$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa File: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (raw, json) Hash identifier: TMi3DEi4p94q9eD5rNrE3oVO21rOBf7EJWgmQPqDZ/Y= Subject key identifier: B8:33:E3:82:71:68:4F:2F:8F:DE:D2:98:6B:4A:EF:C2:AE:57:C4:B8 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0867 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa Signing time: Thu 24 Sep 2026 22:44:41 +0000 ROA not before: Thu 24 Sep 2026 22:44:41 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 8796 IP address blocks: 2401:2660:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 22:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 24 22:44:41 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab5a7d8-56a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:72:3a:fb:a7:5f:e4:ef:56:da:10:f3:66: 26:99:81:e2:a8:8b:21:bc:5d:0d:5f:42:55:9d:3e: 96:b5:b5:3a:86:f5:5d:f1:34:88:1a:dd:61:f8:e1: ac:df:11:e5:d2:5d:4a:cb:98:e2:e6:c3:0d:ae:c3: ba:66:43:de:95:9f:16:c1:1c:25:16:d6:b2:65:66: e4:02:50:e8:6e:ae:e9:fc:ea:00:ad:45:68:56:ef: 3b:cf:cf:e1:fc:c3:73:d3:c2:61:19:55:d3:ea:80: 5f:c0:40:f2:ef:a0:6a:2c:70:52:c8:6a:a4:8a:03: b3:4a:ec:9d:f2:e5:05:2f:22:f7:9b:77:46:9b:bb: 0b:c4:88:ce:83:94:b2:ed:ee:db:8b:33:76:68:bd: ef:9f:1c:94:01:28:aa:47:dd:90:25:cb:96:fc:71: f6:41:93:53:fb:ea:5d:57:61:ed:cc:8c:3a:cc:3a: 00:3a:8a:fa:3f:a0:da:12:64:31:6b:5f:6b:9a:c8: 68:72:f8:22:7f:a7:de:88:30:d5:a7:49:44:4e:fc: e8:1f:a6:c3:88:b0:9d:fa:54:b9:a2:a2:fa:d6:08: a1:41:b0:66:53:4a:64:59:f7:f9:7f:b5:41:39:05: f7:f0:62:c3:7d:e0:a0:09:65:f3:a7:38:ae:0e:85: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:33:E3:82:71:68:4F:2F:8F:DE:D2:98:6B:4A:EF:C2:AE:57:C4:B8 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EB3FE5C924F11EFB20C515DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:2660:2000::/36 Signature Algorithm: sha256WithRSAEncryption 7e:cf:5c:a7:e1:f5:62:0e:d9:a3:a9:10:e5:18:92:5b:f9:7d: 0a:cd:71:69:e6:04:9d:b6:99:b4:4f:e5:3d:1f:ff:fd:0f:ca: 1b:a8:88:89:08:da:be:79:03:cf:f7:b1:ab:df:dd:1f:97:f6: 28:75:6a:46:2e:43:71:b5:24:cf:40:0f:f7:8d:fc:c7:19:dd: 95:73:21:09:b8:51:69:ad:2e:f6:6a:33:74:9a:8c:ff:9e:8a: b6:cc:92:0e:fc:70:7a:cd:36:59:4b:95:ff:10:ca:c6:8b:ca: c1:bc:e8:a3:34:25:d1:b3:37:08:fb:a2:cb:15:a6:df:ed:e1: 31:e4:c8:06:c7:5c:16:e4:4a:71:13:74:e3:3a:19:b7:02:c3: ef:a6:9c:4d:0f:09:65:e6:7e:9a:3a:39:ea:ba:90:35:91:50: 8d:31:df:6a:70:87:13:a2:91:b5:30:82:02:e2:33:b4:33:e4: c3:0d:cd:6f:02:bb:b9:17:9a:31:1b:4e:6a:05:4c:94:43:bd: 9b:33:ca:e3:64:6e:7a:23:05:7f:4a:4c:f2:0a:41:97:68:66: 96:0b:75:b1:73:6e:2e:84:13:b4:bb:d3:07:a7:16:02:de:be: b8:98:99:ac:93:58:c1:b1:cf:f0:fa:7c:77:91:05:3a:05:42: 54:84:e2:51 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwOTI0MjI0NDQxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1YTdkOC01NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZJyOvunX+TvVtoQ82YmmYHiqIshvF0NX0JVnT6WtbU6hvVd8TSIGt1h+OGs 3xHl0l1Ky5ji5sMNrsO6ZkPelZ8WwRwlFtayZWbkAlDobq7p/OoArUVoVu87z8/h /MNz08JhGVXT6oBfwEDy76BqLHBSyGqkigOzSuyd8uUFLyL3m3dGm7sLxIjOg5Sy 7e7bizN2aL3vnxyUASiqR92QJcuW/HH2QZNT++pdV2HtzIw6zDoAOor6P6DaEmQx a19rmshocvgif6feiDDVp0lETvzoH6bDiLCd+lS5oqL61gihQbBmU0pkWff5f7VB OQX38GLDfeCgCWXzpziuDoXHqQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFLgz44Jx aE8vj97SmGtK78KuV8S4MB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvMUVCM0ZFNUM5 MjRGMTFFRkIyMEM1MTVEQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAEmYCAwDQYJKoZIhvcNAQELBQADggEBAH7PXKfh9WIO2aOpEOUY klv5fQrNcWnmBJ22mbRP5T0f//0PyhuoiIkI2r55A8/3savf3R+X9ih1akYuQ3G1 JM9AD/eN/McZ3ZVzIQm4UWmtLvZqM3SajP+eirbMkg78cHrNNllLlf8QysaLysG8 6KM0JdGzNwj7ossVpt/t4THkyAbHXBbkSnETdOM6GbcCw++mnE0PCWXmfpo6Oeq6 kDWRUI0x32pwhxOikbUwggLiM7Qz5MMNzW8Cu7kXmjEbTmoFTJRDvZszyuNkbnoj BX9KTPIKQZdoZpYLdbFzbi6EE7S70wenFgLevriYmayTWMGxz/D6fHeRBToFQlSE 4lE= -----END CERTIFICATE-----Generated at Wed Oct 21 21:13:47 2026 by rpki-client