:04:47:7e:73:b1:3b:71:63:88:f3:2f: c3:78:bf:db:77:ed:b8:95:82:40:32:2d:50:f7:bc: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0B:C4:85:95:7C:42:0F:1E:83:33:56:7E:24:6A:24:9B:09:35:1E X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/E3F7B966E5A811ECBE11DA6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:cb00:420::/48 2400:cb00:1028::/47 Signature Algorithm: sha256WithRSAEncryption c4:46:fd:77:f3:40:44:0b:cc:8c:ff:81:00:55:22:bc:56:f3: 64:2e:b7:92:d0:1f:08:a2:b9:29:92:1b:b4:1b:fd:10:67:20: fb:9b:1f:f3:e2:5f:52:9f:62:6b:e5:11:e3:12:9d:c4:4c:f4: 91:c0:52:68:28:79:12:ae:42:ec:9e:22:f1:c9:6e:82:fe:bd: a2:6b:3a:34:5e:53:60:fa:b7:a4:7d:da:14:44:e8:c6:34:c1: 0e:1f:06:18:9f:af:b6:5a:8d:54:b4:5a:6e:1f:38:cd:da:17: bc:72:f8:56:a8:27:95:94:e0:26:66:3b:4f:36:47:54:79:31: bb:16:52:ce:61:57:47:05:1e:af:7e:46:7b:ef:5a:cd:35:4e: 39:08:c6:8b:c0:e2:b8:b4:d4:15:80:c4:7b:74:ff:4c:63:a5: a7:95:44:05:4f:39:eb:36:0b:e6:64:8f:1c:f1:ad:0d:b5:3a: 43:cf:67:a8:fc:82:de:f8:a6:1e:7b:42:31:a3:bf:a7:21:fe: 74:ae:91:6c:87:a9:dd:cc:78:7a:e0:73:7a:34:22:32:60:eb: 00:bf:b0:97:8c:aa:fb:b8:7b:ab:af:36:d9:ba:2a:39:2f:ee: bc:78:74:bc:0a:9c:7e:a2:57:9b:4b:de:0d:5c:a9:eb:c6:45: 8c:96:22:3b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICGqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwNTI4MTcwNDExWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE4NzU4Yi00MjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6e13QqX7NLYQDr36euV6QoQzNVHYYaBHMRmxdzNtULr+O5PuJiYQms2edVPS eem5/8nxxxh9GYXjsF6Naagydhv4s1Yhjk3wy2CN/P6M3JrA4h7xVQ6oo5XbHeEA 6IMqBeNNAel2Gd6PpdMSCNLV06bI9PX9ZSAo0KfQBjAK7O1O4Gsn1XP0NsKegrks bliWEppcGwFSM/YzDhWRraw6j22rIKlqlFD5ax8MmA5Vi1TAFrxpp+A5eE+AnhT7 TnMgEb6k+8egMBik03QKndHsvxOLaNBXruvnXPjFFlnvPpobGNz0BEd+c7E7cWOI 8y/DeL/bd+24lYJAMi1Q97xYwwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAgLxIWV fEIPHoMzVn4kaiSbCTUeMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvRTNGN0I5NjZF NUE4MTFFQ0JFMTFEQTZEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAJADLAAQgAwcBJADLABAoMA0GCSqGSIb3DQEBCwUAA4IBAQDERv13 80BEC8yM/4EAVSK8VvNkLreS0B8Iorkpkhu0G/0QZyD7mx/z4l9Sn2Jr5RHjEp3E TPSRwFJoKHkSrkLsniLxyW6C/r2iazo0XlNg+rekfdoUROjGNMEOHwYYn6+2Wo1U tFpuHzjN2he8cvhWqCeVlOAmZjtPNkdUeTG7FlLOYVdHBR6vfkZ771rNNU45CMaL wOK4tNQVgMR7dP9MY6WnlUQFTznrNgvmZI8c8a0NtTpDz2eo/ILe+KYee0Ixo7+n If50rpFsh6ndzHh64HN6NCIyYOsAv7CXjKr7uHurrzbZuio5L+68eHS8Cpx+oleb S94NXKnrxkWMliI7 -----END CERTIFICATE-----Generated at Sat Jun 13 22:09:16 2026 by rpki-client