$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/8FB8171E1D2C11F18BD061F8153D8C67.roa File: 8FB8171E1D2C11F18BD061F8153D8C67.roa (raw, json) Hash identifier: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo= Subject key identifier: C1:0A:20:C1:FC:04:3C:50:88:FB:40:BF:2C:42:58:48:FE:4B:DA:C2 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 085D Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/8FB8171E1D2C11F18BD061F8153D8C67.roa Signing time: Wed 11 Mar 2026 09:27:45 +0000 ROA not before: Wed 11 Mar 2026 09:27:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 151970 IP address blocks: 2001:df7:3702::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 09:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Mar 11 09:27:45 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69b13591-9d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:87:6f:8c:2e:f4:a6:2f:88:68:50:6c:dd: e4:0d:f6:83:09:e8:e3:4f:f4:07:10:60:19:f6:e9: af:a9:2c:2e:7c:a2:35:51:48:42:c2:2c:92:2c:21: 4c:77:60:6b:87:ae:72:99:17:a9:a9:54:c5:b2:78: e7:92:20:f6:5c:16:83:0c:bc:71:15:66:64:fa:4b: 97:5c:1c:30:43:91:8e:e5:f6:17:58:b5:7f:a4:9d: 24:b6:6e:9f:8d:1e:c2:6b:b7:98:78:c2:2c:c9:df: 92:ed:f5:70:85:cd:e8:57:df:99:52:06:aa:15:56: 66:03:c5:7d:84:64:3f:30:c5:49:40:e6:b2:04:ce: 05:a3:35:a7:c6:cb:a6:aa:89:be:6d:81:52:db:15: 88:a0:20:0e:be:70:06:a2:d3:58:b3:10:4e:8e:12: 68:b5:01:60:9e:64:4a:e9:b4:34:12:f8:a0:96:f9: f9:90:e6:d2:c0:a4:e6:3c:64:ea:98:f6:1b:04:34: 97:26:12:9c:d6:f8:09:14:bb:ab:77:c1:7d:ad:6c: 24:e6:30:2a:7f:34:f9:70:19:8e:34:a2:31:16:77: d2:6a:b8:b0:72:8f:6a:96:08:3e:07:a5:ef:ca:e0: 17:f2:8a:77:a5:bf:11:11:cc:98:4d:89:b0:cf:f1: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0A:20:C1:FC:04:3C:50:88:FB:40:BF:2C:42:58:48:FE:4B:DA:C2 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/8FB8171E1D2C11F18BD061F8153D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df7:3702::/48 Signature Algorithm: sha256WithRSAEncryption 5a:51:8d:33:26:9d:46:8f:1c:b8:0c:06:95:3b:b7:dd:67:32: b5:19:90:f5:f2:0d:9b:7b:c7:ca:ea:39:47:9a:57:bc:b1:23: ac:dc:13:33:cc:3d:47:54:0c:50:6f:1c:42:e1:75:30:7e:25: a6:1f:bb:ea:45:8a:5f:aa:82:95:2b:9d:23:c7:a0:1b:a6:a6: da:9f:98:6c:9d:ce:5d:6a:8b:bc:15:19:c0:8c:a9:32:19:f0: 46:09:0a:5c:ce:8c:f9:5f:7a:87:95:7a:97:a3:38:c6:b8:a4: ef:1b:04:8f:25:0e:ce:93:17:e0:c1:f1:ba:0b:57:16:8a:e0: 56:78:33:5d:c8:f2:9e:3c:0f:a2:19:cb:26:a1:55:c1:5f:08: 2e:d6:ce:eb:bb:71:89:b3:92:cc:3e:a6:56:33:2c:f4:ff:42: 97:66:9d:f1:c6:9e:e6:63:27:d2:fa:16:3a:bd:e5:f3:d5:2e: 81:46:ba:cd:8c:46:22:e9:95:cb:cd:90:9d:c2:37:63:3f:9b: 7b:22:69:34:55:1e:bb:aa:dc:09:7d:33:07:fd:c4:23:66:75: c1:59:c9:02:a7:64:3e:39:47:5d:01:4b:6d:7c:b7:b1:69:e5: 3c:79:f6:e2:9e:3e:ef:a3:65:16:e2:d4:d7:11:d5:24:d6:bc: 6e:9b:5a:e0 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjYwMzExMDkyNzQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIxMzU5MS05ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlSHb4wu9KYviGhQbN3kDfaDCejjT/QHEGAZ9umvqSwufKI1UUhCwiySLCFM d2Brh65ymRepqVTFsnjnkiD2XBaDDLxxFWZk+kuXXBwwQ5GO5fYXWLV/pJ0ktm6f jR7Ca7eYeMIsyd+S7fVwhc3oV9+ZUgaqFVZmA8V9hGQ/MMVJQOayBM4FozWnxsum qom+bYFS2xWIoCAOvnAGotNYsxBOjhJotQFgnmRK6bQ0Eviglvn5kObSwKTmPGTq mPYbBDSXJhKc1vgJFLurd8F9rWwk5jAqfzT5cBmONKIxFnfSariwco9qlgg+B6Xv yuAX8op3pb8REcyYTYmwz/FIzQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFMEKIMH8 BDxQiPtAvyxCWEj+S9rCMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlBMEQvMEZCNzkxNjRGQjE1MTFFQUIwMTFFQzZFQzRGOUFFMDIvOEZCODE3MUUx RDJDMTFGMThCRDA2MUY4MTUzRDhDNjcucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9zcCMA0GCSqGSIb3DQEBCwUAA4IBAQBaUY0zJp1Gjxy4DAaV O7fdZzK1GZD18g2be8fK6jlHmle8sSOs3BMzzD1HVAxQbxxC4XUwfiWmH7vqRYpf qoKVK50jx6Abpqban5hsnc5daou8FRnAjKkyGfBGCQpczoz5X3qHlXqXozjGuKTv GwSPJQ7OkxfgwfG6C1cWiuBWeDNdyPKePA+iGcsmoVXBXwgu1s7ru3GJs5LMPqZW Myz0/0KXZp3xxp7mYyfS+hY6veXz1S6BRrrNjEYi6ZXLzZCdwjdjP5t7Imk0VR67 qtwJfTMH/cQjZnXBWckCp2Q+OUddAUttfLexaeU8efbinj7vo2UW4tTXEdUk1rxu m1rg -----END CERTIFICATE-----Generated at Thu Mar 12 08:03:44 2026 by rpki-client