$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/B5BFAB442FE111F19DB441919E833773.roa File: B5BFAB442FE111F19DB441919E833773.roa (raw, json) Hash identifier: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc= Subject key identifier: CD:85:14:BA:80:5C:95:1C:BE:F0:77:09:16:2F:B6:2E:F5:93:2A:D6 Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 04EF Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/B5BFAB442FE111F19DB441919E833773.roa Signing time: Sat 04 Apr 2026 04:49:49 +0000 ROA not before: Sat 04 Apr 2026 04:49:49 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 137387 IP address blocks: 2400:58a0:1420::/48 maxlen: 48 2400:58a0:1421::/48 maxlen: 48 2400:58a0:1422::/48 maxlen: 48 2400:58a0:1423::/48 maxlen: 48 2400:58a0:1424::/48 maxlen: 48 2400:58a0:1425::/48 maxlen: 48 2400:58a0:1426::/48 maxlen: 48 2400:58a0:1427::/48 maxlen: 48 2400:58a0:1428::/48 maxlen: 48 2400:58a0:1429::/48 maxlen: 48 2400:58a0:142a::/48 maxlen: 48 2400:58a0:142b::/48 maxlen: 48 2400:58a0:142c::/48 maxlen: 48 2400:58a0:142d::/48 maxlen: 48 2400:58a0:142e::/48 maxlen: 48 2400:58a0:142f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Apr 4 04:49:49 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d0986d-09d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:17:96:5e:29:2d:e7:73:01:3b:2e:af:9f: dc:88:ac:e1:63:ad:d0:66:b5:8e:73:af:38:d1:a9: 36:e5:8c:b1:85:41:81:3c:65:56:51:49:34:23:9f: 5f:42:57:a9:4a:ba:47:e6:f2:72:be:f8:b9:dd:92: de:d7:5b:6c:55:a4:db:ce:c7:77:1a:be:a3:20:09: f1:3f:82:0c:5e:31:76:de:7a:cf:a7:cc:dd:b3:04: 64:d1:55:99:1a:fe:b8:e2:e6:4e:5c:86:c2:72:16: 52:be:a2:16:d6:60:6d:c9:4e:e3:cc:f5:ba:42:f0: ea:6d:da:48:67:ff:20:20:cc:fe:21:4a:99:ba:68: 3b:ed:9c:29:74:88:02:33:d3:0f:c6:01:36:ba:ea: 3f:7e:b9:ba:55:e9:e5:f6:07:6f:71:e8:1d:c4:a5: ae:a2:be:b8:ca:ab:b7:88:51:1e:8c:af:01:68:f7: d5:84:aa:be:c5:7b:46:b2:14:ee:4a:27:66:56:67: 20:ef:65:cb:f2:ac:81:15:2e:8d:c2:99:ab:2e:7d: 6a:2a:ad:15:03:64:23:39:99:5c:35:82:ee:9a:d9: 9a:99:1a:d9:79:ac:68:fd:62:b6:35:58:19:8c:b3: bf:26:93:27:e3:6e:f8:30:2a:a7:15:a4:86:57:1f: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:85:14:BA:80:5C:95:1C:BE:F0:77:09:16:2F:B6:2E:F5:93:2A:D6 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/B5BFAB442FE111F19DB441919E833773.roa sbgp-ipAddrBlock: critical IPv6: 2400:58a0:1420::/44 Signature Algorithm: sha256WithRSAEncryption 92:8e:38:a2:df:7b:a0:f2:ff:a7:6d:2c:59:81:d1:c3:47:00: ec:af:d6:f6:c1:8e:9b:26:d9:d4:62:de:1b:0c:8f:a3:c9:37: cb:b2:19:48:59:21:d8:57:01:7a:cb:7a:75:81:fd:ad:f8:13: 40:a9:32:5e:3c:0d:54:c6:9a:04:d9:02:2a:a9:57:5d:94:08: f4:2c:27:ea:c0:49:43:2b:05:70:93:68:e1:2d:71:14:47:e2: d7:4b:5f:77:ee:2d:6c:a0:a1:05:23:15:28:48:92:47:b0:ae: c9:26:ba:da:c4:12:ac:04:b1:0d:a8:ba:86:49:f7:e7:3e:94: 9a:c2:9a:18:6c:76:28:61:6b:d1:c1:05:29:bb:a0:19:20:40: 5f:db:bd:dd:cd:c5:1a:c0:c1:b4:ee:56:f1:96:60:d2:98:97: 27:90:51:a5:69:34:ef:43:28:b3:60:b0:26:6a:df:7f:92:4b: e4:76:ca:ca:33:38:10:bf:f6:8c:78:3f:d1:5a:b0:7b:99:63: 6f:01:c1:2d:68:36:d1:e2:5e:01:b0:0e:80:ee:78:33:f7:73: f0:39:d3:a9:1b:30:bd:49:05:8c:56:39:71:7c:b7:16:b9:df: 20:ef:04:22:c8:26:cd:36:d6:3a:af:bc:b3:43:5c:fb:14:4b: 15:95:cf:dc -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjYwNDA0MDQ0OTQ5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQwOTg2ZC0wOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFMXll4pLedzATsur5/ciKzhY63QZrWOc6840ak25YyxhUGBPGVWUUk0I59f QlepSrpH5vJyvvi53ZLe11tsVaTbzsd3Gr6jIAnxP4IMXjF23nrPp8zdswRk0VWZ Gv644uZOXIbCchZSvqIW1mBtyU7jzPW6QvDqbdpIZ/8gIMz+IUqZumg77ZwpdIgC M9MPxgE2uuo/frm6Venl9gdvcegdxKWuor64yqu3iFEejK8BaPfVhKq+xXtGshTu SidmVmcg72XL8qyBFS6NwpmrLn1qKq0VA2QjOZlcNYLumtmamRrZeaxo/WK2NVgZ jLO/JpMn4274MCqnFaSGVx/jlwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFM2FFLqA XJUcvvB3CRYvti71kyrWMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I0QkYvQjhDQzY5M0M4NTVDMTFFQzhFM0NCQjUxQzRGOUFFMDIvQjVCRkFCNDQy RkUxMTFGMTlEQjQ0MTkxOUU4MzM3NzMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcEJABYoBQgMA0GCSqGSIb3DQEBCwUAA4IBAQCSjjii33ug8v+nbSxZ gdHDRwDsr9b2wY6bJtnUYt4bDI+jyTfLshlIWSHYVwF6y3p1gf2t+BNAqTJePA1U xpoE2QIqqVddlAj0LCfqwElDKwVwk2jhLXEUR+LXS1937i1soKEFIxUoSJJHsK7J JrraxBKsBLENqLqGSffnPpSawpoYbHYoYWvRwQUpu6AZIEBf273dzcUawMG07lbx lmDSmJcnkFGlaTTvQyizYLAmat9/kkvkdsrKMzgQv/aMeD/RWrB7mWNvAcEtaDbR 4l4BsA6A7ngz93PwOdOpGzC9SQWMVjlxfLcWud8g7wQiyCbNNtY6r7yzQ1z7FEsV lc/c -----END CERTIFICATE-----Generated at Fri Apr 17 10:18:10 2026 by rpki-client