$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa File: 118F422C816F11EF9ACB654AC4F9AE02.roa (raw, json) Hash identifier: CxnjJlPVJYgkZHfx3lMqWC7qbUOJonF6D4YbcSkU640= Subject key identifier: 9E:36:F3:63:7E:8D:D5:F5:41:DA:8E:42:6A:EB:04:94:CE:05:C1:8B Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 1A35 Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa Signing time: Fri 02 Oct 2026 17:30:15 +0000 ROA not before: Fri 02 Oct 2026 17:30:15 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 20940 IP address blocks: 2400:2000:6::/48 maxlen: 48 2400:2000:7::/48 maxlen: 48 2400:2000:b::/48 maxlen: 48 2400:2000:c::/48 maxlen: 48 2400:2000:f::/48 maxlen: 48 2400:2000:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6709 (0x1a35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Oct 2 17:30:15 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abfea27-cbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:86:d0:cc:65:06:12:ab:06:d2:30:d6:cb: 80:e6:63:b4:b3:b1:76:00:36:7b:41:59:7a:31:d2: 89:43:bb:7a:ed:52:ca:46:5d:33:f2:b5:3f:bc:42: fe:83:ea:3d:a6:01:63:86:00:d5:04:f8:19:af:05: 9d:f0:58:86:1c:c7:14:c8:87:68:ce:5c:b0:9e:bf: 75:4b:27:92:8b:c1:6a:19:ab:1e:35:15:ec:0f:85: 1d:eb:00:d5:65:b5:85:65:8b:9e:64:ac:96:6e:31: a3:d2:22:cf:62:12:53:f8:43:86:ae:6a:19:f0:80: 61:1b:85:6f:a9:8e:2d:33:32:ea:c0:2f:d7:01:1d: 67:6f:6f:88:6f:64:40:f2:e6:11:e8:5a:13:82:c8: 13:97:5a:3d:cf:92:d6:40:50:7a:08:6a:ab:cc:68: b5:f8:6e:ed:55:3f:f6:89:66:b2:95:68:06:e0:d5: 04:1c:3c:3e:ad:29:a9:cf:53:f6:4d:72:fd:e1:5e: ef:c9:47:09:b9:7b:2e:57:e6:90:22:32:77:fe:15: 68:2a:5b:13:75:b4:55:79:d1:c3:4a:8e:64:e2:fd: 57:fe:a4:b0:28:11:d6:07:b8:61:a1:89:84:e7:07: c1:fc:32:bf:65:9c:75:4f:60:cd:1a:8a:d3:86:d7: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:36:F3:63:7E:8D:D5:F5:41:DA:8E:42:6A:EB:04:94:CE:05:C1:8B X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:2000:6::/47 2400:2000:b::-2400:2000:c:ffff:ffff:ffff:ffff:ffff 2400:2000:f::-2400:2000:10:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 28:39:1f:49:6d:2c:d5:62:96:80:2b:ca:dc:03:3d:f9:f8:e7: ca:b7:80:89:ac:fb:8b:3e:ae:16:25:b7:71:53:f6:25:c5:b0: a7:b1:89:e9:2c:ca:ad:0e:7d:2c:7c:e1:21:4a:bc:f4:6b:4a: 15:5d:f3:95:12:6b:df:8b:79:a7:8f:39:5e:67:b1:f6:7d:a6: c5:97:0f:1f:56:83:26:b7:af:75:79:bd:a9:b4:ac:95:2e:1a: b1:8c:2c:c0:1b:9e:a2:05:14:3c:de:07:ca:4a:29:c0:55:53: d0:5e:2f:36:26:5f:59:2f:26:e4:a6:99:0d:ce:2c:e8:b1:f7: 9c:8b:41:47:d7:23:cf:ec:a4:3f:af:13:b7:83:f1:2f:d0:fd: 6f:1a:42:8f:07:14:e0:81:ce:c7:e6:3d:fe:88:19:33:64:86: ad:c0:f1:7d:3c:b2:52:26:d4:75:0c:ff:96:98:97:a7:ef:73: 36:19:09:df:3f:d1:06:ca:d5:d1:c9:d9:46:84:88:0d:78:f9: a2:9e:0b:66:03:15:ca:92:a9:c0:e8:98:94:af:ea:06:10:7b: 71:e5:f3:1f:ff:aa:d8:04:2b:47:fa:44:a6:11:29:fd:09:aa: 06:ee:13:0d:5e:6b:af:cc:70:7e:5e:ac:5c:4c:64:02:3a:1e: e2:fb:92:fe -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICGjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjYxMDAyMTczMDE1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZWEyNy1jYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlSG0MxlBhKrBtIw1suA5mO0s7F2ADZ7QVl6MdKJQ7t67VLKRl0z8rU/vEL+ g+o9pgFjhgDVBPgZrwWd8FiGHMcUyIdozlywnr91SyeSi8FqGaseNRXsD4Ud6wDV ZbWFZYueZKyWbjGj0iLPYhJT+EOGrmoZ8IBhG4VvqY4tMzLqwC/XAR1nb2+Ib2RA 8uYR6FoTgsgTl1o9z5LWQFB6CGqrzGi1+G7tVT/2iWaylWgG4NUEHDw+rSmpz1P2 TXL94V7vyUcJuXsuV+aQIjJ3/hVoKlsTdbRVedHDSo5k4v1X/qSwKBHWB7hhoYmE 5wfB/DK/ZZx1T2DNGorThtc+RQIDAQABo4ICizCCAocwHQYDVR0OBBYEFJ4282N+ jdX1QdqOQmrrBJTOBcGLMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBRTEvNjM4NDNFRDA5NDQwMTFFN0JDOTlDMTFBQzRGOUFFMDIvMTE4RjQyMkM4 MTZGMTFFRjlBQ0I2NTRBQzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTA3 BAIAAjAxAwcBJAAgAAAGMBIDBwAkACAAAAsDBwAkACAAAAwwEgMHACQAIAAADwMH ACQAIAAAEDANBgkqhkiG9w0BAQsFAAOCAQEAKDkfSW0s1WKWgCvK3AM9+fjnyreA iaz7iz6uFiW3cVP2JcWwp7GJ6SzKrQ59LHzhIUq89GtKFV3zlRJr34t5p485Xmex 9n2mxZcPH1aDJrevdXm9qbSslS4asYwswBueogUUPN4HykopwFVT0F4vNiZfWS8m 5KaZDc4s6LH3nItBR9cjz+ykP68Tt4PxL9D9bxpCjwcU4IHOx+Y9/ogZM2SGrcDx fTyyUibUdQz/lpiXp+9zNhkJ3z/RBsrV0cnZRoSIDXj5op4LZgMVypKpwOiYlK/q BhB7ceXzH/+q2AQrR/pEphEp/QmqBu4TDV5rr8xwfl6sXExkAjoe4vuS/g== -----END CERTIFICATE-----Generated at Thu Oct 8 08:51:22 2026 by rpki-client