$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/81EB1850CC1F11F1838D8EC4F965CEF9.roa File: 81EB1850CC1F11F1838D8EC4F965CEF9.roa (raw, json) Hash identifier: L3eXRTeUj9b+BaJNKpKL5J6FfevEpL6651oRdj+KYRk= Subject key identifier: 63:28:81:CD:53:12:3E:3E:99:0F:27:1D:EF:5F:9A:B7:91:7C:D8:B3 Certificate issuer: /CN=A912D0F9/serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01 Certificate serial: 04 Authority key identifier: EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/81EB1850CC1F11F1838D8EC4F965CEF9.roa Signing time: Tue 20 Oct 2026 00:45:12 +0000 ROA not before: Tue 20 Oct 2026 00:45:12 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 55359 IP address blocks: 2402:fa00:8000::/34 maxlen: 34 2402:fa00:be00::/48 maxlen: 48 2402:fa00:beef::/48 maxlen: 48 2402:fa00:c000::/34 maxlen: 34 2402:fa00:cafe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.crl rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0F9, serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01 Validity Not Before: Oct 20 00:45:12 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ad6b998-5ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:2d:cf:ef:16:19:b9:18:f6:7d:67:b9:d0: dd:d0:13:f1:04:97:69:e1:14:09:16:05:3c:b0:53: 65:5d:62:5a:02:c4:20:cc:2f:80:d9:be:e3:36:70: 66:e5:cb:48:9a:1d:6f:1a:cd:3c:c4:57:d7:09:82: 86:1f:72:e5:da:ac:90:a7:6c:0f:57:09:5b:d7:74: 7d:54:22:69:40:ae:ce:cf:04:5e:10:a0:1a:22:88: f6:bb:34:52:f6:5c:29:83:b6:65:4f:6a:63:75:9f: fd:5b:fc:25:16:d9:02:9e:d6:2e:e3:5b:40:36:c6: 7f:0c:21:dc:e9:01:6b:2e:2f:6f:94:bf:d2:61:40: 99:2d:e5:c3:d6:e2:c6:2e:40:ce:72:d8:cd:e8:cf: 2e:4c:34:86:14:58:b4:be:ed:6c:7d:c9:2f:0f:9a: ac:de:94:59:e7:93:72:e0:8d:66:8d:dc:ac:fe:0e: 88:8e:3a:7e:39:e4:56:01:6c:01:fa:67:09:3c:c0: d0:ac:d2:00:91:3d:38:c6:75:ae:fa:43:eb:b4:9c: dc:b1:91:83:6f:1b:2f:1d:c4:9f:c7:14:e1:22:04: 6c:19:a1:7c:1e:c6:0a:29:5f:83:de:99:a2:2b:c9: 53:23:23:4c:91:9d:b6:5d:c7:f0:64:aa:cb:1e:05: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:81:CD:53:12:3E:3E:99:0F:27:1D:EF:5F:9A:B7:91:7C:D8:B3 X509v3 Authority Key Identifier: keyid:EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/81EB1850CC1F11F1838D8EC4F965CEF9.roa sbgp-ipAddrBlock: critical IPv6: 2402:fa00:8000::/33 Signature Algorithm: sha256WithRSAEncryption 41:24:24:06:ff:8f:de:17:5d:ca:0d:fa:7d:9d:ff:36:3e:7c: 5c:99:29:b4:f4:13:aa:ea:9c:be:83:ab:6d:f7:de:03:1d:c4: 20:53:7f:33:a7:38:31:db:aa:78:35:db:a3:89:f7:1c:e8:07: 71:e8:0f:dc:93:90:9c:22:9b:82:ba:19:1e:bd:9b:56:20:a4: d7:27:ef:ae:d6:95:b0:e6:3b:51:55:c0:0a:1c:55:b2:ec:52: d1:0f:13:e0:49:6d:a9:26:c6:df:72:28:50:a5:0d:1f:e8:2d: 38:98:cf:3e:03:17:5b:a3:80:b5:77:38:1c:00:2e:85:41:16: 16:78:d4:3d:d5:a4:b0:e5:3c:10:96:b9:9b:e8:3e:4c:f8:fb: be:8f:06:c2:04:a3:05:29:52:8e:d2:5d:64:f7:bc:c3:17:0a: a5:5b:3e:fa:a2:8e:fa:62:19:08:3d:c0:3c:54:09:74:be:c2: a5:30:36:22:c9:16:d9:29:d9:02:80:68:35:0d:f9:dd:ce:a6: 6d:65:d4:f5:42:16:d4:27:86:2b:47:14:d3:3e:0d:a6:27:11: 13:4a:65:7c:08:67:2c:d9:60:80:b8:99:bb:98:f5:d7:c0:22: 9c:1d:60:e3:9e:b6:34:f0:5c:76:71:f9:e0:71:e9:ec:c8:ad: 3b:4f:68:b3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RDBGOTExMC8GA1UEBRMoRUI3MTUwQTRDRTkyMkZBQzI5QjMyOEVFOTBDQzNDMzA2 NjVEMUMwMTAeFw0yNjEwMjAwMDQ1MTJaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZDZiOTk4LTVhZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvCS3P7xYZuRj2fWe50N3QE/EEl2nhFAkWBTywU2VdYloCxCDML4DZvuM2cGbl y0iaHW8azTzEV9cJgoYfcuXarJCnbA9XCVvXdH1UImlArs7PBF4QoBoiiPa7NFL2 XCmDtmVPamN1n/1b/CUW2QKe1i7jW0A2xn8MIdzpAWsuL2+Uv9JhQJkt5cPW4sYu QM5y2M3ozy5MNIYUWLS+7Wx9yS8PmqzelFnnk3LgjWaN3Kz+DoiOOn455FYBbAH6 Zwk8wNCs0gCRPTjGda76Q+u0nNyxkYNvGy8dxJ/HFOEiBGwZoXwexgopX4PemaIr yVMjI0yRnbZdx/BkqsseBbIlAgMBAAGjggJiMIICXjAdBgNVHQ4EFgQUYyiBzVMS Pj6ZDycd71+at5F82LMwHwYDVR0jBBgwFoAU63FQpM6SL6wpsyjukMw8MGZdHAEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEMEY5LzYyRDU5NDUwQ0Mw RjExRjFBNjNDRUIwRkY1NjVDRUY5LzYzRlFwTTZTTDZ3cHN5anVrTXc4TUdaZEhB RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjNGUXBNNlNMNndwc3lqdWtNdzhNR1pkSEFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBGOS82MkQ1OTQ1MENDMEYxMUYxQTYzQ0VCMEZGNTY1Q0VGOS84MUVCMTg1MEND MUYxMUYxODM4RDhFQzRGOTY1Q0VGOS5yb2EwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgckAvoAgDANBgkqhkiG9w0BAQsFAAOCAQEAQSQkBv+P3hddyg36fZ3/ Nj58XJkptPQTquqcvoOrbffeAx3EIFN/M6c4MduqeDXbo4n3HOgHcegP3JOQnCKb groZHr2bViCk1yfvrtaVsOY7UVXAChxVsuxS0Q8T4EltqSbG33IoUKUNH+gtOJjP PgMXW6OAtXc4HAAuhUEWFnjUPdWksOU8EJa5m+g+TPj7vo8GwgSjBSlSjtJdZPe8 wxcKpVs++qKO+mIZCD3APFQJdL7CpTA2IskW2SnZAoBoNQ353c6mbWXU9UIW1CeG K0cU0z4NpicRE0plfAhnLNlggLiZu5j118AinB1g4562NPBcdnH54HHp7MitO09o sw== -----END CERTIFICATE-----Generated at Tue Oct 27 15:11:47 2026 by rpki-client