$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa File: 3AB77B58E23311F0B92C3AF56C6F56BC.roa (raw, json) Hash identifier: tq6t304k8TDiLS/O4Tcaui/U1Dh+ilPjOVnXesRwrRM= Subject key identifier: 83:B6:3C:61:5B:2D:31:C9:E0:17:46:5E:8C:64:2B:82:F0:63:AD:E5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 01D0 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa Signing time: Mon 04 May 2026 09:15:27 +0000 ROA not before: Mon 04 May 2026 09:15:27 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 152586 IP address blocks: 2401:8360:2::/48 maxlen: 48 2401:8360:6::/48 maxlen: 48 2401:8360:b::/48 maxlen: 48 2401:8360:c::/48 maxlen: 48 2401:8360:d::/48 maxlen: 48 2401:8360:e::/48 maxlen: 48 2401:8360:a1::/48 maxlen: 48 2401:8360:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: May 4 09:15:27 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69f863ae-7e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:1f:13:98:aa:a4:a2:a6:7b:57:5b:04:91: ab:c6:9d:43:8e:a4:96:df:b6:fc:b8:e4:16:55:c6: 78:74:f8:ce:74:fe:03:79:d2:52:91:f8:ba:4a:3f: 82:b8:94:e6:62:c7:67:a0:27:5a:4a:d0:2d:78:fc: aa:67:a8:75:65:9d:a4:f0:b4:c3:4f:54:66:2e:ed: 74:82:2b:1d:bb:f5:f6:2d:d6:ac:a5:15:f0:f8:95: 93:9c:bb:65:04:ae:d9:67:f7:10:75:d1:08:9e:8b: 8c:e5:3f:84:a2:26:59:50:98:aa:13:d5:3e:da:5c: 8a:e3:7d:8f:28:de:57:57:14:f0:3f:02:1c:e9:7d: e5:f7:50:88:58:7a:b6:18:cd:1a:e6:1d:65:8e:e6: a0:31:54:c7:f8:1f:b6:0b:5c:be:12:ae:6b:47:61: 67:28:f8:9a:ef:ba:f3:cc:c5:60:28:42:d6:46:52: a6:d4:1b:88:be:82:72:8a:50:d7:d3:f6:a5:32:0b: 60:03:55:78:59:32:4f:ac:45:b5:4e:0a:9e:fb:ef: 33:c5:2e:e5:30:fe:a5:6b:87:48:5e:0a:5b:bf:39: b3:57:86:a1:64:de:4e:66:4a:32:33:fe:c4:4f:62: b4:de:3b:13:2a:ce:c9:1c:37:b5:a3:3f:47:ad:1e: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B6:3C:61:5B:2D:31:C9:E0:17:46:5E:8C:64:2B:82:F0:63:AD:E5 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/3AB77B58E23311F0B92C3AF56C6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2401:8360:2::/48 2401:8360:6::/48 2401:8360:b::-2401:8360:e:ffff:ffff:ffff:ffff:ffff 2401:8360:a1::-2401:8360:a2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 96:99:8f:85:66:e5:c8:38:09:d0:49:08:e5:10:84:28:3c:d7: f2:68:d6:12:05:5a:e3:7b:e8:8c:fc:71:09:cd:31:05:7f:6a: 84:03:8b:81:61:8e:d1:4f:42:28:02:20:d0:01:ff:17:65:3b: e4:98:4d:bc:fb:bc:db:39:f6:a1:9d:ab:59:89:4d:2e:4d:fc: cc:b9:30:7d:da:5f:2e:6e:5f:ea:62:e7:ff:3b:d0:98:2e:f1: 15:49:3c:d5:e4:15:5a:9e:d3:e9:01:54:b9:fb:44:e6:d5:cc: 71:9e:b6:92:d5:27:b5:5d:7a:aa:27:da:ca:7f:77:eb:91:c7: ea:5d:f7:6c:b5:e2:ff:29:cb:8e:16:a9:2b:c5:55:e2:c3:57: 7b:8a:0e:42:c7:16:e0:35:4f:86:19:19:e5:72:fd:e4:a6:c5: 76:c2:6d:e0:96:a3:1f:7e:22:4b:31:77:0c:0b:86:ff:31:38: ba:b6:15:aa:b6:15:a5:31:9f:59:56:1e:ae:a2:cf:ab:37:fc: 0e:60:55:84:2f:1e:a7:9f:5d:1a:48:de:67:10:8c:7f:e2:d5: 10:88:c1:f9:05:a4:bd:34:7e:d9:b9:7b:e8:2e:1e:b8:4a:84: 01:6f:b2:f5:ac:51:0d:d5:fe:6e:ff:80:67:cb:92:17:8a:f6: 45:a7:3a:44 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjYwNTA0MDkxNTI3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWY4NjNhZS03ZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHMfE5iqpKKme1dbBJGrxp1DjqSW37b8uOQWVcZ4dPjOdP4DedJSkfi6Sj+C uJTmYsdnoCdaStAtePyqZ6h1ZZ2k8LTDT1RmLu10gisdu/X2LdaspRXw+JWTnLtl BK7ZZ/cQddEInouM5T+EoiZZUJiqE9U+2lyK432PKN5XVxTwPwIc6X3l91CIWHq2 GM0a5h1ljuagMVTH+B+2C1y+Eq5rR2FnKPia77rzzMVgKELWRlKm1BuIvoJyilDX 0/alMgtgA1V4WTJPrEW1Tgqe++8zxS7lMP6la4dIXgpbvzmzV4ahZN5OZkoyM/7E T2K03jsTKs7JHDe1oz9HrR7RRwIDAQABo4IClDCCApAwHQYDVR0OBBYEFIO2PGFb LTHJ4BdGXoxkK4LwY63lMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBENzIvOEIyNUFEMDREMjJCMTFFRUJDMTQ1MzQzQzRGOUFFMDIvM0FCNzdCNThF MjMzMTFGMEI5MkMzQUY1NkM2RjU2QkMucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjBA BAIAAjA6AwcAJAGDYAACAwcAJAGDYAAGMBIDBwAkAYNgAAsDBwAkAYNgAA4wEgMH ACQBg2AAoQMHACQBg2AAojANBgkqhkiG9w0BAQsFAAOCAQEAlpmPhWblyDgJ0EkI 5RCEKDzX8mjWEgVa43vojPxxCc0xBX9qhAOLgWGO0U9CKAIg0AH/F2U75JhNvPu8 2zn2oZ2rWYlNLk38zLkwfdpfLm5f6mLn/zvQmC7xFUk81eQVWp7T6QFUuftE5tXM cZ62ktUntV16qifayn9365HH6l33bLXi/ynLjhapK8VV4sNXe4oOQscW4DVPhhkZ 5XL95KbFdsJt4JajH34iSzF3DAuG/zE4urYVqrYVpTGfWVYerqLPqzf8DmBVhC8e p59dGkjeZxCMf+LVEIjB+QWkvTR+2bl76C4euEqEAW+y9axRDdX+bv+AZ8uSF4r2 Rac6RA== -----END CERTIFICATE-----Generated at Wed May 13 02:54:09 2026 by rpki-client