$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa File: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (raw, json) Hash identifier: smGOjMVd2GLPpurMltuKcuhuCGMyzOm3zhphTWE/Ctg= Subject key identifier: 83:22:84:E1:B1:A0:F7:A5:06:61:E5:9A:91:58:08:F7:3F:B2:2C:EE Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0D1E Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa Signing time: Fri 14 Aug 2026 19:38:38 +0000 ROA not before: Fri 14 Aug 2026 19:38:38 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24121 IP address blocks: 2407:b001:1000::/40 maxlen: 40 2407:b001:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3358 (0xd1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 14 19:38:38 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7f6ebe-7f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:91:22:08:3a:c8:27:b8:18:ed:e7:c5:d8: 55:c8:6c:6f:04:79:71:80:f5:91:1b:58:02:df:e7: ec:05:e9:b6:fb:fa:25:7e:92:13:66:a5:8b:f1:36: 0b:18:dd:bc:87:ea:47:63:c5:56:a9:7d:23:ab:47: 73:26:9e:03:95:cd:e3:1a:64:8d:60:34:4e:91:90: 97:f1:28:c0:ab:1d:83:cd:a1:ad:fd:86:f8:73:d4: 4a:ae:41:1b:c4:ac:ae:91:9f:ea:34:41:f9:86:cb: 04:0a:8e:32:3c:d6:e0:cc:81:8e:2b:d6:2e:55:5d: 14:93:71:3a:ef:d1:ce:bf:31:ad:5d:3b:3e:3b:30: 00:9d:37:17:2e:06:b2:b2:6b:d8:9d:cd:45:59:e4: 67:41:45:88:65:f5:37:20:0c:8b:38:fb:0b:a3:28: 5a:c5:19:3b:ec:89:2c:e5:85:5a:10:a0:5c:8c:90: de:87:a1:05:e5:41:fa:98:e0:85:e9:4c:27:b4:7c: 7e:c8:61:ee:98:69:37:b8:eb:31:09:aa:47:e5:42: b1:5e:a5:9f:a3:c9:71:69:09:b5:46:27:13:0d:fb: 1a:66:d2:16:84:b3:7c:96:97:94:76:13:1e:e9:49: e2:14:d2:71:ac:bc:27:1f:46:40:9d:c5:cd:b4:6d: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:22:84:E1:B1:A0:F7:A5:06:61:E5:9A:91:58:08:F7:3F:B2:2C:EE X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/065A717E9B6E11EFBCAB692BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:b001:1000::/40 2407:b001:3000::/40 Signature Algorithm: sha256WithRSAEncryption b0:b0:17:1c:0d:a2:8a:a4:82:ec:20:ae:9a:fe:64:1f:68:43: 29:db:9d:70:aa:15:a1:e4:47:8d:8e:d2:e0:24:fe:38:f7:a6: 59:d5:e4:2e:8f:49:f4:45:cb:d5:cf:8a:76:99:36:23:a5:bf: b1:e7:6a:b5:f1:c2:44:30:0c:de:da:fd:3e:be:d9:77:59:c8: b0:a7:91:e4:32:4f:2f:ab:69:f0:47:e4:26:80:b6:1f:42:04: aa:2c:be:0c:9a:52:0a:ef:c5:1e:d6:94:3f:a7:6b:27:4f:e7: e4:b9:04:26:97:dd:d1:e3:8e:b9:b3:5b:88:d8:4b:f1:1b:5e: 80:89:c0:28:ec:01:a2:9c:af:d5:8a:d4:d0:82:88:ba:0d:45: 41:c4:d4:ba:fb:c7:aa:e1:8b:b9:f4:c3:84:eb:71:e0:04:15: 09:46:6f:0f:b2:dc:ef:cf:d0:04:2c:ec:e3:01:b2:99:11:a4: 3b:66:dd:de:12:dc:4f:08:7d:e1:7d:e6:f2:5b:49:31:d2:67: 3d:58:41:d2:89:f5:e6:57:ca:2b:9f:bc:40:48:dc:c1:b7:b1: 6b:05:0b:9a:78:d5:79:21:b9:0c:3a:ad:fd:f1:14:3b:22:c1: 48:57:ed:58:9a:c7:ce:6c:1c:8f:94:9d:f6:2a:ed:9f:f5:ba: 0a:d5:52:22 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgICDR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjYwODE0MTkzODM4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmNmViZS03Zjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkeCRIgg6yCe4GO3nxdhVyGxvBHlxgPWRG1gC3+fsBem2+/olfpITZqWL8TYL GN28h+pHY8VWqX0jq0dzJp4Dlc3jGmSNYDROkZCX8SjAqx2DzaGt/Yb4c9RKrkEb xKyukZ/qNEH5hssECo4yPNbgzIGOK9YuVV0Uk3E679HOvzGtXTs+OzAAnTcXLgay smvYnc1FWeRnQUWIZfU3IAyLOPsLoyhaxRk77Iks5YVaEKBcjJDeh6EF5UH6mOCF 6UwntHx+yGHumGk3uOsxCapH5UKxXqWfo8lxaQm1RicTDfsaZtIWhLN8lpeUdhMe 6UniFNJxrLwnH0ZAncXNtG0lqQIDAQABo4ICajCCAmYwHQYDVR0OBBYEFIMihOGx oPelBmHlmpFYCPc/sizuMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvMDY1QTcxN0U5 QjZFMTFFRkJDQUI2OTJCQzRGOUFFMDIucm9hMCkGCCsGAQUFBwEHAQH/BBowGDAW BAIAAjAQAwYAJAewARADBgAkB7ABMDANBgkqhkiG9w0BAQsFAAOCAQEAsLAXHA2i iqSC7CCumv5kH2hDKdudcKoVoeRHjY7S4CT+OPemWdXkLo9J9EXL1c+Kdpk2I6W/ sedqtfHCRDAM3tr9Pr7Zd1nIsKeR5DJPL6tp8EfkJoC2H0IEqiy+DJpSCu/FHtaU P6drJ0/n5LkEJpfd0eOOubNbiNhL8RtegInAKOwBopyv1YrU0IKIug1FQcTUuvvH quGLufTDhOtx4AQVCUZvD7Lc78/QBCzs4wGymRGkO2bd3hLcTwh94X3m8ltJMdJn PVhB0on15lfKK5+8QEjcwbexawULmnjVeSG5DDqt/fEUOyLBSFftWJrHzmwcj5Sd 9irtn/W6CtVSIg== -----END CERTIFICATE-----Generated at Sat Aug 22 00:05:07 2026 by rpki-client