$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa File: 18E343FA3A3411F195AC72659C833773.roa (raw, json) Hash identifier: BLfI70r7P0GWJj9FW86vUnNDLaDw84bHq9j86Nd/HVU= Subject key identifier: 98:85:EF:38:60:8B:4E:2D:CD:51:2B:60:67:0B:2B:01:59:F4:32:3E Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0CC9 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa Signing time: Thu 10 Sep 2026 02:34:06 +0000 ROA not before: Thu 10 Sep 2026 02:34:06 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 133478 IP address blocks: 240d:c000:f1e0::/48 maxlen: 48 240d:c000:f1e1::/48 maxlen: 48 240d:c000:f1e3::/48 maxlen: 48 240d:c000:f1ef::/48 maxlen: 48 240d:c000:f1ef::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3273 (0xcc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Sep 10 02:34:06 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6aa2171e-0218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:a1:d5:34:59:c5:87:b8:4d:c5:b8:62:e1: cf:0b:83:14:2a:6b:2f:28:45:96:14:c7:cc:85:f7: f1:7c:e9:4d:6f:97:5e:4e:92:db:2a:e1:04:29:72: e8:21:85:a5:b2:95:40:e4:8e:ad:26:7d:d4:60:90: 74:a8:81:52:12:c8:e3:ee:0a:52:bd:e0:37:1a:3f: 25:7c:40:cf:90:08:f7:d4:7b:14:4f:c0:fd:56:d9: a9:3e:f6:eb:31:51:75:43:0f:4b:9b:56:e9:af:76: e9:14:1c:e7:1a:3b:8c:e6:ae:cb:c9:03:8e:87:63: c9:81:f4:37:e9:71:ee:99:97:3c:51:52:6b:ec:7f: a1:b8:3b:05:02:f7:fd:59:b7:7a:59:88:51:55:97: 83:49:f8:a6:2f:77:3b:7a:c4:5e:75:9b:4d:6e:8a: ea:14:05:11:d2:97:54:05:79:bd:a3:b3:4e:e8:d1: 3e:8e:01:3e:61:86:c7:73:a2:ae:3a:2b:ae:d0:fc: e6:52:d7:16:4d:0f:ee:64:14:be:9c:0a:96:ae:a3: 55:63:50:2b:8d:95:6e:64:f3:44:d3:55:ba:3d:44: 48:24:9d:d4:76:0f:0c:c5:da:ae:56:ee:4f:86:fd: 9c:65:47:73:d3:b8:6b:95:f6:d7:f9:dc:56:21:0c: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:85:EF:38:60:8B:4E:2D:CD:51:2B:60:67:0B:2B:01:59:F4:32:3E X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/18E343FA3A3411F195AC72659C833773.roa sbgp-ipAddrBlock: critical IPv6: 240d:c000:f1e0::/47 240d:c000:f1e3::/48 240d:c000:f1ef::/48 Signature Algorithm: sha256WithRSAEncryption 7e:79:39:4b:03:7d:82:0b:04:5b:32:5f:c6:64:6d:36:99:ad: 10:3e:d5:99:5b:33:a5:cb:b8:6f:18:cb:8d:fb:a3:fe:a6:d4: ac:f5:f9:71:28:17:2f:1c:e9:d3:41:ba:0e:51:e9:87:39:ec: 5d:30:47:f0:be:64:76:50:b8:81:6b:66:04:57:4c:f3:3c:42: 47:8d:6c:7a:c0:c4:8e:9f:3e:97:0b:83:c2:ca:84:58:c2:75: b9:5e:37:3a:bd:87:1b:21:8e:9c:01:58:5e:7d:3e:1f:19:19: 73:d6:20:74:9e:2a:02:80:c5:77:65:27:83:aa:ff:9e:34:40: 67:c4:9b:52:2a:1d:22:95:ec:6c:69:22:8c:1c:7e:bd:67:56: bc:e0:b0:af:fb:de:4d:48:86:d7:7f:59:b2:8a:a0:5e:dd:95: 18:3b:89:64:36:e9:8d:a2:06:ed:1b:82:a0:e9:8f:7a:de:5d: 11:10:08:92:9f:e8:81:a2:c7:16:78:7d:cd:83:3b:5d:8a:94: 05:94:e1:00:c1:64:0c:fe:0e:d0:e2:09:57:50:fc:3b:a1:50: 16:b2:f7:de:7b:df:a6:d9:64:e7:c0:95:f8:ec:60:1e:a6:f3: 83:1b:da:08:45:9c:c4:99:69:fa:f4:58:f3:a6:17:ec:be:13: 0c:32:04:1d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwOTEwMDIzNDA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyMTcxZS0wMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSWh1TRZxYe4TcW4YuHPC4MUKmsvKEWWFMfMhffxfOlNb5deTpLbKuEEKXLo IYWlspVA5I6tJn3UYJB0qIFSEsjj7gpSveA3Gj8lfEDPkAj31HsUT8D9VtmpPvbr MVF1Qw9Lm1bpr3bpFBznGjuM5q7LyQOOh2PJgfQ36XHumZc8UVJr7H+huDsFAvf9 Wbd6WYhRVZeDSfimL3c7esRedZtNborqFAUR0pdUBXm9o7NO6NE+jgE+YYbHc6Ku Oiuu0PzmUtcWTQ/uZBS+nAqWrqNVY1ArjZVuZPNE01W6PURIJJ3Udg8MxdquVu5P hv2cZUdz07hrlfbX+dxWIQyGZQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJiF7zhg i04tzVErYGcLKwFZ9DI+MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvMThFMzQzRkEz QTM0MTFGMTk1QUM3MjY1OUM4MzM3NzMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh BAIAAjAbAwcBJA3AAPHgAwcAJA3AAPHjAwcAJA3AAPHvMA0GCSqGSIb3DQEBCwUA A4IBAQB+eTlLA32CCwRbMl/GZG02ma0QPtWZWzOly7hvGMuN+6P+ptSs9flxKBcv HOnTQboOUemHOexdMEfwvmR2ULiBa2YEV0zzPEJHjWx6wMSOnz6XC4PCyoRYwnW5 Xjc6vYcbIY6cAVhefT4fGRlz1iB0nioCgMV3ZSeDqv+eNEBnxJtSKh0ilexsaSKM HH69Z1a84LCv+95NSIbXf1myiqBe3ZUYO4lkNumNogbtG4Kg6Y963l0REAiSn+iB oscWeH3NgztdipQFlOEAwWQM/g7Q4glXUPw7oVAWsvfee9+m2WTnwJX47GAepvOD G9oIRZzEmWn69FjzphfsvhMMMgQd -----END CERTIFICATE-----Generated at Fri Sep 11 10:41:24 2026 by rpki-client