$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa File: 4A63A29461AF11EAB55FB65CC4F9AE02.roa (raw, json) Hash identifier: Prw+F9uXfv0ah9WCO1BM/eDDRsdaUp4SyxyDLyWmDwI= Subject key identifier: F0:68:9D:18:E4:D3:A9:14:38:97:CA:43:E7:46:4E:2A:DC:35:9C:78 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3C7E Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa Signing time: Fri 09 Oct 2026 07:30:13 +0000 ROA not before: Fri 09 Oct 2026 07:30:13 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 36040 IP address blocks: 2001:fb0:109f:12::/64 maxlen: 64 2001:fb0:109f:14::/64 maxlen: 64 2001:fb0:109f:18::/64 maxlen: 64 2001:fb0:109f:19::/64 maxlen: 64 2001:fb0:109f:1c::/64 maxlen: 64 2001:fb0:109f:8007::/64 maxlen: 64 2001:fb0:109f:8009::/64 maxlen: 64 2001:fb0:109f:8010::/64 maxlen: 64 2001:fb0:109f:8013::/64 maxlen: 64 2001:fb0:109f:8014::/64 maxlen: 64 2001:fb0:109f:8018::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 14:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15486 (0x3c7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Oct 9 07:30:13 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6ac89805-14b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:97:b8:ca:02:ba:2b:8f:89:64:8a:0b:9a: 48:e5:ef:fa:cd:56:12:5c:d7:35:82:a1:e9:3a:1a: da:be:60:49:6f:f2:bf:62:0c:90:c3:73:39:83:e1: ea:7d:b6:34:3f:dc:96:71:38:ca:c5:ff:60:3f:7c: 5f:70:24:93:0b:f9:14:4e:e3:c5:a1:fa:8d:71:d9: f2:7d:ec:2a:a5:62:1d:02:8a:8a:65:d6:50:91:8f: 20:9a:18:1b:ee:64:89:2b:0f:3c:4e:ab:2a:ab:77: f1:44:1f:92:12:71:17:9c:de:0c:1d:78:ac:fe:07: 0d:43:b2:01:bb:cb:3b:b6:5d:14:1b:0d:32:2f:55: a9:c0:89:9c:15:4c:e5:4f:80:8a:62:d6:5c:bd:b8: 94:42:99:85:4d:a0:b0:ce:48:33:ec:68:e0:81:dc: 62:35:c4:e1:4f:87:b2:e7:10:30:2e:4a:06:ad:40: 57:fe:8b:7e:e1:c3:a3:42:13:45:ae:90:bb:1e:5b: c9:c0:21:bb:78:ab:b8:14:e9:73:7d:5f:88:bd:0c: 39:7d:b5:d7:d5:d7:24:30:12:e5:07:ab:95:a2:11: e1:2c:60:0e:8d:4e:29:24:17:83:b2:10:8a:3b:a3: 55:c3:eb:db:b4:f3:92:6c:e5:a1:a9:5d:fe:c5:76: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:68:9D:18:E4:D3:A9:14:38:97:CA:43:E7:46:4E:2A:DC:35:9C:78 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:fb0:109f:12::/64 2001:fb0:109f:14::/64 2001:fb0:109f:18::/63 2001:fb0:109f:1c::/64 2001:fb0:109f:8007::/64 2001:fb0:109f:8009::/64 2001:fb0:109f:8010::/64 2001:fb0:109f:8013::-2001:fb0:109f:8014:ffff:ffff:ffff:ffff 2001:fb0:109f:8018::/64 Signature Algorithm: sha256WithRSAEncryption 74:37:f2:a2:0a:f9:1b:9a:d6:ed:f4:1c:af:9a:0c:f9:50:70: 3f:d9:11:f7:09:f4:df:2a:c4:2b:e5:da:6a:20:4c:74:c3:41: 45:ca:d0:fc:2e:a0:c9:22:87:55:f8:bb:9c:7e:ac:ae:28:6e: 5a:83:7b:f7:a6:72:a3:bc:56:22:ca:54:c1:58:75:22:b1:9e: 2d:09:44:e9:c9:24:7c:f5:18:bb:0d:1b:f0:b0:96:58:be:5c: 73:e3:54:e7:a3:c1:d9:88:57:5c:94:ff:e9:55:2f:db:5f:a0: 3d:1b:92:c6:99:a1:a0:43:c6:c5:ac:aa:81:15:04:32:29:8d: aa:e5:aa:31:1f:af:3d:84:4d:b2:29:68:73:74:95:11:b7:5d: f7:9e:77:42:86:dc:ec:6e:88:cb:f6:a1:c4:9e:80:7c:d9:34: 90:af:6a:95:65:60:86:7c:c0:ae:00:14:7f:fc:a9:93:74:02: 6d:bd:91:f0:b3:56:a7:9b:ef:8e:bb:b7:27:bd:a2:b6:b7:bf: 35:51:30:fb:f1:ec:59:d8:f5:ac:3b:36:58:53:c6:ec:de:d4: c8:49:6d:5f:fc:f2:4c:25:46:48:89:06:70:8d:e4:b1:01:66: eb:7a:ec:28:0d:65:73:a5:ea:52:81:ef:0d:d1:c9:1c:4f:37: 9b:2d:d2:19 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICPH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYxMDA5MDczMDEzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM4OTgwNS0xNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9jCXuMoCuiuPiWSKC5pI5e/6zVYSXNc1gqHpOhravmBJb/K/YgyQw3M5g+Hq fbY0P9yWcTjKxf9gP3xfcCSTC/kUTuPFofqNcdnyfewqpWIdAoqKZdZQkY8gmhgb 7mSJKw88Tqsqq3fxRB+SEnEXnN4MHXis/gcNQ7IBu8s7tl0UGw0yL1WpwImcFUzl T4CKYtZcvbiUQpmFTaCwzkgz7GjggdxiNcThT4ey5xAwLkoGrUBX/ot+4cOjQhNF rpC7HlvJwCG7eKu4FOlzfV+IvQw5fbXX1dckMBLlB6uVohHhLGAOjU4pJBeDshCK O6NVw+vbtPOSbOWhqV3+xXaNDwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFPBonRjk 06kUOJfKQ+dGTircNZx4MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEE2M0EyOTQ2 MUFGMTFFQUI1NUZCNjVDQzRGOUFFMDIucm9hMIGJBggrBgEFBQcBBwEB/wR6MHgw dgQCAAIwcAMJACABD7AQnwASAwkAIAEPsBCfABQDCQEgAQ+wEJ8AGAMJACABD7AQ nwAcAwkAIAEPsBCfgAcDCQAgAQ+wEJ+ACQMJACABD7AQn4AQMBYDCQAgAQ+wEJ+A EwMJACABD7AQn4AUAwkAIAEPsBCfgBgwDQYJKoZIhvcNAQELBQADggEBAHQ38qIK +Rua1u30HK+aDPlQcD/ZEfcJ9N8qxCvl2mogTHTDQUXK0PwuoMkih1X4u5x+rK4o blqDe/emcqO8ViLKVMFYdSKxni0JROnJJHz1GLsNG/Cwlli+XHPjVOejwdmIV1yU /+lVL9tfoD0bksaZoaBDxsWsqoEVBDIpjarlqjEfrz2ETbIpaHN0lRG3Xfeed0KG 3OxuiMv2ocSegHzZNJCvapVlYIZ8wK4AFH/8qZN0Am29kfCzVqeb7467tye9ora3 vzVRMPvx7FnY9aw7NlhTxuze1MhJbV/88kwlRkiJBnCN5LEBZut67CgNZXOl6lKB 7w3RyRxPN5st0hk= -----END CERTIFICATE-----Generated at Wed Oct 21 10:21:18 2026 by rpki-client