$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/AFAFE894CB5F11F1940FE587B1EE528E.roa File: AFAFE894CB5F11F1940FE587B1EE528E.roa (raw, json) Hash identifier: EM/G8AEYuDl5LXh1xsLLFGRnw0tyXOADGXJlQ5vcbq0= Subject key identifier: A5:36:74:91:33:DD:6B:1C:DE:4E:13:20:F6:54:DB:29:24:19:17:5B Certificate issuer: /CN=A913B4BE/serialNumber=5BFA5F78A0F7F1EA7EDC9DF28B13BE27323703D7 Certificate serial: 02 Authority key identifier: 5B:FA:5F:78:A0:F7:F1:EA:7E:DC:9D:F2:8B:13:BE:27:32:37:03:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_pfeKD38ep-3J3yixO-JzI3A9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/AFAFE894CB5F11F1940FE587B1EE528E.roa Signing time: Mon 19 Oct 2026 01:52:06 +0000 ROA not before: Mon 19 Oct 2026 01:52:06 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 152482 IP address blocks: 2001:df3:7940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/W_pfeKD38ep-3J3yixO-JzI3A9c.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/W_pfeKD38ep-3J3yixO-JzI3A9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_pfeKD38ep-3J3yixO-JzI3A9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 05:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=5BFA5F78A0F7F1EA7EDC9DF28B13BE27323703D7 Validity Not Before: Oct 19 01:52:06 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6ad577c6-1c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:20:a4:66:2e:bf:91:d9:55:a3:10:ff:a2: d4:0e:15:d1:db:94:54:ed:10:dc:fc:c5:3c:40:04: 8d:a7:fd:9d:12:6f:d6:b2:1b:93:e7:2b:b3:54:72: e5:ab:48:6a:e9:91:e4:7a:9b:c3:f5:36:c2:48:fe: a9:5c:d1:79:d8:13:8b:20:fb:de:a7:11:90:33:de: 95:f3:c9:c5:f6:d7:d0:77:42:63:93:b8:4b:6b:9a: b2:65:81:f5:19:73:32:97:12:06:e3:6a:52:56:96: 19:95:84:c1:08:85:f8:fc:67:e8:d7:4e:53:88:dc: 4b:3c:b0:56:68:cb:42:ac:0c:8c:cc:b4:a3:80:75: ce:a9:83:d6:5f:b9:f1:ee:b9:3a:a4:49:2a:28:3e: 47:b4:98:26:47:34:05:6d:1e:4c:95:e3:e7:a9:b6: 53:b6:77:b6:5c:a3:86:32:ac:6f:72:1a:74:56:24: f0:2f:c9:c2:c5:39:ed:52:11:0e:b4:5a:5b:52:d6: 89:ea:a0:16:9c:44:27:a4:1d:97:8a:e7:a0:ba:ed: 25:97:e7:41:97:32:f8:51:54:9d:45:84:80:e0:32: 3a:f6:22:09:2f:17:f1:5e:fa:93:be:dc:2c:16:bb: 85:b4:16:4b:b9:40:73:f4:be:5f:7b:98:31:da:31: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:36:74:91:33:DD:6B:1C:DE:4E:13:20:F6:54:DB:29:24:19:17:5B X509v3 Authority Key Identifier: keyid:5B:FA:5F:78:A0:F7:F1:EA:7E:DC:9D:F2:8B:13:BE:27:32:37:03:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/W_pfeKD38ep-3J3yixO-JzI3A9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_pfeKD38ep-3J3yixO-JzI3A9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/AFAFE894CB5F11F1940FE587B1EE528E.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:7940::/48 Signature Algorithm: sha256WithRSAEncryption 36:1f:e9:5c:05:51:ec:03:85:b1:cd:88:de:b6:18:98:3f:c6: aa:0b:93:4b:d6:fe:79:3d:7e:c6:a3:aa:95:4a:b8:de:21:8f: b1:46:2e:2f:c8:5c:cb:e0:12:cb:dd:35:fd:b7:62:f3:21:bd: 8a:e7:32:fd:a4:c9:7a:07:ee:ee:dc:94:90:9b:39:9e:44:9e: bc:3f:bb:5d:15:4c:c1:ed:96:eb:49:b3:2d:d3:12:85:28:44: e9:66:7b:37:9b:1d:25:36:73:53:92:d9:b5:a4:cf:d3:dc:17: 68:11:0e:23:5d:41:ff:37:9c:94:e9:19:37:a4:7a:64:e5:af: 90:33:81:e2:30:b7:c0:11:96:77:ae:f1:4e:5b:55:39:3c:3d: 13:42:57:26:c6:bc:83:2d:2a:dc:3c:65:92:11:85:96:c9:db: 33:ca:a8:bf:52:6b:b5:28:eb:4a:85:57:e2:c1:28:ca:2c:c6: 8b:f9:5b:aa:55:68:6f:57:60:a9:11:5f:78:7f:26:1e:66:52: 1c:73:58:4b:89:f5:49:be:22:81:8e:0a:f3:86:75:6f:e8:5b: 60:12:4f:1a:32:f7:59:cd:8b:14:fc:b6:6e:e8:56:e9:da:25: 85:bd:c2:74:8a:d9:7e:55:a5:2b:a2:54:04:7e:d2:84:2f:9a: 83:d0:79:d3 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjRCRTExMC8GA1UEBRMoNUJGQTVGNzhBMEY3RjFFQTdFREM5REYyOEIxM0JFMjcz MjM3MDNENzAeFw0yNjEwMTkwMTUyMDZaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZDU3N2M2LTFjNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5pyCkZi6/kdlVoxD/otQOFdHblFTtENz8xTxABI2n/Z0Sb9ayG5PnK7NUcuWr SGrpkeR6m8P1NsJI/qlc0XnYE4sg+96nEZAz3pXzycX219B3QmOTuEtrmrJlgfUZ czKXEgbjalJWlhmVhMEIhfj8Z+jXTlOI3Es8sFZoy0KsDIzMtKOAdc6pg9ZfufHu uTqkSSooPke0mCZHNAVtHkyV4+eptlO2d7Zco4YyrG9yGnRWJPAvycLFOe1SEQ60 WltS1onqoBacRCekHZeK56C67SWX50GXMvhRVJ1FhIDgMjr2IgkvF/Fe+pO+3CwW u4W0Fku5QHP0vl97mDHaMdvhAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUpTZ0kTPd axzeThMg9lTbKSQZF1swHwYDVR0jBBgwFoAUW/pfeKD38ep+3J3yixO+JzI3A9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNEJFLzc4QkQzMjI0Q0NG NzExRUU5RTg5RDY3QUM0RjlBRTAyL1dfcGZlS0QzOGVwLTNKM3lpeE8tSnpJM0E5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV19wZmVLRDM4ZXAtM0ozeWl4Ty1KekkzQTljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9BRkFGRTg5NENC NUYxMUYxOTQwRkU1ODdCMUVFNTI4RS5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ3zeUAwDQYJKoZIhvcNAQELBQADggEBADYf6VwFUewDhbHNiN62 GJg/xqoLk0vW/nk9fsajqpVKuN4hj7FGLi/IXMvgEsvdNf23YvMhvYrnMv2kyXoH 7u7clJCbOZ5Enrw/u10VTMHtlutJsy3TEoUoROlmezebHSU2c1OS2bWkz9PcF2gR DiNdQf83nJTpGTekemTlr5AzgeIwt8ARlneu8U5bVTk8PRNCVybGvIMtKtw8ZZIR hZbJ2zPKqL9Sa7Uo60qFV+LBKMosxov5W6pVaG9XYKkRX3h/Jh5mUhxzWEuJ9Um+ IoGOCvOGdW/oW2ASTxoy91nNixT8tm7oVunaJYW9wnSK2X5VpSuiVAR+0oQvmoPQ edM= -----END CERTIFICATE-----Generated at Sun Oct 25 14:20:12 2026 by rpki-client