$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/ABCE17E0E15511F0A05B89F1756F56BC.roa File: ABCE17E0E15511F0A05B89F1756F56BC.roa (raw, json) Hash identifier: u8tryEt8wfaKIyYRGhYJY4HgZ/+NDx5NswoCB2TbM44= Subject key identifier: CB:BB:12:94:A1:8B:D5:D6:B1:A8:F2:49:3C:63:84:38:62:90:4A:28 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 01E6 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/ABCE17E0E15511F0A05B89F1756F56BC.roa Signing time: Mon 02 Mar 2026 14:22:05 +0000 ROA not before: Sat 27 Dec 2025 16:58:55 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 133617 IP address blocks: 2403:27c0:3000::/48 maxlen: 48 2403:27c0:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Dec 27 16:58:55 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a59d0d-f439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b6:b7:9f:5f:c2:b8:8e:70:47:9d:23:55:de: ea:16:e5:66:68:a9:8f:a7:3e:49:92:9f:3c:0f:3a: 04:14:f6:ae:1f:c2:1d:66:f0:fe:df:83:e8:63:11: 16:18:7d:49:48:d2:21:40:46:9e:73:7d:e6:ac:4c: b9:0d:9e:5c:00:41:aa:d9:8e:1f:8f:e3:78:4d:5d: 95:cb:e2:9f:05:d0:6e:a3:6f:08:84:bb:b1:64:c5: 21:44:65:f6:95:6f:eb:09:aa:4e:28:9f:5a:19:37: 6e:ba:1b:a4:7d:93:56:e4:18:b2:3b:2e:7a:65:5b: c4:b8:4d:35:fa:56:66:ff:32:69:b3:eb:f0:f7:cb: b5:65:60:b4:70:98:a9:16:c6:e6:29:bb:5a:62:82: 18:5d:f9:56:b6:ce:44:9f:96:fe:5a:9f:06:69:0e: 2b:f7:24:55:1a:a1:9b:52:b3:45:b2:16:e7:56:24: 0a:2c:f2:69:88:bf:c7:85:b3:99:50:8d:70:82:aa: 34:9d:c2:13:c3:97:06:7f:d9:85:f3:61:1a:d1:11: f7:90:0b:49:7b:1a:c7:0b:39:f2:3a:e5:10:ad:cc: 7c:e4:29:f4:75:ed:04:a9:17:eb:cf:af:d8:4b:2e: fa:6c:9a:fa:d3:6a:14:5e:58:b6:d5:3d:05:4d:6e: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BB:12:94:A1:8B:D5:D6:B1:A8:F2:49:3C:63:84:38:62:90:4A:28 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/ABCE17E0E15511F0A05B89F1756F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2403:27c0:3000::/48 2403:27c0:4000::/48 Signature Algorithm: sha256WithRSAEncryption 9f:2b:b8:13:88:6e:a8:c2:17:e6:99:ef:93:34:45:1e:83:bf: 1f:46:d9:71:40:e6:7f:6d:45:f9:93:ea:93:2e:6f:cf:c1:17: 01:35:49:52:c1:c5:20:36:45:23:f5:ac:d8:dd:30:5d:45:98: 03:26:e0:8e:77:cc:b1:4b:3e:29:63:46:83:13:42:2f:68:0f: 25:c8:c8:5c:bc:2c:99:b6:50:7a:7f:a1:13:f1:81:08:dd:a2: 60:e0:d1:c7:63:26:a9:0a:e2:f2:2e:e1:0d:8f:3b:cb:bb:ca: 57:a2:b0:76:e7:7f:0a:c6:dd:3a:42:6e:bc:6c:94:a6:b8:23: cf:31:c9:fb:4c:67:07:d3:eb:ce:90:c7:4e:d0:41:88:ab:03: 3b:4f:6c:c4:7e:7f:30:a5:51:94:fb:71:5b:98:33:60:07:cf: d4:e2:91:cb:95:62:86:0b:13:76:e2:37:d6:b1:25:5f:bb:b5: d7:c9:de:05:8a:57:95:84:08:1f:43:c4:aa:3b:a7:84:c1:ed: b1:50:47:b2:b9:14:c5:62:47:7a:39:94:90:0e:f7:87:19:68: 50:d5:18:50:3a:a5:f0:05:2b:0b:ec:20:fe:2d:23:69:43:cd: 4d:c3:a0:67:6e:4d:75:75:aa:eb:8c:a0:2d:c6:c8:71:9c:38: c9:2b:68:65 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUxMjI3MTY1ODU1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWQwZC1mNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ra3n1/CuI5wR50jVd7qFuVmaKmPpz5Jkp88DzoEFPauH8IdZvD+34PoYxEW GH1JSNIhQEaec33mrEy5DZ5cAEGq2Y4fj+N4TV2Vy+KfBdBuo28IhLuxZMUhRGX2 lW/rCapOKJ9aGTduuhukfZNW5BiyOy56ZVvEuE01+lZm/zJps+vw98u1ZWC0cJip FsbmKbtaYoIYXflWts5En5b+Wp8GaQ4r9yRVGqGbUrNFshbnViQKLPJpiL/HhbOZ UI1wgqo0ncITw5cGf9mF82Ea0RH3kAtJexrHCznyOuUQrcx85Cn0de0EqRfrz6/Y Sy76bJr602oUXli21T0FTW4+zwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMu7EpSh i9XWsajySTxjhDhikEooMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvQUJDRTE3RTBF MTU1MTFGMEEwNUI4OUYxNzU2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAJAMnwDAAAwcAJAMnwEAAMA0GCSqGSIb3DQEBCwUAA4IBAQCfK7gT iG6owhfmme+TNEUeg78fRtlxQOZ/bUX5k+qTLm/PwRcBNUlSwcUgNkUj9azY3TBd RZgDJuCOd8yxSz4pY0aDE0IvaA8lyMhcvCyZtlB6f6ET8YEI3aJg4NHHYyapCuLy LuENjzvLu8pXorB2538Kxt06Qm68bJSmuCPPMcn7TGcH0+vOkMdO0EGIqwM7T2zE fn8wpVGU+3FbmDNgB8/U4pHLlWKGCxN24jfWsSVfu7XXyd4FileVhAgfQ8SqO6eE we2xUEeyuRTFYkd6OZSQDveHGWhQ1RhQOqXwBSsL7CD+LSNpQ81Nw6Bnbk11darr jKAtxshxnDjJK2hl -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:38 2026 by rpki-client