$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9698AB7CAA9C11F19A39B1ED3211F970.roa File: 9698AB7CAA9C11F19A39B1ED3211F970.roa (raw, json) Hash identifier: llguW/hwTQI9GjvGT6vt6b9CrN266whG7OGECeT9GWM= Subject key identifier: 61:B6:79:CA:D5:B7:50:1E:2B:E6:7D:99:CD:79:BF:97:A7:C4:F2:8B Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 0215 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9698AB7CAA9C11F19A39B1ED3211F970.roa Signing time: Mon 07 Sep 2026 09:14:54 +0000 ROA not before: Mon 07 Sep 2026 09:14:54 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 152586 IP address blocks: 2401:8360:2::/48 maxlen: 48 2401:8360:6::/48 maxlen: 48 2401:8360:b::/48 maxlen: 48 2401:8360:c::/48 maxlen: 48 2401:8360:d::/48 maxlen: 48 2401:8360:e::/48 maxlen: 48 2401:8360:a1::/48 maxlen: 48 2401:8360:a2::/48 maxlen: 48 2401:8360:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Sep 7 09:14:54 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a9e808e-5161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:4c:cf:81:a8:e9:02:52:33:fc:a3:25:a9: 5a:e5:79:37:63:7b:cc:09:fb:f3:69:a4:11:3a:ff: fd:4d:3f:c6:7e:0c:55:12:d0:8c:9a:48:75:e1:68: cf:db:eb:5b:f2:01:21:63:f9:f7:7a:e9:18:fe:f6: b2:d4:fb:d7:2d:d8:7a:0f:18:ff:62:35:72:b5:37: ef:31:cc:fd:f4:1f:71:7b:c3:47:a0:15:ca:0e:b5: 67:30:65:e4:e3:43:58:33:db:67:b6:35:ab:48:58: 1c:cf:3a:c8:ed:a1:72:2b:17:60:ce:ec:3f:0e:0c: 81:fa:49:09:f9:9d:76:32:1a:fb:65:3f:65:a9:ab: 77:68:f5:5a:6d:7e:2d:20:27:b4:6f:c0:63:7e:1e: 87:e7:c5:dd:65:60:40:18:ed:a1:d6:b6:24:4b:00: 33:ed:39:04:96:04:df:75:a7:af:14:f0:51:2c:7d: 99:f4:77:ae:4c:bd:ab:26:15:41:25:95:ad:0c:19: ce:c1:ed:35:14:2a:cd:7b:bb:13:5e:97:42:c2:31: ab:7f:33:84:7e:2a:f9:4b:06:83:0d:8f:7b:1f:f0: 33:7d:f0:6d:31:de:73:33:82:26:79:27:db:2e:0a: e2:43:03:e5:aa:9b:f6:23:89:74:94:ea:01:f8:bd: 22:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B6:79:CA:D5:B7:50:1E:2B:E6:7D:99:CD:79:BF:97:A7:C4:F2:8B X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9698AB7CAA9C11F19A39B1ED3211F970.roa sbgp-ipAddrBlock: critical IPv6: 2401:8360:2::/48 2401:8360:6::/48 2401:8360:b::-2401:8360:e:ffff:ffff:ffff:ffff:ffff 2401:8360:a1::-2401:8360:a2:ffff:ffff:ffff:ffff:ffff 2401:8360:a4::/48 Signature Algorithm: sha256WithRSAEncryption 93:05:f6:18:c3:b4:14:6c:cd:8d:87:c6:92:3d:0b:37:c3:b1: 74:66:60:65:b7:7f:71:0f:ae:6c:03:3f:b6:59:a8:1d:52:27: df:c6:b8:09:ca:15:63:a9:4c:22:5a:12:c2:76:d5:bb:84:eb: 81:de:60:b8:bf:63:c3:c7:c1:38:cc:4b:7e:42:f3:09:47:d3: b0:1c:ef:67:bd:57:c5:e8:dc:0e:3b:ad:e7:0d:30:d8:71:67: 8b:7c:2d:92:95:59:1e:3a:81:ee:ed:13:b7:34:af:e6:e6:17: 39:d6:f3:e3:6c:93:39:b4:10:d8:82:86:df:d3:9d:35:9d:69: 5c:e8:b3:5d:8e:42:27:98:a3:e7:03:ef:a4:9b:b5:26:41:e7: 10:90:04:e5:8d:67:d1:15:43:0e:41:f8:19:3b:8f:bb:b5:70: 4a:ca:78:3c:07:d6:4b:5d:70:88:b3:29:14:04:0a:cc:a8:7e: f1:31:03:c8:19:e7:6c:72:9c:56:61:31:f3:c7:35:6c:8e:e6: 12:48:1b:ca:c5:af:16:32:c0:c8:08:f3:bc:e1:d9:1e:1c:e7: 95:4f:76:dd:24:65:72:e5:34:89:77:f9:7f:bc:91:b7:cb:73: 5c:d8:18:8a:6e:f4:d0:18:dd:40:f1:71:dd:9d:88:86:42:20: 71:28:3d:f4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjYwOTA3MDkxNDU0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTllODA4ZS01MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXRMz4Go6QJSM/yjJala5Xk3Y3vMCfvzaaQROv/9TT/GfgxVEtCMmkh14WjP 2+tb8gEhY/n3eukY/vay1PvXLdh6Dxj/YjVytTfvMcz99B9xe8NHoBXKDrVnMGXk 40NYM9tntjWrSFgczzrI7aFyKxdgzuw/DgyB+kkJ+Z12Mhr7ZT9lqat3aPVabX4t ICe0b8Bjfh6H58XdZWBAGO2h1rYkSwAz7TkElgTfdaevFPBRLH2Z9HeuTL2rJhVB JZWtDBnOwe01FCrNe7sTXpdCwjGrfzOEfir5SwaDDY97H/AzffBtMd5zM4ImeSfb LgriQwPlqpv2I4l0lOoB+L0iowIDAQABo4ICnTCCApkwHQYDVR0OBBYEFGG2ecrV t1AeK+Z9mc15v5enxPKLMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBENzIvOEIyNUFEMDREMjJCMTFFRUJDMTQ1MzQzQzRGOUFFMDIvOTY5OEFCN0NB QTlDMTFGMTlBMzlCMUVEMzIxMUY5NzAucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzBJ BAIAAjBDAwcAJAGDYAACAwcAJAGDYAAGMBIDBwAkAYNgAAsDBwAkAYNgAA4wEgMH ACQBg2AAoQMHACQBg2AAogMHACQBg2AApDANBgkqhkiG9w0BAQsFAAOCAQEAkwX2 GMO0FGzNjYfGkj0LN8OxdGZgZbd/cQ+ubAM/tlmoHVIn38a4CcoVY6lMIloSwnbV u4Trgd5guL9jw8fBOMxLfkLzCUfTsBzvZ71XxejcDjut5w0w2HFni3wtkpVZHjqB 7u0TtzSv5uYXOdbz42yTObQQ2IKG39OdNZ1pXOizXY5CJ5ij5wPvpJu1JkHnEJAE 5Y1n0RVDDkH4GTuPu7VwSsp4PAfWS11wiLMpFAQKzKh+8TEDyBnnbHKcVmEx88c1 bI7mEkgbysWvFjLAyAjzvOHZHhznlU923SRlcuU0iXf5f7yRt8tzXNgYim700Bjd QPFx3Z2IhkIgcSg99A== -----END CERTIFICATE-----Generated at Mon Sep 21 02:27:03 2026 by rpki-client