$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/8289BA82CC1F11F1838D8EC4F965CEF9.roa File: 8289BA82CC1F11F1838D8EC4F965CEF9.roa (raw, json) Hash identifier: boE2sycC2r5ODz/01BwJlA+5yIdWkBbWVObJEJ9TaCs= Subject key identifier: DE:B9:73:B6:70:FB:04:C2:36:62:E0:90:CF:B8:41:87:E3:01:9F:78 Certificate issuer: /CN=A912D0F9/serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01 Certificate serial: 05 Authority key identifier: EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/8289BA82CC1F11F1838D8EC4F965CEF9.roa Signing time: Tue 20 Oct 2026 00:45:13 +0000 ROA not before: Tue 20 Oct 2026 00:45:13 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58940 IP address blocks: 2407:500:4000::/34 maxlen: 34 2407:500:4101::/48 maxlen: 48 2407:500:4102::/48 maxlen: 48 2407:500:4103::/48 maxlen: 48 2407:500:4104::/48 maxlen: 48 2407:500:4110::/48 maxlen: 48 2407:500:4167::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.crl rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0F9, serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01 Validity Not Before: Oct 20 00:45:13 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ad6b999-1b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:ce:90:b1:52:92:e1:10:86:b0:f6:6b:23: 96:7c:a4:9b:75:d9:18:70:1c:e1:72:0c:8a:7c:8a: e2:17:58:ac:1d:92:b0:d3:a0:83:11:4e:f1:04:80: e8:c4:3f:64:c5:87:6e:a8:34:cf:b2:27:e2:af:9c: 9f:fd:ab:99:01:43:97:8e:5f:d2:94:40:42:94:fa: fa:20:55:88:db:c8:ed:43:0c:fb:49:9c:12:97:44: b9:7a:15:c3:4e:54:df:dc:1d:9f:c1:b1:da:32:fd: 2a:99:81:fa:24:98:e2:2e:41:81:63:cb:47:7b:bc: 22:80:a4:4b:ad:72:c4:8a:e9:0d:f2:f2:32:9c:47: b9:c6:d1:27:07:62:1f:87:dc:c6:07:5f:15:c1:4b: 27:35:57:b7:74:e6:36:5e:4a:e6:0e:86:3f:c5:df: 63:f8:20:16:4f:0b:f4:07:c5:e2:8e:6b:32:e2:dc: b0:7c:56:2e:c9:51:be:a1:57:8a:e4:64:7f:78:e4: c3:9c:fc:c2:0a:41:6b:95:3d:a7:c6:b9:65:49:4b: 4b:ed:ee:1b:71:d3:37:25:c4:e2:a6:81:c1:c5:e6: fa:ca:48:9e:e6:91:e2:6a:e0:87:de:52:a9:3b:a4: 14:a6:10:73:11:a7:4d:d1:cc:5c:7d:24:ab:85:1f: f1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B9:73:B6:70:FB:04:C2:36:62:E0:90:CF:B8:41:87:E3:01:9F:78 X509v3 Authority Key Identifier: keyid:EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/8289BA82CC1F11F1838D8EC4F965CEF9.roa sbgp-ipAddrBlock: critical IPv6: 2407:500:4000::/34 Signature Algorithm: sha256WithRSAEncryption 01:2d:92:01:d9:ab:5d:21:7b:f1:42:e3:6c:17:0a:e4:42:f3: 05:58:f5:c2:f0:ac:d3:63:66:7f:1a:49:df:ad:fd:10:d7:8a: bb:32:f4:c3:af:9b:fd:6f:f1:ee:00:fe:ef:7f:b6:05:23:51: 40:e3:c0:4b:98:5e:3a:59:37:2d:71:ca:f8:6d:1d:8a:a9:c4: 92:a7:1c:cd:a1:64:ca:48:79:df:80:f7:88:a3:92:36:da:83: 62:90:46:d3:fe:c9:4a:cc:06:79:25:ce:b6:26:97:cc:b5:13: 47:13:bb:04:98:04:3b:33:de:f5:50:c6:24:24:fb:2d:3a:d1: d8:7a:3e:04:1a:79:0a:d6:60:e1:82:b7:8e:58:f3:c5:60:65: 3c:1e:4f:7a:c2:e9:d3:1a:37:6d:f7:17:88:ff:6b:8d:c3:cc: 94:bc:97:38:4f:0c:28:c1:51:5d:e1:8e:66:2e:b9:a3:3c:a0: 89:c0:b1:ee:aa:28:66:23:6d:b0:e9:76:9d:c2:47:25:be:40: 2c:76:b0:bd:6b:d9:a0:8e:ea:e2:d8:0e:93:43:ee:64:1d:3e: 79:6c:cd:1a:12:2f:8d:39:e3:5a:3d:f4:ef:42:d4:5a:f9:92: a5:2c:d7:a2:d9:7c:da:70:2b:e5:6b:fb:55:49:34:2a:5e:e3: 6e:bd:c6:b1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RDBGOTExMC8GA1UEBRMoRUI3MTUwQTRDRTkyMkZBQzI5QjMyOEVFOTBDQzNDMzA2 NjVEMUMwMTAeFw0yNjEwMjAwMDQ1MTNaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZDZiOTk5LTFiOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChwc6QsVKS4RCGsPZrI5Z8pJt12RhwHOFyDIp8iuIXWKwdkrDToIMRTvEEgOjE P2TFh26oNM+yJ+KvnJ/9q5kBQ5eOX9KUQEKU+vogVYjbyO1DDPtJnBKXRLl6FcNO VN/cHZ/Bsdoy/SqZgfokmOIuQYFjy0d7vCKApEutcsSK6Q3y8jKcR7nG0ScHYh+H 3MYHXxXBSyc1V7d05jZeSuYOhj/F32P4IBZPC/QHxeKOazLi3LB8Vi7JUb6hV4rk ZH945MOc/MIKQWuVPafGuWVJS0vt7htx0zclxOKmgcHF5vrKSJ7mkeJq4IfeUqk7 pBSmEHMRp03RzFx9JKuFH/GfAgMBAAGjggJiMIICXjAdBgNVHQ4EFgQU3rlztnD7 BMI2YuCQz7hBh+MBn3gwHwYDVR0jBBgwFoAU63FQpM6SL6wpsyjukMw8MGZdHAEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEMEY5LzYyRDU5NDUwQ0Mw RjExRjFBNjNDRUIwRkY1NjVDRUY5LzYzRlFwTTZTTDZ3cHN5anVrTXc4TUdaZEhB RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjNGUXBNNlNMNndwc3lqdWtNdzhNR1pkSEFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBGOS82MkQ1OTQ1MENDMEYxMUYxQTYzQ0VCMEZGNTY1Q0VGOS84Mjg5QkE4MkND MUYxMUYxODM4RDhFQzRGOTY1Q0VGOS5yb2EwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgYkBwUAQDANBgkqhkiG9w0BAQsFAAOCAQEAAS2SAdmrXSF78ULjbBcK 5ELzBVj1wvCs02NmfxpJ3639ENeKuzL0w6+b/W/x7gD+73+2BSNRQOPAS5heOlk3 LXHK+G0diqnEkqcczaFkykh534D3iKOSNtqDYpBG0/7JSswGeSXOtiaXzLUTRxO7 BJgEOzPe9VDGJCT7LTrR2Ho+BBp5CtZg4YK3jljzxWBlPB5PesLp0xo3bfcXiP9r jcPMlLyXOE8MKMFRXeGOZi65ozygicCx7qooZiNtsOl2ncJHJb5ALHawvWvZoI7q 4tgOk0PuZB0+eWzNGhIvjTnjWj3070LUWvmSpSzXotl82nAr5Wv7VUk0Kl7jbr3G sQ== -----END CERTIFICATE-----Generated at Tue Oct 27 15:11:47 2026 by rpki-client