$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa File: AA398864B96611EF8161BF51C4F9AE02.roa (raw, json) Hash identifier: eSIFI+gj+FuykbDv3aWB3PBFLJGoUzJ9OnfN4Tyzddw= Subject key identifier: A0:D5:58:5F:79:88:9C:9F:AD:66:4B:21:63:FF:DD:20:34:43:36:6F Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 024B Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:08:00 +0000 ROA not before: Sun 31 Aug 2025 04:21:18 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139358 IP address blocks: 2401:e60:20::/44 maxlen: 44 2401:e60:20::/48 maxlen: 48 2401:e60:30::/44 maxlen: 44 2401:e60:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Aug 31 04:21:18 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4564f-9222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:ba:ce:c5:9e:13:13:1b:44:57:8b:99:db: ca:fb:be:3d:87:b3:cd:5f:ff:96:71:ec:1e:56:97: d2:a5:7c:51:ed:b2:82:a3:80:40:64:07:e1:62:22: 28:81:f0:ae:be:63:0e:d4:31:af:1b:dd:61:be:12: ea:90:ec:8f:0a:26:2d:67:fb:50:ef:2d:15:ff:31: b3:dd:44:d5:b5:4f:57:3b:ba:77:e5:ee:17:d2:98: 1b:97:68:a6:9f:9a:36:c9:90:27:41:f4:c5:70:cf: 61:73:c8:6f:34:c3:40:c0:5c:f6:e2:24:f9:7b:ff: 44:7a:33:3f:49:e5:c0:1f:0f:a7:09:0e:5e:0d:56: e6:bb:2e:67:05:30:fc:1b:c9:8b:7c:32:08:d9:13: 0c:b0:34:6a:1c:e2:65:31:9b:e1:81:6b:6a:02:36: cf:3c:2c:fd:55:a1:be:e8:80:5b:15:1c:da:60:c7: 45:b0:16:61:7f:6f:a5:f2:6c:5d:c9:fa:78:03:d8: 9c:3a:4b:f0:5b:03:1b:cb:36:2e:ab:b1:72:a6:b6: ae:73:e6:11:37:e4:f9:01:ff:64:db:8e:b8:82:a1: e6:6d:53:51:ba:6b:d0:19:d1:88:88:ff:38:05:f0: ad:27:76:22:8b:c7:e2:1c:98:68:ac:8c:45:4b:f2: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D5:58:5F:79:88:9C:9F:AD:66:4B:21:63:FF:DD:20:34:43:36:6F X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:e60:20::/43 2401:e60:100::/40 Signature Algorithm: sha256WithRSAEncryption 9c:d3:e5:0e:53:24:b9:78:d9:d3:90:bb:2a:79:e1:da:eb:21: cc:bf:f3:27:22:e9:d8:bc:a2:94:1c:61:52:9f:e7:d0:97:5c: c7:40:aa:54:60:57:0f:4f:a0:ef:f9:3e:11:c9:e7:73:56:72: 4a:09:47:36:14:03:90:a7:00:c2:be:e4:ce:ea:74:7b:3d:e1: 20:1c:a5:85:29:e3:2e:4b:d3:80:31:d7:4a:1c:26:22:03:42: d0:20:b3:9e:b1:69:9e:21:73:54:c5:f6:14:14:a2:3d:cd:76: 83:83:55:8f:da:13:ac:70:02:31:4e:de:0f:2c:24:9e:93:d9: 85:65:ee:25:84:f8:7d:1c:07:d2:37:be:d5:04:a7:fb:6c:67: e7:42:ab:6a:f5:90:40:f4:dc:e4:87:4f:a1:33:a2:ea:bb:8b: 84:35:13:19:3b:a0:ba:bf:e4:88:3a:4a:b0:2b:dc:31:39:66: e6:8b:0c:03:ea:eb:d4:11:e2:0c:aa:a2:03:33:27:98:66:58: 86:94:19:bc:ba:56:fc:66:bd:5e:71:06:8f:72:0b:0b:ad:49: 7c:d3:e4:bf:99:c4:b6:6b:4a:8d:23:e1:33:36:76:67:eb:db: b1:dd:61:23:a0:a1:5e:78:d5:85:62:1f:a6:7e:02:fa:0c:7a: 60:7c:df:f2 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUwODMxMDQyMTE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTY0Zi05MjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9O6zsWeExMbRFeLmdvK+749h7PNX/+WceweVpfSpXxR7bKCo4BAZAfhYiIo gfCuvmMO1DGvG91hvhLqkOyPCiYtZ/tQ7y0V/zGz3UTVtU9XO7p35e4X0pgbl2im n5o2yZAnQfTFcM9hc8hvNMNAwFz24iT5e/9EejM/SeXAHw+nCQ5eDVbmuy5nBTD8 G8mLfDII2RMMsDRqHOJlMZvhgWtqAjbPPCz9VaG+6IBbFRzaYMdFsBZhf2+l8mxd yfp4A9icOkvwWwMbyzYuq7Fyprauc+YRN+T5Af9k2464gqHmbVNRumvQGdGIiP84 BfCtJ3Yii8fiHJhorIxFS/LVxwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFKDVWF95 iJyfrWZLIWP/3SA0QzZvMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JFQTcvMDQ0RjY0NDgxMTY4MTFFRUFDNjNDMjM0QzRGOUFFMDIvQUEzOTg4NjRC OTY2MTFFRjgxNjFCRjUxQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAAjARAwcFJAEOYAAgAwYAJAEOYAEwDQYJKoZIhvcNAQELBQADggEBAJzT5Q5T JLl42dOQuyp54drrIcy/8yci6di8opQcYVKf59CXXMdAqlRgVw9PoO/5PhHJ53NW ckoJRzYUA5CnAMK+5M7qdHs94SAcpYUp4y5L04Ax10ocJiIDQtAgs56xaZ4hc1TF 9hQUoj3NdoODVY/aE6xwAjFO3g8sJJ6T2YVl7iWE+H0cB9I3vtUEp/tsZ+dCq2r1 kED03OSHT6Ezouq7i4Q1Exk7oLq/5Ig6SrAr3DE5ZuaLDAPq69QR4gyqogMzJ5hm WIaUGby6VvxmvV5xBo9yCwutSXzT5L+ZxLZrSo0j4TM2dmfr27HdYSOgoV541YVi H6Z+AvoMemB83/I= -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:41 2026 by rpki-client