$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EB3FE1C61B6411ECAAB1D328C4F9AE02.roa File: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (raw, json) Hash identifier: kefR9n9mBEOogfhkWHbCEREeJRCl5YzlKLqQiZzyJkc= Subject key identifier: AD:35:5C:61:8B:27:D4:F7:C4:0A:3B:B2:04:F0:48:D8:1F:25:AB:80 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 369F Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EB3FE1C61B6411ECAAB1D328C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:17:03 +0000 ROA not before: Wed 30 Sep 2026 16:17:03 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 142501 IP address blocks: 2405:8a00:ffff::/48 maxlen: 48 2409:e:e0::/48 maxlen: 48 2409:e:e1::/48 maxlen: 48 2409:e:e2::/48 maxlen: 48 2409:e:e4::/48 maxlen: 48 2409:e:e6::/48 maxlen: 48 2409:e:e8::/48 maxlen: 48 2409:e:ea::/48 maxlen: 48 2409:e:ec::/48 maxlen: 48 2409:e:ee::/48 maxlen: 48 2409:f::/32 maxlen: 32 2409:f:f1::/48 maxlen: 48 2409:f:f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 15:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13983 (0x369f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Sep 30 16:17:03 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd35ff-4332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:25:96:a8:55:5b:35:a8:7b:9c:95:c1:a2: 72:53:31:21:86:e0:b1:cf:d0:be:08:48:df:52:28: d3:ff:60:be:d8:eb:bd:f1:0a:b1:0a:30:7a:39:82: 72:c2:ab:10:7d:9a:bb:b4:75:f2:85:d1:e0:39:9f: 7e:aa:3c:1e:e4:57:cc:fa:30:90:27:cb:66:30:be: 88:6a:0b:6c:ee:55:d4:44:c4:37:01:47:85:ae:d8: 2e:37:4a:36:d4:a0:d8:a2:08:c6:23:e9:0e:93:bf: fe:c5:9b:7c:2f:17:75:e5:7b:98:2d:06:67:1e:42: dc:64:32:9e:18:f1:5d:0a:8a:c3:30:6c:d6:6a:ea: b7:59:d8:e4:97:ef:7b:c6:84:cd:b7:7d:94:ab:fa: 84:c3:7d:3a:6a:2d:b9:6a:94:be:e9:b4:84:88:76: 5b:bb:88:53:2c:4c:97:d6:14:05:4b:4d:01:d5:73: ed:db:ec:8c:0e:c3:5f:bb:62:22:b7:93:b0:52:b5: 29:0e:87:a0:11:3d:d8:f4:b9:a1:4f:67:63:cd:59: 18:85:2c:58:c0:53:32:46:84:fa:47:88:6d:19:5c: e4:e6:a2:0c:03:10:e0:2d:07:a6:e0:b4:01:2e:1e: 58:e5:70:72:d7:a1:36:da:5c:7d:f5:47:63:cc:64: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:35:5C:61:8B:27:D4:F7:C4:0A:3B:B2:04:F0:48:D8:1F:25:AB:80 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EB3FE1C61B6411ECAAB1D328C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2405:8a00:ffff::/48 2409:e:e0::-2409:e:e2:ffff:ffff:ffff:ffff:ffff 2409:e:e4::/48 2409:e:e6::/48 2409:e:e8::/48 2409:e:ea::/48 2409:e:ec::/48 2409:e:ee::/48 2409:f::/32 Signature Algorithm: sha256WithRSAEncryption 7c:5f:f9:b1:3d:45:be:5f:12:ef:39:df:c8:04:49:37:59:d4: 3a:3c:e1:58:c0:cf:ff:66:56:84:b2:6d:9b:9b:d4:58:f6:4a: 48:d9:50:5a:e0:c1:ae:9e:9d:1b:7f:4b:a5:3f:25:80:a3:49: 5e:6a:61:18:c0:ca:fe:ca:a8:db:c0:15:32:b8:6a:51:56:ac: 2b:0c:c1:fa:30:f9:53:26:6c:7c:80:fd:8f:a9:d2:6d:f1:6d: ba:b7:7d:21:ce:49:05:33:42:2a:67:61:ea:d6:98:88:a1:d4: 29:f9:77:5c:54:7d:0c:d4:f3:71:a3:36:63:97:df:b8:f6:7b: 0f:9d:81:d4:78:d2:95:10:df:23:e4:99:e2:b1:3a:66:07:27: b4:eb:ac:f0:27:1d:76:65:68:15:9d:e6:37:e3:a9:5a:94:e4: 1e:6d:1c:8a:74:74:e8:5b:c7:9c:ed:90:5c:fb:68:42:b8:ee: 25:a6:23:09:69:1f:e4:fc:c7:38:91:47:09:c4:4a:a3:37:56: 05:f7:74:10:94:64:04:03:c5:5c:40:b5:f1:e9:95:15:68:69: 76:a7:ac:71:a6:86:b1:fc:be:a3:4e:52:63:46:83:f4:2b:ab: bb:5b:6d:17:ad:4e:e8:a9:10:71:d9:15:2f:a1:e0:85:65:ea: 87:5c:3d:56 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICNp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjYwOTMwMTYxNzAzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzVmZi00MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FIllqhVWzWoe5yVwaJyUzEhhuCxz9C+CEjfUijT/2C+2Ou98QqxCjB6OYJy wqsQfZq7tHXyhdHgOZ9+qjwe5FfM+jCQJ8tmML6Iagts7lXURMQ3AUeFrtguN0o2 1KDYogjGI+kOk7/+xZt8Lxd15XuYLQZnHkLcZDKeGPFdCorDMGzWauq3Wdjkl+97 xoTNt32Uq/qEw306ai25apS+6bSEiHZbu4hTLEyX1hQFS00B1XPt2+yMDsNfu2Ii t5OwUrUpDoegET3Y9LmhT2djzVkYhSxYwFMyRoT6R4htGVzk5qIMAxDgLQem4LQB Lh5Y5XBy16E22lx99UdjzGTN9wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFK01XGGL J9T3xAo7sgTwSNgfJauAMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvRUIzRkUxQzYx QjY0MTFFQ0FBQjFEMzI4QzRGOUFFMDIucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAAjBaAwcAJAWKAP//MBIDBwUkCQAOAOADBwAkCQAOAOIDBwAkCQAOAOQDBwAk CQAOAOYDBwAkCQAOAOgDBwAkCQAOAOoDBwAkCQAOAOwDBwAkCQAOAO4DBQAkCQAP MA0GCSqGSIb3DQEBCwUAA4IBAQB8X/mxPUW+XxLvOd/IBEk3WdQ6POFYwM//ZlaE sm2bm9RY9kpI2VBa4MGunp0bf0ulPyWAo0leamEYwMr+yqjbwBUyuGpRVqwrDMH6 MPlTJmx8gP2PqdJt8W26t30hzkkFM0IqZ2Hq1piIodQp+XdcVH0M1PNxozZjl9+4 9nsPnYHUeNKVEN8j5JnisTpmBye066zwJx12ZWgVneY346lalOQebRyKdHToW8ec 7ZBc+2hCuO4lpiMJaR/k/Mc4kUcJxEqjN1YF93QQlGQEA8VcQLXx6ZUVaGl2p6xx poax/L6jTlJjRoP0K6u7W20XrU7oqRBx2RUvoeCFZeqHXD1W -----END CERTIFICATE-----Generated at Wed Oct 21 14:54:31 2026 by rpki-client