$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa File: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (raw, json) Hash identifier: CUJiFb3wsnDR89oDUm7uslfgqxSnaigEoM8DNEzrw3Y= Subject key identifier: E3:FD:C9:37:89:07:70:21:EA:12:11:4C:0F:34:36:FE:E8:88:D0:C5 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 29EF Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa Signing time: Sun 30 Aug 2026 16:24:35 +0000 ROA not before: Sun 30 Aug 2026 16:24:35 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 140934 IP address blocks: 2402:9e80:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10735 (0x29ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 30 16:24:35 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a945943-3b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:da:44:9a:6a:12:9e:e1:0c:2d:72:4f:e1: dc:54:f3:47:1e:9f:a3:4a:6b:7e:93:f2:09:4f:63: 1e:04:8b:46:5f:20:7f:e2:c3:57:cd:c3:f3:90:99: d3:62:f0:f7:dc:b8:44:ec:d6:d0:e7:83:5d:43:1b: 25:62:7b:c9:19:c4:d6:d0:1d:38:de:0d:86:d0:35: e6:7d:e7:bc:1c:ca:13:30:eb:a4:ef:6c:14:1d:00: 5d:df:85:be:ea:9c:74:76:f5:6d:b8:d1:b5:0c:1f: b4:87:a0:ee:ec:40:f3:24:ac:9a:7e:a5:83:43:45: b3:00:37:f3:1b:ba:09:7d:aa:a0:f1:e9:7e:3f:2d: d2:d7:a5:8c:f9:47:af:00:4a:5c:26:7d:69:71:ae: a6:aa:80:9b:7f:c9:26:3a:3b:94:da:69:4f:21:72: 11:f2:59:c5:4d:86:85:63:f8:8c:24:48:1d:42:78: e3:b0:bf:30:ee:a1:92:fb:0b:5b:d3:47:a7:3c:9e: cd:4a:39:54:2d:2c:79:96:9b:83:6a:7b:cb:57:00: e7:94:77:1a:1a:c8:dc:99:f3:4e:2f:14:7f:6e:22: ac:b4:15:39:62:1d:2a:63:be:18:b9:cd:41:52:0a: 18:b6:a1:4f:c1:99:f9:ba:68:eb:5c:ac:f9:11:4d: b1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FD:C9:37:89:07:70:21:EA:12:11:4C:0F:34:36:FE:E8:88:D0:C5 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:9e80:23::/48 Signature Algorithm: sha256WithRSAEncryption c7:47:3d:9a:16:5c:34:13:cb:21:26:8e:c4:e4:e4:30:f0:23: b6:ed:47:b1:e9:3b:b6:d7:2d:a7:63:55:69:59:1a:af:b4:79: de:29:72:e0:9e:b3:61:85:5c:04:36:30:e4:71:9b:b2:85:ef: 68:e4:3a:cf:d1:00:98:7a:23:38:c0:be:f2:18:de:20:e7:45: de:a7:7d:56:45:81:3d:2d:73:aa:1e:6a:cf:18:39:02:a0:f5: cf:ef:37:dd:30:dd:ec:c8:88:80:4d:f8:2e:7b:cf:68:e3:29: ca:45:d7:91:67:0e:b2:5a:bb:d4:07:0e:fb:6e:ff:60:89:02: 99:08:30:72:25:87:13:c5:3c:97:cf:a4:15:92:96:91:0b:50: 5e:21:e8:05:b0:23:c8:e3:25:de:2e:99:54:37:9f:30:4a:7a: 6f:d6:e3:cc:db:96:f7:3d:c1:b4:8b:ce:a8:ea:51:61:98:fc: 7d:21:70:72:79:1d:3e:84:66:57:0b:55:d7:12:95:23:c7:dd: 6f:d1:01:ff:40:fd:54:1c:77:31:98:fd:39:64:d8:47:19:9d: d4:e5:de:fe:ae:4f:15:95:6a:b1:1d:be:a4:2b:19:67:f8:9b: b2:11:3b:72:57:24:89:d2:02:57:bb:1a:5a:2f:47:e6:3e:be: aa:b3:4e:f4 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICKe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjYwODMwMTYyNDM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0NTk0My0zYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwjaRJpqEp7hDC1yT+HcVPNHHp+jSmt+k/IJT2MeBItGXyB/4sNXzcPzkJnT YvD33LhE7NbQ54NdQxslYnvJGcTW0B043g2G0DXmfee8HMoTMOuk72wUHQBd34W+ 6px0dvVtuNG1DB+0h6Du7EDzJKyafqWDQ0WzADfzG7oJfaqg8el+Py3S16WM+Uev AEpcJn1pca6mqoCbf8kmOjuU2mlPIXIR8lnFTYaFY/iMJEgdQnjjsL8w7qGS+wtb 00enPJ7NSjlULSx5lpuDanvLVwDnlHcaGsjcmfNOLxR/biKstBU5Yh0qY74Yuc1B UgoYtqFPwZn5umjrXKz5EU2xDQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOP9yTeJ B3Ah6hIRTA80Nv7oiNDFMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMTk2OENBREFD Q0NBMTFFQTg2RUMwQTBEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAKegAAjMA0GCSqGSIb3DQEBCwUAA4IBAQDHRz2aFlw0E8shJo7E 5OQw8CO27Uex6Tu21y2nY1VpWRqvtHneKXLgnrNhhVwENjDkcZuyhe9o5DrP0QCY eiM4wL7yGN4g50Xep31WRYE9LXOqHmrPGDkCoPXP7zfdMN3syIiATfgue89o4ynK RdeRZw6yWrvUBw77bv9giQKZCDByJYcTxTyXz6QVkpaRC1BeIegFsCPI4yXeLplU N58wSnpv1uPM25b3PcG0i86o6lFhmPx9IXByeR0+hGZXC1XXEpUjx91v0QH/QP1U HHcxmP05ZNhHGZ3U5d7+rk8VlWqxHb6kKxln+JuyETtyVySJ0gJXuxpaL0fmPr6q s070 -----END CERTIFICATE-----Generated at Fri Sep 4 23:25:47 2026 by rpki-client