$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3632957E441311EE8A03A472C4F9AE02.roa File: 3632957E441311EE8A03A472C4F9AE02.roa (raw, json) Hash identifier: q3R3Z5X1T0mDLlNf77Yk218o6FRRLXNDRBGSb64nfwk= Subject key identifier: 2A:0D:3E:8D:3B:F5:A3:DB:7F:A3:7D:E3:AB:3A:52:E3:C3:12:1D:12 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 0371 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3632957E441311EE8A03A472C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:37:47 +0000 ROA not before: Sat 09 Aug 2025 02:39:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 148996 IP address blocks: 2400:9ce0:6000::/36 maxlen: 36 2400:9ce0:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Aug 9 02:39:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4796b-9f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:e7:90:ba:0d:89:89:d2:8b:f5:1f:f2:1c: df:bb:27:99:d4:c6:f6:6d:25:e5:03:a5:8e:f8:4b: 9e:be:3b:cf:1c:d6:df:12:95:ec:19:76:fc:63:2b: 80:df:01:21:63:a4:57:52:1d:3c:12:6e:06:0a:20: 46:c8:fe:6f:c0:7b:dd:ca:fc:6d:cf:37:29:f3:1a: c9:9d:81:71:d3:86:b8:16:c9:9c:74:e2:b6:17:e0: a2:81:84:49:c0:07:40:11:7a:09:06:6a:bc:53:7e: d5:fa:5d:bc:b8:b6:ab:18:e7:27:7b:20:48:d8:a7: 6c:79:a1:dd:34:e1:77:34:33:12:76:ad:cd:de:9a: d2:f4:4a:4a:83:9e:8c:f6:c1:6e:6d:a8:6b:1b:8d: 3b:c4:ee:67:2f:b3:86:ad:0f:b9:35:18:f0:76:42: e9:10:2c:8a:ad:bc:ee:50:f5:69:d1:01:84:37:fe: e9:21:bf:e1:2c:bb:2f:65:a4:37:72:bb:e8:26:e8: 60:78:12:e6:e4:8d:85:58:e4:62:8b:6b:92:e0:40: f6:9f:53:40:25:ce:ae:b5:eb:68:ef:9d:cd:2a:e9: a6:f5:cc:7e:75:07:f8:5f:a1:48:b1:65:24:d3:38: b8:d7:de:33:a8:c0:13:a9:5a:9f:ec:0d:00:83:cb: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0D:3E:8D:3B:F5:A3:DB:7F:A3:7D:E3:AB:3A:52:E3:C3:12:1D:12 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3632957E441311EE8A03A472C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:9ce0:6000::/35 Signature Algorithm: sha256WithRSAEncryption 02:ce:ec:5e:1e:7c:01:53:a2:7b:2f:1e:13:4d:94:d9:01:94: 01:0f:3a:48:9a:fb:63:4d:bb:87:25:de:55:d8:f6:46:da:89: b9:a3:44:8e:0f:f9:e4:5e:c5:45:b5:d2:4f:da:6d:f2:21:5d: 7c:57:36:0a:2f:3c:29:fb:e0:e9:f7:02:a2:0d:a0:05:97:bc: 5c:82:5d:f4:20:05:a5:2e:8e:fd:02:4d:37:bf:cf:ff:22:9f: 13:67:86:f9:b5:39:c0:0a:b7:51:72:0c:cc:40:15:0b:21:7c: d3:91:66:c6:cc:5f:d0:7f:c3:8d:8e:09:fd:a0:20:1a:79:63: b1:fc:04:70:8c:97:3b:22:ba:d5:e5:87:5b:01:f3:73:05:62: 0b:8a:5e:c4:13:8f:1f:b6:36:68:ec:99:2f:28:4c:44:ec:22: 84:af:97:14:8c:77:ff:26:78:e3:1b:6c:f8:e6:31:59:2d:b7: e2:81:92:20:1a:d5:e9:23:7a:d9:c1:15:a1:53:ed:3e:1e:6a: f8:a0:6d:e1:b2:b8:0a:fb:26:9c:bc:0f:0d:ef:44:2c:eb:c0: 24:c0:c8:7e:95:29:7a:48:92:d8:bd:56:4d:f6:38:e3:91:91: 3b:d3:86:ce:7a:17:ea:46:3c:d2:56:12:29:be:f3:f1:4f:f6: df:90:85:6e -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwODA5MDIzOTE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzk2Yi05ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum7nkLoNiYnSi/Uf8hzfuyeZ1Mb2bSXlA6WO+EuevjvPHNbfEpXsGXb8YyuA 3wEhY6RXUh08Em4GCiBGyP5vwHvdyvxtzzcp8xrJnYFx04a4FsmcdOK2F+CigYRJ wAdAEXoJBmq8U37V+l28uLarGOcneyBI2KdseaHdNOF3NDMSdq3N3prS9EpKg56M 9sFubahrG407xO5nL7OGrQ+5NRjwdkLpECyKrbzuUPVp0QGEN/7pIb/hLLsvZaQ3 crvoJuhgeBLm5I2FWORii2uS4ED2n1NAJc6uteto753NKumm9cx+dQf4X6FIsWUk 0zi4194zqMATqVqf7A0Ag8uitwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFCoNPo07 9aPbf6N946s6UuPDEh0SMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JBQzUvNDcwQTYyMDQxNTMwMTFFREJBQTNEMDI3QzRGOUFFMDIvMzYzMjk1N0U0 NDEzMTFFRThBMDNBNDcyQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYFJACc4GAwDQYJKoZIhvcNAQELBQADggEBAALO7F4efAFTonsvHhNN lNkBlAEPOkia+2NNu4cl3lXY9kbaibmjRI4P+eRexUW10k/abfIhXXxXNgovPCn7 4On3AqINoAWXvFyCXfQgBaUujv0CTTe/z/8inxNnhvm1OcAKt1FyDMxAFQshfNOR ZsbMX9B/w42OCf2gIBp5Y7H8BHCMlzsiutXlh1sB83MFYguKXsQTjx+2NmjsmS8o TETsIoSvlxSMd/8meOMbbPjmMVktt+KBkiAa1ekjetnBFaFT7T4eavigbeGyuAr7 Jpy8Dw3vRCzrwCTAyH6VKXpIkti9Vk32OOORkTvThs56F+pGPNJWEim+8/FP9t+Q hW4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:40 2026 by rpki-client