$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa File: 3AB77B58E23311F0B92C3AF56C6F56BC.roa (raw, json) Hash identifier: FFrGJtRc5JYZ9XbzroN1o9+gIGnaW6CiRbN2gDWOPes= Subject key identifier: 98:28:79:4B:2D:64:EC:21:F8:B1:B2:69:5E:96:B3:AE:AD:DF:9E:94 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 01BD Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa Signing time: Fri 03 Apr 2026 04:38:25 +0000 ROA not before: Fri 03 Apr 2026 04:38:25 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 152586 IP address blocks: 2401:8360:2::/48 maxlen: 48 2401:8360:6::/48 maxlen: 48 2401:8360:b::/48 maxlen: 48 2401:8360:c::/48 maxlen: 48 2401:8360:d::/48 maxlen: 48 2401:8360:e::/48 maxlen: 48 2401:8360:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Apr 3 04:38:25 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cf4441-e937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:7d:21:05:3b:80:be:ba:84:5e:1c:bd:b5: e0:5b:16:19:ce:54:5c:9d:77:4c:5a:71:63:72:52: 7a:0b:15:0f:ea:4c:32:3e:90:f5:bc:52:ca:44:6a: 68:74:8b:e6:c9:4a:d4:48:60:c9:a8:81:55:93:e1: 7b:7d:0d:e1:c5:c2:f2:aa:80:eb:03:15:06:1b:f9: d4:3d:2d:26:94:55:d3:4e:c0:53:e2:a3:bd:36:36: bc:17:bf:cb:b8:8d:76:a3:bb:f2:03:b2:2a:70:2b: a2:d8:fa:75:7f:55:23:0d:cd:34:3b:5b:b2:db:5d: e5:e5:6a:68:90:86:cf:b6:06:f2:83:1d:f0:93:18: 65:97:70:db:14:f8:fd:3f:43:a1:89:09:c1:7c:d7: 21:93:26:9b:2d:37:d2:ac:26:47:42:ec:2d:f5:3f: 39:a0:9c:bd:e3:14:02:1e:fc:3c:ee:ec:f9:f1:13: 68:df:8e:67:fe:4f:75:e5:61:c9:3d:c3:7e:b8:f2: 95:6c:54:96:c5:90:64:58:9e:0c:3e:ee:92:f3:2c: f4:d1:54:e7:54:a8:76:f5:45:44:7b:de:c2:12:31: 59:2d:af:aa:4b:d3:25:2a:c8:8d:01:b1:ab:87:4c: 8a:26:d1:1a:19:1b:2f:a0:59:61:12:6c:50:1d:d9: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:28:79:4B:2D:64:EC:21:F8:B1:B2:69:5E:96:B3:AE:AD:DF:9E:94 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2401:8360:2::/48 2401:8360:6::/48 2401:8360:b::-2401:8360:e:ffff:ffff:ffff:ffff:ffff 2401:8360:a1::/48 Signature Algorithm: sha256WithRSAEncryption 40:dc:14:1d:8a:ca:9e:b5:f2:4b:48:5d:d2:6f:5c:59:f3:5c: e2:71:06:f7:83:83:e2:1a:40:1e:ab:4b:38:fc:47:42:ea:e9: 5e:4e:d6:6b:77:35:e9:54:09:4c:50:aa:32:97:4e:b7:74:b1: fa:82:52:b7:6a:57:08:fa:ec:ee:51:a7:bb:36:16:77:37:12: dd:d6:7d:9a:aa:b6:9f:da:38:90:43:15:f9:54:67:40:2b:49: b4:c6:d3:95:31:1c:20:4a:2e:25:8a:b4:4a:1e:91:38:d8:31: a4:80:e5:77:97:ea:6b:be:07:5b:be:31:23:1e:86:fb:b9:71: b9:b0:8c:1b:c5:e7:69:36:08:6d:b3:79:dd:e7:ad:19:f5:0d: 4a:21:28:34:f7:8c:33:96:94:4d:1a:2a:27:78:b3:69:fb:92: 25:2c:fd:48:fc:dc:20:a0:68:e1:08:8c:0c:2a:3d:e7:3f:51: c3:7f:4c:7b:a4:10:3d:12:e3:bb:2b:43:a4:bd:b2:12:59:d6: ac:7a:09:9b:2a:b8:b7:48:69:1e:c4:b0:01:2b:8c:bd:1c:66: 7c:2f:dd:de:68:6e:f6:a5:6f:50:60:f6:4c:19:ec:b9:f5:ff: c6:f2:de:fe:84:5f:94:c9:c7:87:e8:04:65:c3:6a:01:4c:9b: 1c:4b:15:24 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjYwNDAzMDQzODI1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNmNDQ0MS1lOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA99IQU7gL66hF4cvbXgWxYZzlRcnXdMWnFjclJ6CxUP6kwyPpD1vFLKRGpo dIvmyUrUSGDJqIFVk+F7fQ3hxcLyqoDrAxUGG/nUPS0mlFXTTsBT4qO9Nja8F7/L uI12o7vyA7IqcCui2Pp1f1UjDc00O1uy213l5WpokIbPtgbygx3wkxhll3DbFPj9 P0OhiQnBfNchkyabLTfSrCZHQuwt9T85oJy94xQCHvw87uz58RNo345n/k915WHJ PcN+uPKVbFSWxZBkWJ4MPu6S8yz00VTnVKh29UVEe97CEjFZLa+qS9MlKsiNAbGr h0yKJtEaGRsvoFlhEmxQHdnfzwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFJgoeUst ZOwh+LGyaV6Ws66t356UMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBENzIvOEIyNUFEMDREMjJCMTFFRUJDMTQ1MzQzQzRGOUFFMDIvM0FCNzdCNThF MjMzMTFGMEI5MkMzQUY1NkM2RjU2QkMucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzA1 BAIAAjAvAwcAJAGDYAACAwcAJAGDYAAGMBIDBwAkAYNgAAsDBwAkAYNgAA4DBwAk AYNgAKEwDQYJKoZIhvcNAQELBQADggEBAEDcFB2Kyp618ktIXdJvXFnzXOJxBveD g+IaQB6rSzj8R0Lq6V5O1mt3NelUCUxQqjKXTrd0sfqCUrdqVwj67O5Rp7s2Fnc3 Et3WfZqqtp/aOJBDFflUZ0ArSbTG05UxHCBKLiWKtEoekTjYMaSA5XeX6mu+B1u+ MSMehvu5cbmwjBvF52k2CG2zed3nrRn1DUohKDT3jDOWlE0aKid4s2n7kiUs/Uj8 3CCgaOEIjAwqPec/UcN/THukED0S47srQ6S9shJZ1qx6CZsquLdIaR7EsAErjL0c Znwv3d5obvalb1Bg9kwZ7Ln1/8by3v6EX5TJx4foBGXDagFMmxxLFSQ= -----END CERTIFICATE-----Generated at Fri Apr 17 11:14:00 2026 by rpki-client