$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/CDCC902E170811EFB6DE866CC4F9AE02.roa File: CDCC902E170811EFB6DE866CC4F9AE02.roa (raw, json) Hash identifier: 2t/KMC/4RsSta/z5Yl6fRx0FuafkaGpkTpnw5E1hlhU= Subject key identifier: 36:D8:58:E6:70:4A:6C:5A:C5:DB:B5:D0:85:AC:79:0B:B6:4B:CB:B1 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3DBD Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/CDCC902E170811EFB6DE866CC4F9AE02.roa Signing time: Thu 06 Aug 2026 15:12:12 +0000 ROA not before: Thu 06 Aug 2026 15:12:12 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 2914 IP address blocks: 2001:d38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15805 (0x3dbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 6 15:12:12 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a74a44c-20cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:2a:35:e1:50:99:70:96:d1:9e:99:16:a4: b5:d3:a7:cf:86:fb:95:2e:9e:31:c2:11:d9:92:fd: 1e:22:f6:9b:09:a6:8c:9d:94:6d:ae:18:b8:5e:4e: 60:10:b5:7f:1c:ed:64:e7:0d:1a:8f:14:6c:b2:21: 7e:46:a1:33:d0:21:aa:07:2c:b6:4a:45:a2:60:6b: b4:fc:fd:97:be:4c:35:49:6a:ed:90:70:77:fa:95: c9:d2:02:d1:ac:32:32:e6:16:51:8b:b2:25:80:d9: fd:d0:19:bd:1a:e4:5d:21:77:7a:dc:41:4a:b6:3e: e7:33:5e:10:f1:06:e0:4b:87:06:e2:82:aa:88:61: b8:04:f7:fd:f6:fb:01:68:f1:f3:f6:9a:ac:0e:47: 73:71:6c:1f:cc:4d:c5:72:0a:4e:16:f5:c3:62:7a: 4a:c8:ca:c6:9c:ed:7a:68:06:bc:f7:0c:c0:0f:7b: 21:fd:9b:e0:1a:24:31:1d:b5:96:66:46:00:5d:d7: e4:45:16:bb:d7:f0:52:18:f9:2c:59:31:57:66:48: f0:04:99:94:93:27:a3:20:ec:77:f2:11:8a:b3:7d: 0f:5d:b9:a5:f5:ef:d9:05:5c:79:f3:78:ba:9c:04: 0e:43:b0:b5:24:a5:7b:83:3d:f0:36:01:0b:a6:2d: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:58:E6:70:4A:6C:5A:C5:DB:B5:D0:85:AC:79:0B:B6:4B:CB:B1 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/CDCC902E170811EFB6DE866CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:d38::/32 Signature Algorithm: sha256WithRSAEncryption ea:a6:76:8e:9c:92:cd:1f:01:7f:d2:47:f5:4b:17:f9:8c:d9: 68:eb:8e:89:e3:4f:f4:75:2c:c1:d5:b7:02:56:c4:55:ae:55: 89:c2:d7:f4:91:c5:08:6d:13:aa:a1:bb:be:63:67:17:43:7d: 02:1d:30:ee:65:96:62:b3:5f:26:76:63:1c:02:db:97:a0:d9: 0a:8f:48:63:63:7f:df:c9:00:d2:ee:ea:4d:a7:fb:4c:f4:c0: b7:92:cf:88:3e:a7:92:b2:6a:cc:3f:23:37:36:e9:f3:14:40: ad:a5:45:2f:91:4f:ba:3c:9e:cc:29:54:cd:34:c2:6c:c7:56: 31:fb:39:dc:84:0c:c3:b8:15:2f:fd:e0:bf:cd:0a:82:f0:46: 6b:0e:ce:3e:b1:62:e6:ea:1c:b4:1b:94:48:15:1c:fe:7c:4d: b6:da:10:20:a7:a0:1d:12:8d:dc:47:90:95:eb:87:3b:ef:66: 81:2d:66:91:ca:f6:d0:6f:3b:08:2b:10:a6:b2:92:c1:70:65: bc:98:fe:fa:66:f4:f0:3f:e9:34:86:d4:08:69:aa:37:c2:7b: 05:a7:99:08:32:1a:74:9a:f4:66:86:ba:8e:bf:5b:5f:12:e9: fe:f2:1d:12:a3:22:3d:9d:98:02:c0:d2:da:df:b5:61:a5:9e: ec:8f:8a:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICPb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODA2MTUxMjEyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YTQ0Yy0yMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8AqNeFQmXCW0Z6ZFqS106fPhvuVLp4xwhHZkv0eIvabCaaMnZRtrhi4Xk5g ELV/HO1k5w0ajxRssiF+RqEz0CGqByy2SkWiYGu0/P2Xvkw1SWrtkHB3+pXJ0gLR rDIy5hZRi7IlgNn90Bm9GuRdIXd63EFKtj7nM14Q8QbgS4cG4oKqiGG4BPf99vsB aPHz9pqsDkdzcWwfzE3FcgpOFvXDYnpKyMrGnO16aAa89wzAD3sh/ZvgGiQxHbWW ZkYAXdfkRRa71/BSGPksWTFXZkjwBJmUkyejIOx38hGKs30PXbml9e/ZBVx583i6 nAQOQ7C1JKV7gz3wNgELpi1B0QIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFDbYWOZw Smxaxdu10IWseQu2S8uxMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvQ0RDQzkwMkUx NzA4MTFFRkI2REU4NjZDQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAIAENODANBgkqhkiG9w0BAQsFAAOCAQEA6qZ2jpySzR8Bf9JH9UsX +YzZaOuOieNP9HUswdW3AlbEVa5VicLX9JHFCG0TqqG7vmNnF0N9Ah0w7mWWYrNf JnZjHALbl6DZCo9IY2N/38kA0u7qTaf7TPTAt5LPiD6nkrJqzD8jNzbp8xRAraVF L5FPujyezClUzTTCbMdWMfs53IQMw7gVL/3gv80KgvBGaw7OPrFi5uoctBuUSBUc /nxNttoQIKegHRKN3EeQleuHO+9mgS1mkcr20G87CCsQprKSwXBlvJj++mb08D/p NIbUCGmqN8J7BaeZCDIadJr0Zoa6jr9bXxLp/vIdEqMiPZ2YAsDS2t+1YaWe7I+K 6Q== -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:45 2026 by rpki-client