$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa File: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (raw, json) Hash identifier: +41red2tJMPOB/jumA+A/4ePkbLyzmti0kymWLM8jq8= Subject key identifier: C4:BD:83:38:E6:C9:AF:4B:A7:EB:ED:9B:05:21:D5:45:78:B5:94:D8 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 0441 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa Signing time: Sat 09 May 2026 00:31:22 +0000 ROA not before: Sat 09 May 2026 00:31:22 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 151338 IP address blocks: 2400:70e0:bab::/48 maxlen: 48 2400:70e0:baf::/48 maxlen: 48 2400:70e0:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: May 9 00:31:22 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69fe805a-57f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:66:17:74:6c:2f:98:f3:db:30:a5:ec:f1: 85:1f:5c:f3:f8:dd:e5:1e:d6:b4:b6:c4:36:fc:ac: 03:ae:ae:8b:05:9e:b2:ef:20:d7:79:cc:e5:49:73: e5:ff:4f:8c:2a:0f:0a:ba:9b:f0:72:6a:fb:e5:c4: 44:3d:73:49:0a:66:fa:8f:4c:84:c8:24:ff:75:4d: 22:f4:6c:24:bd:9d:1d:83:86:01:3a:e2:40:db:91: be:ee:4a:7c:78:d2:56:e3:d0:94:33:96:51:b3:2e: cb:f7:1e:3e:d2:ab:91:15:00:c6:d4:d6:88:19:8b: 3f:5e:47:de:f2:3e:44:d3:1e:82:62:e7:3a:ea:37: 31:c0:35:ac:42:39:eb:1f:92:2f:6d:ea:2d:54:ae: 63:c2:9c:d9:f8:f9:3a:89:bd:d3:8b:62:e0:35:1d: 46:42:87:55:81:70:ec:fe:69:9f:c3:9c:7a:db:d0: 6a:33:50:de:a5:9a:c5:f7:65:5e:f2:06:98:63:a7: 58:7f:19:84:1e:98:82:5f:e9:9a:09:94:ee:0c:ab: a5:0a:9b:83:4c:40:99:69:90:f6:90:04:71:2b:93: a1:00:e5:ec:ac:b3:e3:35:22:1f:c8:b8:17:97:2e: d6:ef:1a:e2:45:63:35:e4:35:b8:ef:15:06:d9:bc: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BD:83:38:E6:C9:AF:4B:A7:EB:ED:9B:05:21:D5:45:78:B5:94:D8 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:70e0:bab::/48 2400:70e0:baf::/48 2400:70e0:b000::/48 Signature Algorithm: sha256WithRSAEncryption 42:31:11:b8:1b:07:ad:c9:8a:aa:58:16:bf:00:53:1f:b0:14: fe:67:82:02:bf:82:34:54:db:b1:52:ed:3e:9f:32:e0:dc:aa: 35:b3:56:a6:9d:c7:35:1e:8a:73:82:f6:76:21:a4:4f:5c:8c: 39:d3:e1:d5:e1:eb:4b:ec:82:e7:98:39:3d:17:92:85:78:d2: 18:a1:bf:ee:86:c8:11:e2:6f:83:fe:c8:ee:2b:74:9a:cb:77: 97:31:52:80:be:a6:91:aa:95:88:18:8a:8a:0b:4e:bf:60:82: c7:60:86:3d:6c:36:42:86:3b:93:63:4a:b7:a8:0f:23:a0:21: 2c:5a:35:90:e6:93:75:a5:78:94:ea:a6:b8:cf:95:0e:72:5f: bb:cc:5b:2d:b1:5c:5e:b9:05:31:f9:51:20:4f:37:2a:e2:ba: 3a:e1:a3:5c:08:ca:bb:d6:05:4b:25:52:ce:b8:40:a5:d8:0d: c9:ee:0a:70:c4:72:e2:44:6a:06:db:6a:b6:7c:67:87:66:46: e5:90:97:be:74:30:53:56:48:54:93:81:7d:68:ed:8c:96:ac: 9c:94:b4:ac:a9:b8:99:6b:dd:ec:5b:c4:e3:ea:64:9b:6f:45: e8:92:22:ba:96:5f:d4:43:f6:13:40:93:a7:28:d2:4f:98:bd: 67:96:17:05 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjYwNTA5MDAzMTIyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZlODA1YS01N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oJmF3RsL5jz2zCl7PGFH1zz+N3lHta0tsQ2/KwDrq6LBZ6y7yDXeczlSXPl /0+MKg8Kupvwcmr75cREPXNJCmb6j0yEyCT/dU0i9GwkvZ0dg4YBOuJA25G+7kp8 eNJW49CUM5ZRsy7L9x4+0quRFQDG1NaIGYs/Xkfe8j5E0x6CYuc66jcxwDWsQjnr H5IvbeotVK5jwpzZ+Pk6ib3Ti2LgNR1GQodVgXDs/mmfw5x629BqM1DepZrF92Ve 8gaYY6dYfxmEHpiCX+maCZTuDKulCpuDTECZaZD2kARxK5OhAOXsrLPjNSIfyLgX ly7W7xriRWM15DW47xUG2bzfEQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMS9gzjm ya9Lp+vtmwUh1UV4tZTYMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvOUFDNzIxNjA0 QkMyMTFFRUE3QUYyQjZGQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh BAIAAjAbAwcAJABw4AurAwcAJABw4AuvAwcAJABw4LAAMA0GCSqGSIb3DQEBCwUA A4IBAQBCMRG4GwetyYqqWBa/AFMfsBT+Z4ICv4I0VNuxUu0+nzLg3Ko1s1amncc1 HopzgvZ2IaRPXIw50+HV4etL7ILnmDk9F5KFeNIYob/uhsgR4m+D/sjuK3Say3eX MVKAvqaRqpWIGIqKC06/YILHYIY9bDZChjuTY0q3qA8joCEsWjWQ5pN1pXiU6qa4 z5UOcl+7zFstsVxeuQUx+VEgTzcq4ro64aNcCMq71gVLJVLOuECl2A3J7gpwxHLi RGoG22q2fGeHZkblkJe+dDBTVkhUk4F9aO2MlqyclLSsqbiZa93sW8Tj6mSbb0Xo kiK6ll/UQ/YTQJOnKNJPmL1nlhcF -----END CERTIFICATE-----Generated at Wed May 13 04:31:24 2026 by rpki-client