$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa File: AA398864B96611EF8161BF51C4F9AE02.roa (raw, json) Hash identifier: xubgESY7ENUwjaYICY3KQDEJuRzIf66RrN29YCUy9DU= Subject key identifier: 47:BC:3A:07:A0:78:A0:74:E0:AB:12:6F:CE:09:1F:8E:30:94:D5:3E Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 026D Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa Signing time: Mon 02 Mar 2026 04:43:45 +0000 ROA not before: Sun 31 Aug 2025 04:21:18 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139358 IP address blocks: 2401:e60:20::/44 maxlen: 44 2401:e60:20::/48 maxlen: 48 2401:e60:30::/44 maxlen: 44 2401:e60:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Aug 31 04:21:18 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a51581-3756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:02:86:3d:ac:f9:ec:3a:7c:36:0c:59:9d:82: cb:ee:f5:f0:13:5d:ff:a5:5b:60:75:f9:e6:00:b6: b0:8d:05:e5:ac:67:9f:5b:97:45:d5:3a:e2:dd:af: cf:c5:97:94:21:5f:0d:86:2c:e7:43:90:be:ac:8d: 78:2c:c1:9f:9e:0a:53:2d:dc:87:69:ea:69:12:25: f1:15:61:aa:5d:9b:73:78:81:13:e5:5f:d6:67:9f: cd:76:29:45:f6:d2:6b:55:1a:4f:93:f2:ca:9c:52: 2b:45:d7:fc:99:b0:26:b2:9a:b0:e4:5c:a0:1a:da: 36:a7:93:10:36:2d:11:6f:51:8d:8a:86:bf:4a:0f: 25:76:78:01:86:97:52:59:91:50:df:4c:79:38:1d: ad:11:e5:d4:2c:ef:23:a7:95:88:79:b8:cf:82:1b: 70:cd:18:8e:86:d5:8e:4c:ef:0e:82:00:fa:00:70: ce:a9:17:26:6d:98:d7:97:27:00:a5:da:39:81:16: 31:54:57:c0:03:c8:c3:98:1b:38:93:d3:53:5f:73: fc:4d:c2:a1:f1:91:37:3e:af:6e:a5:0b:12:93:e4: 95:d2:02:6b:e3:75:78:c1:2b:99:b9:1a:e0:d2:e5: 3c:92:79:66:42:ac:e7:54:0f:b2:3f:eb:88:d7:97: ce:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BC:3A:07:A0:78:A0:74:E0:AB:12:6F:CE:09:1F:8E:30:94:D5:3E X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/AA398864B96611EF8161BF51C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:e60:20::/43 2401:e60:100::/40 Signature Algorithm: sha256WithRSAEncryption 72:f0:23:41:81:8c:44:fe:6e:6c:25:5d:1f:48:46:c4:dd:71: 67:55:09:32:28:80:56:d6:83:41:20:cb:f4:ae:6b:b4:b6:1b: e1:00:3e:df:e5:eb:56:f8:ef:27:14:b9:a6:c4:41:47:5c:98: ee:48:94:a2:2f:f7:a3:88:93:39:c4:0a:4c:ed:49:06:3e:4f: 66:9d:b2:7e:fd:16:f4:f7:29:60:cd:a3:57:38:32:6f:b0:d0: 24:dc:8f:23:59:6e:e5:12:7d:9e:9c:a1:95:74:ba:3d:bf:e5: 94:6f:a7:78:0c:5d:fc:75:de:1e:7c:37:7b:47:60:68:ad:83: b1:ab:25:22:a3:7a:d3:b0:e3:bc:23:45:a7:37:c4:5d:72:8a: 6a:4d:9a:03:a4:ae:af:7f:58:f8:4f:89:36:be:6b:68:3d:fc: 51:05:f0:d3:ed:d7:5d:f5:09:55:f5:09:59:7c:c1:97:5a:22: ef:3f:e9:11:38:7e:47:e9:b4:4a:72:61:e4:7c:47:ee:8b:0a: 3b:6d:f2:59:fb:7c:5c:33:dd:aa:68:dd:b8:fa:9a:9c:7f:7a: 40:17:11:bf:6e:d5:7a:41:c6:42:e4:e8:fa:28:5f:f0:8a:6b: 4b:12:4c:c6:67:5b:b7:01:fa:e9:f6:78:4a:0f:bc:cf:fd:2a: 07:76:a8:25 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUwODMxMDQyMTE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTU4MS0zNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8AKGPaz57Dp8NgxZnYLL7vXwE13/pVtgdfnmALawjQXlrGefW5dF1Tri3a/P xZeUIV8NhiznQ5C+rI14LMGfngpTLdyHaeppEiXxFWGqXZtzeIET5V/WZ5/NdilF 9tJrVRpPk/LKnFIrRdf8mbAmspqw5FygGto2p5MQNi0Rb1GNioa/Sg8ldngBhpdS WZFQ30x5OB2tEeXULO8jp5WIebjPghtwzRiOhtWOTO8OggD6AHDOqRcmbZjXlycA pdo5gRYxVFfAA8jDmBs4k9NTX3P8TcKh8ZE3Pq9upQsSk+SV0gJr43V4wSuZuRrg 0uU8knlmQqznVA+yP+uI15fODwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFEe8Ogeg eKB04KsSb84JH44wlNU+MB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JFQTcvMDQ0RjY0NDgxMTY4MTFFRUFDNjNDMjM0QzRGOUFFMDIvQUEzOTg4NjRC OTY2MTFFRjgxNjFCRjUxQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAAjARAwcFJAEOYAAgAwYAJAEOYAEwDQYJKoZIhvcNAQELBQADggEBAHLwI0GB jET+bmwlXR9IRsTdcWdVCTIogFbWg0Egy/Sua7S2G+EAPt/l61b47ycUuabEQUdc mO5IlKIv96OIkznECkztSQY+T2adsn79FvT3KWDNo1c4Mm+w0CTcjyNZbuUSfZ6c oZV0uj2/5ZRvp3gMXfx13h58N3tHYGitg7GrJSKjetOw47wjRac3xF1yimpNmgOk rq9/WPhPiTa+a2g9/FEF8NPt1131CVX1CVl8wZdaIu8/6RE4fkfptEpyYeR8R+6L Cjtt8ln7fFwz3apo3bj6mpx/ekAXEb9u1XpBxkLk6PooX/CKa0sSTMZnW7cB+un2 eEoPvM/9Kgd2qCU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:44 2026 by rpki-client