$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/B08421401D2C11F1AC765BFB153D8C67.roa File: B08421401D2C11F1AC765BFB153D8C67.roa (raw, json) Hash identifier: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU= Subject key identifier: 39:D0:51:04:60:72:EE:92:A5:89:5E:29:9A:D9:77:22:7C:2F:77:75 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 085F Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/B08421401D2C11F1AC765BFB153D8C67.roa Signing time: Wed 11 Mar 2026 09:28:40 +0000 ROA not before: Wed 11 Mar 2026 09:28:40 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 40178 IP address blocks: 2001:df7:3703::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 20:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Mar 11 09:28:40 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69b135c8-638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:98:83:a2:77:f1:8d:3b:b7:df:cb:41:a8: 52:02:34:27:a5:3a:bc:f7:ec:25:f3:9c:81:2e:1a: 91:40:63:7b:4e:23:d2:42:b2:c0:0d:50:a6:08:8a: ea:bb:99:44:49:d4:62:37:83:88:cc:a6:62:2d:63: cf:7e:a9:4c:6b:99:6d:b8:b4:87:6d:58:fa:58:91: aa:d9:52:ad:43:4f:e3:e5:d2:be:52:2e:e6:49:37: c5:e0:63:a9:0d:e8:dc:b7:33:08:c7:18:20:cb:9b: af:24:0e:28:4f:b9:92:8b:11:18:0c:8d:51:ac:7a: 04:aa:63:ae:21:ba:6d:b1:e8:21:ae:a5:2e:c2:2d: 62:49:a6:c4:07:9d:21:8e:ad:09:50:7d:38:5c:7c: 1e:9e:34:18:97:5b:80:b3:32:dc:e0:06:3a:69:ad: 9e:35:11:b4:a2:cc:40:c7:62:66:92:79:2a:15:43: bc:0c:2d:c8:b0:9a:87:f8:15:91:d5:35:2c:d7:06: 59:6a:94:16:93:5f:02:3d:02:16:50:3c:be:03:df: 99:3f:59:8a:50:16:d7:ae:c2:0b:4e:2b:2a:1c:c8: 83:f6:1d:79:81:3e:de:19:06:d8:96:a0:48:35:9a: d9:f1:d1:92:84:2d:36:70:cc:46:50:05:d8:4c:41: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D0:51:04:60:72:EE:92:A5:89:5E:29:9A:D9:77:22:7C:2F:77:75 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/B08421401D2C11F1AC765BFB153D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df7:3703::/48 Signature Algorithm: sha256WithRSAEncryption 48:2b:89:73:9c:cd:0b:a5:fb:66:7b:d5:33:00:84:3d:de:15: 79:e9:a3:5d:f3:ad:f2:7c:3c:19:5f:04:af:e2:1d:f3:a5:dc: 19:5b:a6:fc:c0:56:ef:da:71:36:c0:bc:9b:79:76:8a:7b:7e: 3c:4b:62:19:49:cc:65:9f:05:27:30:15:10:34:fe:2e:6a:c8: ee:69:3a:5a:be:e3:ee:40:e9:df:0e:e7:b7:9b:4b:0b:d1:cd: 26:81:3f:3b:7a:a6:76:6a:1c:01:b1:a1:d5:0f:1e:84:d2:bf: aa:6a:fd:1b:60:5d:95:09:82:96:5b:73:b8:f4:63:5e:aa:f2: 0e:c5:7c:e0:6b:2d:09:22:fe:6d:5f:1e:d4:55:44:d2:cf:30: 02:40:13:2d:34:97:da:21:d9:a5:33:00:3b:dc:9f:aa:4e:93: ac:91:03:b3:ad:d1:49:9c:ce:70:58:4f:34:c4:54:dd:bb:5f: e5:62:78:73:ce:ac:4d:76:74:25:b9:79:1e:90:bf:2f:40:dc: e7:b6:c0:ae:b8:02:57:56:60:93:08:4f:20:33:ab:db:69:78: b8:27:c0:d5:d5:a6:40:fb:26:13:5d:5d:63:96:79:36:a6:20: 05:f8:58:58:af:0d:e8:9e:7a:50:a7:bf:91:c9:b1:4d:e1:60: aa:ef:99:04 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjYwMzExMDkyODQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIxMzVjOC02MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw+Yg6J38Y07t9/LQahSAjQnpTq89+wl85yBLhqRQGN7TiPSQrLADVCmCIrq u5lESdRiN4OIzKZiLWPPfqlMa5ltuLSHbVj6WJGq2VKtQ0/j5dK+Ui7mSTfF4GOp DejctzMIxxggy5uvJA4oT7mSixEYDI1RrHoEqmOuIbptseghrqUuwi1iSabEB50h jq0JUH04XHwenjQYl1uAszLc4AY6aa2eNRG0osxAx2JmknkqFUO8DC3IsJqH+BWR 1TUs1wZZapQWk18CPQIWUDy+A9+ZP1mKUBbXrsILTisqHMiD9h15gT7eGQbYlqBI NZrZ8dGShC02cMxGUAXYTEFWYQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDnQUQRg cu6SpYleKZrZdyJ8L3d1MB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlBMEQvMEZCNzkxNjRGQjE1MTFFQUIwMTFFQzZFQzRGOUFFMDIvQjA4NDIxNDAx RDJDMTFGMUFDNzY1QkZCMTUzRDhDNjcucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9zcDMA0GCSqGSIb3DQEBCwUAA4IBAQBIK4lznM0Lpftme9Uz AIQ93hV56aNd863yfDwZXwSv4h3zpdwZW6b8wFbv2nE2wLybeXaKe348S2IZScxl nwUnMBUQNP4uasjuaTpavuPuQOnfDue3m0sL0c0mgT87eqZ2ahwBsaHVDx6E0r+q av0bYF2VCYKWW3O49GNeqvIOxXzgay0JIv5tXx7UVUTSzzACQBMtNJfaIdmlMwA7 3J+qTpOskQOzrdFJnM5wWE80xFTdu1/lYnhzzqxNdnQluXkekL8vQNzntsCuuAJX VmCTCE8gM6vbaXi4J8DV1aZA+yYTXV1jlnk2piAF+FhYrw3onnpQp7+RybFN4WCq 75kE -----END CERTIFICATE-----Generated at Fri Mar 13 10:13:20 2026 by rpki-client