$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/A1B61AAC1C3B11F1A9F167973A3D8C67.roa File: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (raw, json) Hash identifier: A3c7atco3d4E3cIrhHmLieVqgFTfi0qUJCdFz0a95To= Subject key identifier: 22:33:8F:6C:65:E0:57:57:17:B3:FE:4C:93:CD:B9:30:68:CA:6C:4D Certificate issuer: /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1 Certificate serial: 42 Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/A1B61AAC1C3B11F1A9F167973A3D8C67.roa Signing time: Tue 07 Jul 2026 10:35:50 +0000 ROA not before: Tue 07 Jul 2026 10:35:50 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 152884 IP address blocks: 2001:df3:d5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1 Validity Not Before: Jul 7 10:35:50 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4cd686-d1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:41:0b:35:d6:af:d4:dc:a2:32:bf:df:ca: 27:7a:57:76:15:c2:27:47:8b:d2:dd:98:09:2e:f3: 18:45:78:99:12:1a:7e:c1:ef:9e:d8:5c:0e:dc:87: dd:5f:9f:b5:ce:b3:72:df:63:32:27:38:ba:70:29: 63:3e:23:f8:63:cd:8b:09:81:ae:06:f6:56:40:2c: 21:58:62:d4:ac:1d:20:11:21:15:d5:a2:3c:bd:24: de:d7:ad:05:0c:fb:8f:b2:33:c9:35:53:ee:d0:f9: d1:c6:1f:51:ef:bc:9a:5a:b4:6a:ff:b3:d0:04:89: ca:90:4a:a4:b5:6c:37:87:74:c0:ec:df:59:14:cd: 46:f6:f3:9f:9c:5e:99:61:29:d8:97:f8:5d:66:71: 11:85:74:c1:25:5b:a5:4e:58:9a:15:29:4d:9d:e7: d1:6d:b5:98:8f:4b:24:b5:b7:6a:67:b8:34:35:54: d4:18:be:f7:5a:f8:4c:e8:39:cb:2b:ad:e2:e2:ab: 4b:ba:03:d4:ed:1d:99:28:36:a4:10:f8:23:9d:17: a6:2a:5b:a7:76:cc:7e:85:ad:7c:75:23:2c:22:36: c1:df:e6:db:85:fe:f1:ec:a9:18:40:50:81:ae:ae: 72:ac:aa:5c:da:5c:f6:d6:43:b4:41:3b:37:e9:28: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:8F:6C:65:E0:57:57:17:B3:FE:4C:93:CD:B9:30:68:CA:6C:4D X509v3 Authority Key Identifier: keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/A1B61AAC1C3B11F1A9F167973A3D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:d5c0::/48 Signature Algorithm: sha256WithRSAEncryption 48:c3:ed:67:3e:7e:cb:95:54:be:b5:27:f0:04:80:2a:25:de: 5a:b3:f2:5c:44:78:61:32:95:bc:6a:ce:dc:cb:ed:36:a7:78: cb:41:4c:47:04:42:51:65:6a:b7:ee:f6:8d:1b:2f:2f:92:38: f2:87:e2:f6:d1:bc:ff:ee:44:85:08:c2:8d:0a:ad:b5:70:7d: f8:06:02:ff:9c:d5:81:82:27:e2:f9:60:81:c6:9f:19:7f:20: 84:55:ac:4c:04:78:71:93:0d:41:75:ae:1c:a9:7f:06:90:3e: 70:f3:4c:ee:04:e7:fd:de:cf:93:e9:07:6d:cd:9e:8b:99:33: 5a:a8:39:e8:e1:31:b0:5a:9f:92:4b:18:8f:cf:bd:4b:df:24: fb:cd:0a:a2:52:36:16:4b:72:b4:dc:f7:18:79:a4:47:72:26: 07:87:a6:11:15:06:9f:2b:a3:fa:54:da:51:4f:af:01:99:ca: aa:c1:97:b3:93:b6:eb:72:3a:31:84:27:74:d3:58:b8:98:03: 61:62:ac:ed:1e:84:60:8c:b0:33:d3:af:4d:26:8c:5f:7f:9c: 64:3b:bb:d7:76:97:4f:3a:c7:95:c1:25:0b:f5:5f:69:e4:cd: 1a:cc:84:51:7a:55:33:e9:ab:3d:77:b2:55:72:d5:e8:fe:94: 7d:99:68:d8 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoMTJGMDg5NkUxQTNDQkYyNTAxOTEwMDA5RDk4NzkwNkJB NTNDNkNDMTAeFw0yNjA3MDcxMDM1NTBaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNGNkNjg2LWQxZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeHEELNdav1NyiMr/fyid6V3YVwidHi9LdmAku8xhFeJkSGn7B757YXA7ch91f n7XOs3LfYzInOLpwKWM+I/hjzYsJga4G9lZALCFYYtSsHSARIRXVojy9JN7XrQUM +4+yM8k1U+7Q+dHGH1HvvJpatGr/s9AEicqQSqS1bDeHdMDs31kUzUb285+cXplh KdiX+F1mcRGFdMElW6VOWJoVKU2d59FttZiPSyS1t2pnuDQ1VNQYvvda+EzoOcsr reLiq0u6A9TtHZkoNqQQ+COdF6YqW6d2zH6FrXx1IywiNsHf5tuF/vHsqRhAUIGu rnKsqlzaXPbWQ7RBOzfpKGXZAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUIjOPbGXg V1cXs/5Mk825MGjKbE0wHwYDVR0jBBgwFoAUEvCJbho8vyUBkQAJ2YeQa6U8bMEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwLzAxRkEwMDcyMUMz NzExRjE4ODQ3QUIyQjM4M0Q4QzY3L0V2Q0piaG84dnlVQmtRQUoyWWVRYTZVOGJN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXZDSmJobzh2eVVCa1FBSjJZZVFhNlU4Yk1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5MC8wMUZBMDA3MjFDMzcxMUYxODg0N0FCMkIzODNEOEM2Ny9BMUI2MUFBQzFD M0IxMUYxQTlGMTY3OTczQTNEOEM2Ny5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ3z1cAwDQYJKoZIhvcNAQELBQADggEBAEjD7Wc+fsuVVL61J/AE gCol3lqz8lxEeGEylbxqztzL7TaneMtBTEcEQlFlarfu9o0bLy+SOPKH4vbRvP/u RIUIwo0KrbVwffgGAv+c1YGCJ+L5YIHGnxl/IIRVrEwEeHGTDUF1rhypfwaQPnDz TO4E5/3ez5PpB23NnouZM1qoOejhMbBan5JLGI/PvUvfJPvNCqJSNhZLcrTc9xh5 pEdyJgeHphEVBp8ro/pU2lFPrwGZyqrBl7OTtutyOjGEJ3TTWLiYA2FirO0ehGCM sDPTr00mjF9/nGQ7u9d2l086x5XBJQv1X2nkzRrMhFF6VTPpqz13slVy1ej+lH2Z aNg= -----END CERTIFICATE-----Generated at Sat Jul 18 06:22:43 2026 by rpki-client