$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa File: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (raw, json) Hash identifier: gpPf8YHxUumqTPOX7/waaXvtALxStgij8JmqlVAXhlc= Subject key identifier: 50:00:85:F5:1D:21:D1:9D:14:FB:C9:4A:60:95:0E:06:5F:67:AD:2E Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 18F7 Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:25:12 +0000 ROA not before: Tue 26 Aug 2025 16:55:10 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38481 IP address blocks: 2407:e500:8::/47 maxlen: 47 2407:e500:a::/47 maxlen: 47 2407:e500:20::/47 maxlen: 47 2407:e500:30::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6391 (0x18f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Aug 26 16:55:10 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a46868-6501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:59:9e:5c:68:b7:40:45:9e:b6:70:b3:cc: d6:05:f2:b2:d6:ea:5f:e8:1c:7f:95:31:76:0e:07: 19:37:a5:36:04:8b:15:65:6a:10:fd:dd:8d:62:62: 8e:df:fe:4d:e3:f3:0a:13:df:02:c0:82:e5:35:b9: 9d:e6:39:98:8c:d4:ba:a1:88:4a:b3:02:e2:20:96: e3:20:eb:cb:c4:6e:e1:ac:43:84:4d:0d:c7:5f:a8: 52:34:20:70:05:6e:3f:85:99:70:ce:66:c8:19:df: b4:cd:c0:8d:88:12:a5:cc:32:a4:42:77:2d:df:aa: 01:40:e3:06:c2:eb:f2:a8:2f:a6:9c:9c:ed:e8:b9: 1b:89:a4:39:86:08:dd:cb:11:b4:27:e9:18:02:71: 9c:c8:2e:ae:c5:6b:42:7e:1c:6d:be:82:ee:e4:58: ec:e0:9b:16:32:71:3a:1b:1e:53:bc:84:0a:d8:2b: 76:dc:72:06:9c:fc:44:d0:ce:fb:50:94:ca:3f:ad: 1f:b0:aa:b5:60:f5:f5:5b:43:29:e4:ec:cc:72:b1: 9c:f4:bf:89:22:73:ad:a4:48:77:ea:94:98:aa:a4: 33:ad:5f:e0:9a:c1:60:a9:e1:c3:41:c1:97:73:e5: 52:53:f4:23:f1:0d:34:bd:4c:9b:3d:ed:d3:49:2b: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:00:85:F5:1D:21:D1:9D:14:FB:C9:4A:60:95:0E:06:5F:67:AD:2E X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:e500:8::/46 2407:e500:20::/47 2407:e500:30::/47 Signature Algorithm: sha256WithRSAEncryption 00:b2:b6:df:fe:74:fc:d5:dd:44:c5:df:44:fa:2c:ec:6b:72: 0f:54:8d:5a:b2:c6:9a:c7:0d:9d:30:e9:66:f5:7d:84:69:67: e3:2f:b3:1e:3c:da:ed:d9:d6:ff:7a:57:0c:31:c9:7d:19:2a: ba:4d:e1:b5:98:a1:d5:81:3a:4a:a5:22:b0:34:8e:2a:34:f9: 45:1d:0d:b6:89:23:ef:32:78:85:9e:10:ac:99:64:27:d4:a5: be:9d:ba:d9:15:2d:c3:63:40:58:23:90:92:36:5d:7c:8d:c5: 2a:70:9d:f4:68:ab:1b:96:85:ef:51:cc:42:4a:41:91:28:8b: f3:f4:05:c2:a7:f8:ea:e4:21:0b:ae:48:95:7b:23:f9:64:69: 3b:8b:f7:b6:2c:98:27:84:f7:96:21:38:54:ef:6b:e9:38:f5: 7a:7d:8c:33:8d:68:11:7e:26:92:ad:b5:85:9b:56:d0:aa:a1: 69:28:2d:8e:1f:5e:5d:53:1f:4c:41:d3:af:0a:fa:fc:5e:76: 49:89:2a:72:29:a1:68:6f:4f:08:a4:fb:20:cd:06:fc:20:45: fb:2e:80:5d:56:9e:2d:be:9b:55:15:fe:2b:1a:54:4b:94:44: ad:2e:ea:3d:11:77:32:cc:57:b0:0e:b3:45:17:80:7b:7f:96: b5:d0:b9:70 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICGPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUwODI2MTY1NTEwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njg2OC02NTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsRZnlxot0BFnrZws8zWBfKy1upf6Bx/lTF2DgcZN6U2BIsVZWoQ/d2NYmKO 3/5N4/MKE98CwILlNbmd5jmYjNS6oYhKswLiIJbjIOvLxG7hrEOETQ3HX6hSNCBw BW4/hZlwzmbIGd+0zcCNiBKlzDKkQnct36oBQOMGwuvyqC+mnJzt6LkbiaQ5hgjd yxG0J+kYAnGcyC6uxWtCfhxtvoLu5Fjs4JsWMnE6Gx5TvIQK2Ct23HIGnPxE0M77 UJTKP60fsKq1YPX1W0Mp5OzMcrGc9L+JInOtpEh36pSYqqQzrV/gmsFgqeHDQcGX c+VSU/Qj8Q00vUybPe3TSStskwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFAAhfUd IdGdFPvJSmCVDgZfZ60uMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvMzdBQkQ3MDhBQTlBMTFFN0JBQzQxMjUyQzRGOUFFMDIvNUE4NzQ0RDgx NDM0MTFFRUFCMUE1RDczQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh BAIAAjAbAwcCJAflAAAIAwcBJAflAAAgAwcBJAflAAAwMA0GCSqGSIb3DQEBCwUA A4IBAQAAsrbf/nT81d1Exd9E+izsa3IPVI1assaaxw2dMOlm9X2EaWfjL7MePNrt 2db/elcMMcl9GSq6TeG1mKHVgTpKpSKwNI4qNPlFHQ22iSPvMniFnhCsmWQn1KW+ nbrZFS3DY0BYI5CSNl18jcUqcJ30aKsbloXvUcxCSkGRKIvz9AXCp/jq5CELrkiV eyP5ZGk7i/e2LJgnhPeWIThU72vpOPV6fYwzjWgRfiaSrbWFm1bQqqFpKC2OH15d Ux9MQdOvCvr8XnZJiSpyKaFob08IpPsgzQb8IEX7LoBdVp4tvptVFf4rGlRLlESt Luo9EXcyzFewDrNFF4B7f5a10Llw -----END CERTIFICATE-----Generated at Mon Mar 2 02:25:53 2026 by rpki-client