$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/A90EFDD2184E11F1A5F3D04C283D8C67.roa File: A90EFDD2184E11F1A5F3D04C283D8C67.roa (raw, json) Hash identifier: GF/l2SZwknV/YN0h9ka4JnIB7U28JEFxozdko/6I8BY= Subject key identifier: 3B:0E:16:BD:73:66:BF:F1:FF:CF:A1:B0:D3:DD:B3:5B:8D:15:48:94 Certificate issuer: /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Certificate serial: 02 Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/A90EFDD2184E11F1A5F3D04C283D8C67.roa Signing time: Thu 05 Mar 2026 04:49:15 +0000 ROA not before: Thu 05 Mar 2026 04:49:15 +0000 ROA not after: Sat 01 May 2038 00:00:00 +0000 asID: 131211 IP address blocks: 2401:4600::/32 maxlen: 32 2401:4600:1000::/36 maxlen: 36 2401:4600:2000::/36 maxlen: 36 2401:4600:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Validity Not Before: Mar 5 04:49:15 2026 GMT Not After : May 1 00:00:00 2038 GMT Subject: CN=69a90b4b-db28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:58:3e:7d:30:d1:5e:70:41:cd:65:93:46: 63:88:b6:74:7a:85:61:cf:8a:48:c0:16:d0:8a:ca: d4:3a:8b:1a:57:73:ea:04:f8:80:b7:f5:69:95:9d: 0c:ad:e0:78:73:45:f1:bf:c3:19:0f:dd:0b:05:65: 5f:4d:fc:c6:eb:63:85:94:4e:25:b6:fc:9b:7b:ca: f0:1b:00:5c:3d:71:26:25:34:94:9f:e4:2e:78:4c: 8f:d6:54:9d:77:41:3b:aa:02:c2:46:3d:6f:90:74: 5f:9e:e6:38:5f:62:ab:f2:a9:50:50:41:a1:3b:b5: 33:82:cc:ee:b6:36:3f:5c:14:3e:d0:98:ce:df:9e: 54:d6:b0:65:7a:6b:06:a3:32:8c:70:cc:28:a5:8a: ea:87:16:55:60:d1:db:8a:d9:1e:99:b6:a7:87:41: 9a:b0:1e:15:a5:55:72:de:4a:8c:54:e0:02:35:d6: ab:b0:96:08:ba:4b:d8:ad:3e:85:7c:2c:d8:6d:5b: 30:fc:49:8c:43:13:fc:08:1d:d3:62:27:74:1a:d9: 78:0e:c3:03:ec:79:8b:03:3e:58:40:86:79:ed:fb: 99:e0:eb:7f:78:72:0f:53:ef:06:d6:76:52:78:92: 8e:f0:b1:87:c3:55:2e:d6:0e:d0:b0:74:71:4d:86: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0E:16:BD:73:66:BF:F1:FF:CF:A1:B0:D3:DD:B3:5B:8D:15:48:94 X509v3 Authority Key Identifier: keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/A90EFDD2184E11F1A5F3D04C283D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2401:4600::/32 Signature Algorithm: sha256WithRSAEncryption 4d:b1:e3:3c:f2:5c:75:88:8b:5c:34:c9:58:4f:8a:b4:10:e3: 9f:19:e6:14:0e:e7:9c:73:44:bb:92:72:81:8a:9a:b1:54:82: b1:29:ad:e1:e6:c4:54:1a:3c:b0:a1:c1:f1:d6:9b:d0:17:04: ac:87:c5:88:4c:20:e4:51:44:df:46:9e:b0:60:fc:70:54:0b: 1b:d6:f9:34:68:4c:46:dc:4a:62:92:cb:34:ab:46:69:13:4d: 59:e4:23:06:7c:74:f9:0f:0c:d9:c8:f5:e9:89:9f:90:25:2d: 7e:ee:2a:c6:a9:b4:87:2f:da:3d:78:13:48:6e:f5:30:9f:e4: e8:81:05:37:d2:27:f6:1c:e3:8a:f6:ee:3d:63:8b:28:53:1b: 82:b0:d0:7d:94:07:19:e6:14:b2:fd:5f:2d:2f:e4:3b:36:2f: 61:5c:6d:e6:7c:03:db:b1:e7:03:37:25:55:2c:e1:56:be:73: 83:2c:61:d9:2f:e5:2c:47:aa:0c:fa:2e:6a:35:51:ae:c0:1e: 4f:88:09:29:8e:f6:9b:bf:9c:86:63:54:42:89:c1:49:d1:5c: 29:68:d5:bd:a6:07:8a:98:d7:d4:6a:06:a0:2c:1b:a4:ef:19: e5:e0:ef:95:83:9a:d8:5c:8b:d5:88:b3:46:b5:7f:e2:07:92: 7e:5f:03:c2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoQkQ3MjE0M0RCN0FGRjYxM0U4MkVBMjkwQjRDOUMyQkZG QTg4QkMyNjAeFw0yNjAzMDUwNDQ5MTVaFw0zODA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTkwYjRiLWRiMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCce1g+fTDRXnBBzWWTRmOItnR6hWHPikjAFtCKytQ6ixpXc+oE+IC39WmVnQyt 4HhzRfG/wxkP3QsFZV9N/MbrY4WUTiW2/Jt7yvAbAFw9cSYlNJSf5C54TI/WVJ13 QTuqAsJGPW+QdF+e5jhfYqvyqVBQQaE7tTOCzO62Nj9cFD7QmM7fnlTWsGV6awaj MoxwzCiliuqHFlVg0duK2R6ZtqeHQZqwHhWlVXLeSoxU4AI11quwlgi6S9itPoV8 LNhtWzD8SYxDE/wIHdNiJ3Qa2XgOwwPseYsDPlhAhnnt+5ng6394cg9T7wbWdlJ4 ko7wsYfDVS7WDtCwdHFNhhpbAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUOw4WvXNm v/H/z6Gw092zW40VSJQwHwYDVR0jBBgwFoAUvXIUPbev9hPoLqKQtMnCv/qIvCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzYzMDI3REY2MTg0 RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQb0xxS1F0TW5Ddl9xSXZD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhJVVBiZXY5aFBvTHFLUXRNbkN2X3FJdkNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny82MzAyN0RGNjE4NEQxMUYxQjJGOUI0MkQyODNEOEM2Ny9BOTBFRkREMjE4 NEUxMUYxQTVGM0QwNEMyODNEOEM2Ny5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAUYAMA0GCSqGSIb3DQEBCwUAA4IBAQBNseM88lx1iItcNMlYT4q0 EOOfGeYUDuecc0S7knKBipqxVIKxKa3h5sRUGjywocHx1pvQFwSsh8WITCDkUUTf Rp6wYPxwVAsb1vk0aExG3Epikss0q0ZpE01Z5CMGfHT5DwzZyPXpiZ+QJS1+7irG qbSHL9o9eBNIbvUwn+TogQU30if2HOOK9u49Y4soUxuCsNB9lAcZ5hSy/V8tL+Q7 Ni9hXG3mfAPbsecDNyVVLOFWvnODLGHZL+UsR6oM+i5qNVGuwB5PiAkpjvabv5yG Y1RCicFJ0VwpaNW9pgeKmNfUagagLBuk7xnl4O+Vg5rYXIvViLNGtX/iB5J+XwPC -----END CERTIFICATE-----Generated at Thu Mar 26 15:12:38 2026 by rpki-client