$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa File: 18E343FA3A3411F195AC72659C833773.roa (raw, json) Hash identifier: 2LSM3eiQ6uSa3mcP9nx4IAJuA3izNuR+FLwE9vPZ8yU= Subject key identifier: CD:53:BF:B3:D0:AC:F5:E6:40:5A:D6:3D:AC:D2:BB:9C:7C:E4:A4:F1 Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0CEB Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa Signing time: Tue 27 Oct 2026 07:42:19 +0000 ROA not before: Tue 27 Oct 2026 07:42:19 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 133478 IP address blocks: 240d:c000:f1e0::/48 maxlen: 48 240d:c000:f1e1::/48 maxlen: 48 240d:c000:f1e3::/48 maxlen: 48 240d:c000:f1e4::/48 maxlen: 48 240d:c000:f1e5::/48 maxlen: 48 240d:c000:f1ef::/48 maxlen: 48 240d:c000:f1ef::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 21:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Oct 27 07:42:19 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6ae055db-6070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:86:3b:40:64:06:50:d6:b5:64:e3:e9:d5: 0e:f6:91:7e:ab:35:cc:6c:f9:9a:3a:ec:7b:10:69: b7:de:e8:8d:81:b8:be:62:d8:07:81:ab:b5:3d:41: 3c:7e:c0:b8:96:f6:6e:a4:03:ac:99:22:65:d9:5e: 37:92:89:98:a2:70:c2:90:06:cd:ee:6f:13:6a:45: 3c:58:ce:99:a0:e0:2e:40:1c:0c:c4:7a:89:e8:43: 6d:a4:c6:16:c2:5d:8a:28:69:10:90:0a:c1:03:b8: 5c:b1:a4:65:6e:31:8c:d3:29:9b:84:c4:16:e3:74: b4:d3:e1:e9:ef:41:ac:ea:fa:e4:ce:45:50:ee:43: 74:0d:ec:3c:b2:41:ac:d0:11:d0:b1:ec:bd:34:6e: 96:5f:f9:00:c9:5a:2e:17:5e:04:98:d3:7f:d9:55: fb:96:69:e7:17:94:86:67:d1:1d:ea:12:ba:1e:fe: 52:3c:02:f0:59:52:af:f3:0d:7a:5f:a1:2e:c6:7f: d0:22:ed:a6:2a:6f:8c:fc:32:de:92:74:11:71:66: 0a:65:18:d4:8f:15:30:e4:35:ac:35:4a:03:38:48: 6e:8c:ce:3c:06:3b:fa:5b:b8:27:f3:d8:ab:a6:4e: 73:a1:da:49:5e:3b:0c:da:39:2a:f1:f5:81:e0:45: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:53:BF:B3:D0:AC:F5:E6:40:5A:D6:3D:AC:D2:BB:9C:7C:E4:A4:F1 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa sbgp-ipAddrBlock: critical IPv6: 240d:c000:f1e0::/47 240d:c000:f1e3::-240d:c000:f1e5:ffff:ffff:ffff:ffff:ffff 240d:c000:f1ef::/48 Signature Algorithm: sha256WithRSAEncryption c5:e8:bd:86:b8:64:4d:63:44:38:84:4a:8d:88:d4:a0:7a:b6: 97:de:7e:4f:ae:f7:9e:8f:22:26:94:da:db:cd:48:99:7e:fe: 31:c0:26:fc:c3:41:df:4c:ab:1f:b7:4c:51:b2:66:b6:dd:af: 8c:cb:4a:38:76:cc:04:02:3e:7d:54:64:97:2f:9d:2d:ba:54: 18:bd:9c:26:64:7d:37:0c:db:46:96:b1:9e:51:85:79:7a:5e: 9a:65:25:b4:43:81:21:2c:49:d6:fc:0e:69:2e:b7:bc:0b:ce: 49:e8:e7:d8:59:d9:5b:70:be:8c:08:86:ab:75:1d:91:1b:3a: 40:ba:3b:5b:ed:0b:25:56:e5:73:75:28:77:7f:1b:c0:25:96: de:6c:fc:8a:dc:e4:fe:06:54:f4:6b:fd:f1:63:02:fe:97:db: 24:ef:22:cf:16:54:d6:ce:07:b6:8d:e2:45:c6:04:73:81:28: b3:7f:fa:f5:c9:aa:cf:04:55:65:0d:94:2c:ef:8a:16:f6:fc: 27:e4:f4:d1:f7:49:d2:22:0c:0f:f8:72:7d:e2:9f:37:63:bc: 03:70:4e:7c:fe:46:b4:ae:d8:fc:4c:9f:df:6d:61:4b:ff:8d: c3:82:64:04:54:a9:f7:09:cf:ae:80:4e:00:e2:f5:c5:14:da: ab:19:ec:58 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYxMDI3MDc0MjE5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWUwNTVkYi02MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNOGO0BkBlDWtWTj6dUO9pF+qzXMbPmaOux7EGm33uiNgbi+YtgHgau1PUE8 fsC4lvZupAOsmSJl2V43komYonDCkAbN7m8TakU8WM6ZoOAuQBwMxHqJ6ENtpMYW wl2KKGkQkArBA7hcsaRlbjGM0ymbhMQW43S00+Hp70Gs6vrkzkVQ7kN0Dew8skGs 0BHQsey9NG6WX/kAyVouF14EmNN/2VX7lmnnF5SGZ9Ed6hK6Hv5SPALwWVKv8w16 X6Euxn/QIu2mKm+M/DLeknQRcWYKZRjUjxUw5DWsNUoDOEhujM48Bjv6W7gn89ir pk5zodpJXjsM2jkq8fWB4EX/7QIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFM1Tv7PQ rPXmQFrWPazSu5x85KTxMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvMThFMzQzRkEz QTM0MTFGMTk1QUM3MjY1OUM4MzM3NzMucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAAjAmAwcBJA3AAPHgMBIDBwAkDcAA8eMDBwEkDcAA8eQDBwAkDcAA8e8wDQYJ KoZIhvcNAQELBQADggEBAMXovYa4ZE1jRDiESo2I1KB6tpfefk+u956PIiaU2tvN SJl+/jHAJvzDQd9Mqx+3TFGyZrbdr4zLSjh2zAQCPn1UZJcvnS26VBi9nCZkfTcM 20aWsZ5RhXl6XpplJbRDgSEsSdb8Dmkut7wLzkno59hZ2VtwvowIhqt1HZEbOkC6 O1vtCyVW5XN1KHd/G8Allt5s/Irc5P4GVPRr/fFjAv6X2yTvIs8WVNbOB7aN4kXG BHOBKLN/+vXJqs8EVWUNlCzvihb2/Cfk9NH3SdIiDA/4cn3inzdjvANwTnz+RrSu 2PxMn99tYUv/jcOCZARUqfcJz66ATgDi9cUU2qsZ7Fg= -----END CERTIFICATE-----Generated at Sun Nov 1 23:20:37 2026 by rpki-client