$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa File: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (raw, json) Hash identifier: eUH9x9Nt6oLFhv/8SfQJE1V8O4zl4eznCvsff5DVYQw= Subject key identifier: 6C:EF:75:C7:A6:21:28:A6:80:37:35:AD:55:2B:C5:A4:15:9B:FD:DF Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 017B Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:52:15 +0000 ROA not before: Thu 03 Apr 2025 05:03:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152464 IP address blocks: 2401:a7a0::/36 maxlen: 36 2401:a7a0:1000::/36 maxlen: 36 2401:a7a0:2000::/36 maxlen: 36 2401:a7a0:3000::/36 maxlen: 36 2401:a7a0:4000::/36 maxlen: 36 2401:a7a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Apr 3 05:03:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5960f-61bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:be:71:21:46:c6:24:31:11:f7:15:8d:42: 7d:f0:29:7c:61:85:ea:1c:68:0e:c9:d0:db:93:e6: 28:28:07:b9:65:93:0e:d6:da:fc:78:89:5e:04:e3: bf:bb:0a:8e:36:1b:59:dd:30:01:51:df:df:5a:7b: 4b:d3:c3:69:aa:c3:ca:0e:8c:bd:39:fe:7f:7b:f7: ac:a6:ea:b2:dd:02:46:50:1c:01:0e:27:8e:76:91: 04:32:9b:c8:9d:34:5b:e6:6b:c4:5c:14:04:4a:1c: d6:81:ff:be:24:56:a1:37:92:e2:2c:12:bf:bb:0e: 5c:ba:e1:ba:45:cf:24:dc:f7:da:fa:a2:71:20:e2: 68:71:ec:b9:67:b5:ca:17:23:b0:19:8e:95:bc:b0: 52:e8:60:36:04:02:94:55:66:5a:19:f5:a9:1f:03: 96:9f:6e:58:2a:7e:b5:d3:47:ea:a2:97:5c:4a:10: 44:28:02:8d:39:50:e4:ec:13:0d:7d:6a:b7:06:13: 6b:47:af:88:de:9e:6c:c2:a5:8a:65:2a:dd:ba:dc: 1c:ce:b5:f8:8c:a5:97:b7:6a:92:23:66:9d:2d:12: f6:a4:9b:32:47:79:92:20:2c:de:82:61:f8:4d:de: f5:da:66:5c:cf:9f:06:1a:31:46:46:ad:0c:df:5a: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EF:75:C7:A6:21:28:A6:80:37:35:AD:55:2B:C5:A4:15:9B:FD:DF X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:a7a0::-2401:a7a0:4fff:ffff:ffff:ffff:ffff:ffff 2401:a7a0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 36:bf:83:93:db:46:ba:b9:95:21:94:fd:da:4f:db:d1:21:e9: c8:a1:1c:62:5a:75:5c:56:a4:3b:2f:0e:8b:74:59:31:5f:06: f7:52:5d:f6:39:47:2d:80:51:03:0a:90:10:88:13:58:33:48: 1b:d9:7c:d4:a8:7a:ed:f6:01:8b:be:8c:1d:3c:63:b0:e8:d9: 5b:a1:2d:1d:cd:50:3c:8e:88:3a:6d:16:49:e4:0c:3c:00:02: fc:b7:8c:58:22:e5:b4:5d:42:04:f0:ab:3d:47:00:b7:5a:95: 1a:de:24:57:bf:97:7d:9d:8a:da:7a:f2:10:1f:e0:99:4e:fb: 45:e1:de:03:fc:a0:5d:1c:fa:5d:77:31:bb:8d:a0:e7:b5:f6: a9:72:cc:06:2b:04:4b:1e:14:34:c2:e7:f9:0b:70:30:fd:07: 80:a7:a9:1a:24:2d:7d:1f:ef:9f:12:1b:68:62:ec:24:17:87: fd:bd:fd:8f:dd:9b:d4:52:78:59:78:f1:55:76:cb:32:2d:fd: 37:e3:c7:73:20:a9:cd:78:32:42:8f:60:7f:92:42:07:ab:74: bf:c3:43:82:1c:3d:88:56:7a:b2:9a:13:7c:d1:75:81:84:c7: 30:86:b6:3f:f6:dd:55:5f:0f:64:83:8a:b2:0d:de:55:b2:9b: 73:e4:70:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUwNDAzMDUwMzIzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTYwZi02MWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVS+cSFGxiQxEfcVjUJ98Cl8YYXqHGgOydDbk+YoKAe5ZZMO1tr8eIleBOO/ uwqONhtZ3TABUd/fWntL08NpqsPKDoy9Of5/e/espuqy3QJGUBwBDieOdpEEMpvI nTRb5mvEXBQEShzWgf++JFahN5LiLBK/uw5cuuG6Rc8k3Pfa+qJxIOJocey5Z7XK FyOwGY6VvLBS6GA2BAKUVWZaGfWpHwOWn25YKn6100fqopdcShBEKAKNOVDk7BMN fWq3BhNrR6+I3p5swqWKZSrdutwczrX4jKWXt2qSI2adLRL2pJsyR3mSICzegmH4 Td712mZcz58GGjFGRq0M31rjhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzvdcem ISimgDc1rVUrxaQVm/3fMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRBQzAvRTc2M0FBOEFERTg4MTFFRTkzRDlBNzQ0QzRGOUFFMDIvMkMwNkRGQTIy QzRDMTFFRkI2OTc0NTMwQzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAf BAIAAjAZMA8DBQUkAaegAwYEJAGnoEADBgQkAaeg8DANBgkqhkiG9w0BAQsFAAOC AQEANr+Dk9tGurmVIZT92k/b0SHpyKEcYlp1XFakOy8Oi3RZMV8G91Jd9jlHLYBR AwqQEIgTWDNIG9l81Kh67fYBi76MHTxjsOjZW6EtHc1QPI6IOm0WSeQMPAAC/LeM WCLltF1CBPCrPUcAt1qVGt4kV7+XfZ2K2nryEB/gmU77ReHeA/ygXRz6XXcxu42g 57X2qXLMBisESx4UNMLn+QtwMP0HgKepGiQtfR/vnxIbaGLsJBeH/b39j92b1FJ4 WXjxVXbLMi39N+PHcyCpzXgyQo9gf5JCB6t0v8NDghw9iFZ6spoTfNF1gYTHMIa2 P/bdVV8PZIOKsg3eVbKbc+RwOw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:55 2026 by rpki-client