$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/486F76B812BF11F0BA15A929C4F9AE02.roa File: 486F76B812BF11F0BA15A929C4F9AE02.roa (raw, json) Hash identifier: MsRfFP9S72fysIEBNUSAs/fCHLGyyvO8Y3S8iIzMN8Y= Subject key identifier: B3:4C:F5:F2:31:B5:EC:6F:B2:62:18:BA:D3:BE:2D:62:27:46:AC:BC Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 01BE Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/486F76B812BF11F0BA15A929C4F9AE02.roa Signing time: Fri 03 Apr 2026 04:38:26 +0000 ROA not before: Fri 03 Apr 2026 04:38:26 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 203363 IP address blocks: 2401:8360:3::/48 maxlen: 48 2401:8360:4::/48 maxlen: 48 2401:8360:7::/48 maxlen: 48 2401:8360:8::/48 maxlen: 48 2401:8360:9::/48 maxlen: 48 2401:8360:a::/48 maxlen: 48 2401:8360:a2::/48 maxlen: 48 2401:8360:a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Apr 3 04:38:26 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cf4442-de58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:74:db:fe:ea:c6:cf:b3:a7:6c:eb:3f:d7:da: 3c:f8:43:f8:e1:fa:02:7c:0a:6c:84:26:15:c7:1d: 00:38:41:0c:8f:06:bf:10:cc:66:93:7c:f6:0f:9a: a0:84:86:44:d4:1d:50:45:66:b8:0f:8c:e9:10:9f: e9:05:68:d2:80:fe:2f:2d:de:a1:a6:2d:54:55:04: d7:3d:8f:7e:4d:66:ed:a6:da:63:55:cd:00:d2:e2: d9:ce:6a:61:d9:88:44:3f:57:ef:a1:dd:1a:bc:5a: 2c:7d:c3:de:b8:d5:10:ec:0a:37:70:54:a8:b6:68: 03:3e:7b:b5:1c:c1:55:df:4d:2e:3b:1c:bb:8c:a8: 95:b3:3c:20:8b:57:f1:3e:49:29:cf:5f:a6:cb:54: 3b:a4:6f:59:75:22:48:cd:29:aa:e7:06:31:cb:fc: 3a:10:de:4f:23:7a:ec:9a:6c:c3:e0:a9:17:c9:27: 15:7b:31:69:e2:ad:7e:87:2b:f0:e5:09:a1:4b:b2: dc:f2:33:26:da:e5:60:1f:aa:9b:d7:5f:17:94:da: c3:18:76:e9:56:7a:0d:c2:4e:34:cb:d0:00:4e:4c: d9:5a:90:55:34:f0:8f:1d:0b:59:3a:16:6d:f6:37: 56:de:ca:da:6a:0b:87:9f:bd:65:bd:b8:18:6b:66: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4C:F5:F2:31:B5:EC:6F:B2:62:18:BA:D3:BE:2D:62:27:46:AC:BC X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/486F76B812BF11F0BA15A929C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:8360:3::-2401:8360:4:ffff:ffff:ffff:ffff:ffff 2401:8360:7::-2401:8360:a:ffff:ffff:ffff:ffff:ffff 2401:8360:a2::/47 Signature Algorithm: sha256WithRSAEncryption 69:bb:6a:7e:16:a4:3e:92:e2:73:a7:14:17:26:6e:c5:db:4a: 3e:18:4a:23:cb:8c:a2:85:d5:45:e8:26:c8:46:f0:5c:dd:a1: 67:fb:6c:56:e2:4d:99:5a:f3:cc:86:53:6b:ae:7a:44:4f:26: f0:9a:2c:04:2c:98:0b:48:5a:d7:de:f4:39:6d:20:ee:84:b8: df:a9:8f:f8:52:c9:b7:f4:54:5c:98:63:0f:ed:f2:19:9b:a7: e9:da:05:d5:bd:7b:a4:df:82:ba:8f:e2:ff:13:97:f0:d6:85: e5:d3:e1:8e:ff:e8:c8:b9:b0:c2:1d:8e:ee:94:93:5e:28:e4: ad:c6:aa:59:77:6f:62:b5:a7:c8:18:da:bf:df:1d:e9:cd:f8: 81:c9:70:18:3e:2f:82:19:57:1b:b2:17:dd:22:cb:12:3f:f9: c7:64:7a:ea:19:00:bd:26:50:8c:18:6a:ab:e1:8f:e1:be:84: 58:8c:2d:d6:f0:fc:2f:26:af:0a:2b:43:1b:91:e0:35:fd:f6: a4:f3:e2:98:b8:30:80:b1:b1:42:5b:72:db:84:ae:86:8b:53: c1:1b:6e:17:a7:69:7c:c2:bc:53:16:78:9d:67:80:c1:47:eb: 84:e4:a5:e9:db:39:e3:43:01:ec:3c:51:cb:95:0b:0d:e5:10: ef:e1:e7:00 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjYwNDAzMDQzODI2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNmNDQ0Mi1kZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjXTb/urGz7OnbOs/19o8+EP44foCfApshCYVxx0AOEEMjwa/EMxmk3z2D5qg hIZE1B1QRWa4D4zpEJ/pBWjSgP4vLd6hpi1UVQTXPY9+TWbtptpjVc0A0uLZzmph 2YhEP1fvod0avFosfcPeuNUQ7Ao3cFSotmgDPnu1HMFV300uOxy7jKiVszwgi1fx Pkkpz1+my1Q7pG9ZdSJIzSmq5wYxy/w6EN5PI3rsmmzD4KkXyScVezFp4q1+hyvw 5QmhS7Lc8jMm2uVgH6qb118XlNrDGHbpVnoNwk40y9AATkzZWpBVNPCPHQtZOhZt 9jdW3sraaguHn71lvbgYa2Y18wIDAQABo4ICizCCAocwHQYDVR0OBBYEFLNM9fIx texvsmIYutO+LWInRqy8MB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBENzIvOEIyNUFEMDREMjJCMTFFRUJDMTQ1MzQzQzRGOUFFMDIvNDg2Rjc2Qjgx MkJGMTFGMEJBMTVBOTI5QzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTA3 BAIAAjAxMBIDBwAkAYNgAAMDBwAkAYNgAAQwEgMHACQBg2AABwMHACQBg2AACgMH ASQBg2AAojANBgkqhkiG9w0BAQsFAAOCAQEAabtqfhakPpLic6cUFyZuxdtKPhhK I8uMooXVRegmyEbwXN2hZ/tsVuJNmVrzzIZTa656RE8m8JosBCyYC0ha1970OW0g 7oS436mP+FLJt/RUXJhjD+3yGZun6doF1b17pN+Cuo/i/xOX8NaF5dPhjv/oyLmw wh2O7pSTXijkrcaqWXdvYrWnyBjav98d6c34gclwGD4vghlXG7IX3SLLEj/5x2R6 6hkAvSZQjBhqq+GP4b6EWIwt1vD8LyavCitDG5HgNf32pPPimLgwgLGxQlty24Su hotTwRtuF6dpfMK8UxZ4nWeAwUfrhOSl6ds540MB7DxRy5ULDeUQ7+HnAA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:42:58 2026 by rpki-client