$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/FCC76842A3FE11F1AD0732AA6311F970.roa File: FCC76842A3FE11F1AD0732AA6311F970.roa (raw, json) Hash identifier: Dbd87sYM2xjyTjqX3ZIXD0xaqX4gJqpBMsR2NeyvrX0= Subject key identifier: 3B:39:77:80:D9:0B:D1:BF:D1:8D:D8:70:CB:07:AC:1D:1C:4A:A9:58 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 060C Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/FCC76842A3FE11F1AD0732AA6311F970.roa Signing time: Tue 03 Nov 2026 00:47:22 +0000 ROA not before: Tue 03 Nov 2026 00:47:22 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 1239 IP address blocks: 223.29.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 3 00:47:22 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae92f1a-04e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:a9:00:81:19:82:23:c9:c5:a3:b0:42:54: 5e:df:4b:3d:4a:89:3e:45:89:08:a7:ff:5b:79:c5: 4c:ff:ca:6a:75:7d:91:c0:0a:33:1a:e4:3f:3a:ed: 20:3e:90:01:70:2a:de:1b:d7:76:9a:23:4d:22:6d: 8f:40:a1:5b:4a:e4:98:4e:45:c5:47:61:bd:b6:bc: ce:c9:2d:34:81:09:d9:0c:e3:ca:bf:5d:a1:22:2d: aa:37:09:db:c8:74:ad:22:ac:8f:9b:72:fe:c3:28: 5f:c7:91:68:cc:49:20:2a:b7:4b:5d:40:fc:7a:12: f6:6d:03:d7:95:13:c7:64:da:27:74:c9:1b:81:7a: 0e:a4:a8:28:86:bf:1e:a7:82:99:20:ce:3b:44:4d: f4:a4:50:69:f0:db:75:78:c3:26:e8:99:2c:50:73: 12:93:dd:a1:29:7b:af:ee:bc:bf:3c:7e:da:b7:a4: 43:03:10:a3:35:e2:d3:1e:d4:24:f1:4f:e2:e4:2b: f5:61:ed:f3:73:d2:a2:39:a3:d0:33:de:c6:85:33: 84:ba:a2:fc:d5:06:04:e9:4c:20:a3:ae:f6:3e:19: 52:1e:e7:43:5b:a3:fb:da:19:83:59:08:8b:08:4d: 52:68:5a:65:2a:94:fa:4b:5b:32:fc:c7:f8:c6:6a: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:39:77:80:D9:0B:D1:BF:D1:8D:D8:70:CB:07:AC:1D:1C:4A:A9:58 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/FCC76842A3FE11F1AD0732AA6311F970.roa sbgp-ipAddrBlock: critical IPv4: 223.29.128.0/19 Signature Algorithm: sha256WithRSAEncryption 32:57:af:a0:14:e3:ce:24:5c:dc:8b:3c:56:39:d8:a5:35:2e: 8f:53:5f:75:0e:c4:18:39:c6:8a:8f:fe:71:37:b3:54:ba:f0: 37:21:6f:a1:44:44:0f:47:52:53:6e:d8:ad:ab:d5:34:2f:58: 20:71:fa:3f:03:9f:fc:98:51:ff:2a:ee:27:77:ce:6e:00:e4: 95:28:af:02:cb:c8:42:05:8c:83:cc:fb:44:09:78:8a:10:d5: 63:08:d2:be:52:ce:11:5d:f7:1a:3c:57:4d:2b:f5:9c:3c:99: 83:5a:cf:bf:19:d0:5e:b2:d0:c9:07:e7:5f:ce:d0:5f:ab:f1: 27:7c:3f:a6:3b:3d:bf:46:a3:c4:11:c8:cc:87:ab:a5:8e:9f: cd:42:eb:f1:c9:65:e9:21:ab:58:97:59:41:6b:c7:62:ce:a3: 91:a4:9f:71:71:2b:02:7a:4b:85:b4:c4:ce:1e:b9:a0:77:0a: c6:10:52:35:33:ec:07:ea:f9:52:ad:80:2d:08:45:b7:62:97: a5:b4:a6:8f:e3:8d:19:09:69:ba:7e:1a:57:e3:cf:99:4b:c1: c7:11:ff:f2:15:8f:24:a7:0d:0e:11:90:e8:40:a2:1c:e5:20: ba:46:74:7c:6d:e0:76:f6:01:a3:fa:0f:7f:27:08:2f:a3:a2: 8b:73:75:4a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjYxMTAzMDA0NzIyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5MmYxYS0wNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBapAIEZgiPJxaOwQlRe30s9Sok+RYkIp/9becVM/8pqdX2RwAozGuQ/Ou0g PpABcCreG9d2miNNIm2PQKFbSuSYTkXFR2G9trzOyS00gQnZDOPKv12hIi2qNwnb yHStIqyPm3L+wyhfx5FozEkgKrdLXUD8ehL2bQPXlRPHZNondMkbgXoOpKgohr8e p4KZIM47RE30pFBp8Nt1eMMm6JksUHMSk92hKXuv7ry/PH7at6RDAxCjNeLTHtQk 8U/i5Cv1Ye3zc9KiOaPQM97GhTOEuqL81QYE6Uwgo672PhlSHudDW6P72hmDWQiL CE1SaFplKpT6S1sy/Mf4xmqdwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDs5d4DZ C9G/0Y3YcMsHrB0cSqlYMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvRkNDNzY4NDJB M0ZFMTFGMUFEMDczMkFBNjMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQF3x2AMA0GCSqGSIb3DQEBCwUAA4IBAQAyV6+gFOPOJFzcizxWOdil NS6PU191DsQYOcaKj/5xN7NUuvA3IW+hREQPR1JTbtitq9U0L1ggcfo/A5/8mFH/ Ku4nd85uAOSVKK8Cy8hCBYyDzPtECXiKENVjCNK+Us4RXfcaPFdNK/WcPJmDWs+/ GdBestDJB+dfztBfq/EnfD+mOz2/RqPEEcjMh6uljp/NQuvxyWXpIatYl1lBa8di zqORpJ9xcSsCekuFtMTOHrmgdwrGEFI1M+wH6vlSrYAtCEW3YpeltKaP440ZCWm6 fhpX48+ZS8HHEf/yFY8kpw0OEZDoQKIc5SC6RnR8beB29gGj+g9/Jwgvo6KLc3VK -----END CERTIFICATE-----Generated at Thu Nov 5 12:14:11 2026 by rpki-client