$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DD8ACB8041C511E8BEC06D36C4F9AE02.roa File: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (raw, json) Hash identifier: U73/t2XreZfLgYtLRPt4vr4ltgJOAS8bVUxDbzHOuQI= Subject key identifier: D8:3E:15:3B:E1:D5:D2:1C:E9:15:8A:17:40:7D:94:EC:FC:6A:C4:9E Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 29D7 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DD8ACB8041C511E8BEC06D36C4F9AE02.roa Signing time: Sun 30 Aug 2026 16:23:48 +0000 ROA not before: Sun 30 Aug 2026 16:23:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133846 IP address blocks: 2402:9e80:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10711 (0x29d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 30 16:23:48 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a945914-ac89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:f0:e6:dc:63:a8:f4:0b:93:1b:47:88:6f: 5a:c5:87:52:2c:8b:4a:03:e7:70:ef:d6:5a:9b:ad: 75:fd:d8:ea:97:9d:ec:b8:00:a2:fc:62:18:cb:04: cb:06:1c:d8:38:01:10:a2:6d:1d:bf:8b:57:f2:d8: bb:0e:9f:c0:de:03:47:79:d7:2a:a1:05:7b:c4:0c: 24:6e:7e:c3:ae:16:62:6e:e3:ec:8e:f4:10:71:24: 47:94:4f:60:01:46:55:fa:4a:6f:54:6e:80:12:0e: d1:fd:e4:cc:ff:53:49:a7:80:72:b6:0d:d0:e1:58: 08:ee:19:63:c4:b2:6b:17:cd:4d:b1:5d:54:cf:00: 5d:98:ad:15:9d:6e:9a:8e:f7:a9:56:bb:b3:58:bb: a8:68:6f:bd:a9:ad:eb:1a:88:45:30:b7:e7:84:e4: 12:af:87:4e:bf:d9:ba:21:44:80:ff:71:9d:44:5d: 62:28:4f:b9:b2:55:59:ff:ff:f1:83:56:e4:be:2d: c5:aa:8e:88:58:db:e6:f0:94:33:c6:1a:52:09:47: 16:d1:f7:ca:13:78:f8:60:64:ef:25:f8:a0:07:6f: 2f:40:89:c4:92:04:f0:28:25:8c:56:5e:0a:6a:2d: 72:50:f0:37:6e:69:91:f3:03:92:07:01:71:43:5b: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3E:15:3B:E1:D5:D2:1C:E9:15:8A:17:40:7D:94:EC:FC:6A:C4:9E X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DD8ACB8041C511E8BEC06D36C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:9e80:18::/48 Signature Algorithm: sha256WithRSAEncryption 84:63:f1:b4:6f:4b:b9:42:e1:58:11:89:4b:a4:3e:62:e6:c9: fc:30:17:99:86:cf:42:a6:0c:99:27:c4:6f:1f:7a:7e:71:41: fc:3a:85:57:a7:0d:64:60:bf:5b:a9:70:ad:53:b6:e0:19:2b: 22:03:bd:9d:c4:25:25:21:10:f4:f3:ae:f6:01:4c:63:5e:79: b1:5c:07:dc:fa:bb:b2:24:64:44:9d:66:08:0b:e3:25:e1:e5: a0:3d:f4:a8:44:6d:6c:de:e0:3f:47:fe:ef:56:cc:16:9f:08: 55:64:d9:da:99:b4:93:a2:7a:0e:86:2b:76:e9:d9:b2:b8:ed: 8b:ce:ee:e9:63:7f:cb:67:92:7e:a2:04:01:5b:6a:d0:02:ac: 6c:bf:f5:c9:3c:96:5c:b8:63:ff:e5:84:2c:80:7e:d9:f0:b2: db:b5:65:33:25:58:56:1b:d6:5a:39:af:fe:52:fc:51:dd:50: 9c:bc:6a:65:09:a4:c9:22:ca:b2:50:ff:d8:e4:fc:91:da:55: 89:1a:0f:18:84:8c:2e:e0:a6:03:77:77:de:08:9d:35:37:2b: 63:83:0a:2e:2c:9a:f5:71:bb:50:32:24:15:ef:48:b9:4a:17: 51:f0:97:6b:f2:ac:4d:ba:60:fe:16:a5:86:e6:02:58:38:9f: b1:e6:c6:08 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICKdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjYwODMwMTYyMzQ4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0NTkxNC1hYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn3w5txjqPQLkxtHiG9axYdSLItKA+dw79Zam611/djql53suACi/GIYywTL BhzYOAEQom0dv4tX8ti7Dp/A3gNHedcqoQV7xAwkbn7DrhZibuPsjvQQcSRHlE9g AUZV+kpvVG6AEg7R/eTM/1NJp4Bytg3Q4VgI7hljxLJrF81NsV1UzwBdmK0VnW6a jvepVruzWLuoaG+9qa3rGohFMLfnhOQSr4dOv9m6IUSA/3GdRF1iKE+5slVZ///x g1bkvi3Fqo6IWNvm8JQzxhpSCUcW0ffKE3j4YGTvJfigB28vQInEkgTwKCWMVl4K ai1yUPA3bmmR8wOSBwFxQ1sfPQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNg+FTvh 1dIc6RWKF0B9lOz8asSeMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvREQ4QUNCODA0 MUM1MTFFOEJFQzA2RDM2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAKegAAYMA0GCSqGSIb3DQEBCwUAA4IBAQCEY/G0b0u5QuFYEYlL pD5i5sn8MBeZhs9CpgyZJ8RvH3p+cUH8OoVXpw1kYL9bqXCtU7bgGSsiA72dxCUl IRD08672AUxjXnmxXAfc+ruyJGREnWYIC+Ml4eWgPfSoRG1s3uA/R/7vVswWnwhV ZNnambSTonoOhit26dmyuO2Lzu7pY3/LZ5J+ogQBW2rQAqxsv/XJPJZcuGP/5YQs gH7Z8LLbtWUzJVhWG9ZaOa/+UvxR3VCcvGplCaTJIsqyUP/Y5PyR2lWJGg8YhIwu 4KYDd3feCJ01NytjgwouLJr1cbtQMiQV70i5ShdR8Jdr8qxNumD+FqWG5gJYOJ+x 5sYI -----END CERTIFICATE-----Generated at Fri Sep 4 23:44:24 2026 by rpki-client