$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa File: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (raw, json) Hash identifier: QMsC3xiGNdSJW4HzT3eK1fAgUWFpi8CgaYI1dOuhzws= Subject key identifier: 67:A8:32:B2:BB:10:F8:E1:BA:AE:49:62:D4:C9:13:99:96:24:73:FE Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0D20 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa Signing time: Fri 14 Aug 2026 19:38:42 +0000 ROA not before: Fri 14 Aug 2026 19:38:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 394749 IP address blocks: 2407:b000:4015::/48 maxlen: 48 2407:b001:1010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3360 (0xd20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 14 19:38:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7f6ec2-7e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:68:be:59:72:bb:3b:8f:7c:24:7e:4d:8a: 6b:5d:b3:81:b2:dc:1d:64:42:36:11:4a:ee:52:05: 3e:24:47:3a:8d:d1:1a:99:20:5b:12:9f:12:40:f0: 5a:67:c7:09:79:56:c6:b2:70:be:90:0c:59:9e:3b: 1c:25:0a:b6:6b:80:67:00:9b:aa:a7:b8:d4:e5:77: ef:5b:a7:fa:0d:b5:2e:a3:19:92:be:30:b9:db:71: 7e:b9:af:41:3c:ab:b0:33:a6:e0:e2:2c:95:4b:02: bf:4a:f6:a4:06:b3:ee:ed:b3:7f:ea:d7:87:4a:26: 77:f6:38:c0:cd:de:ba:02:70:f9:5f:86:2b:16:58: a4:b7:e2:11:f9:79:ed:82:e1:d3:f4:e8:1b:63:df: 16:80:74:a2:db:cf:95:c3:54:44:94:64:ac:6d:62: 89:fd:8c:1b:a8:03:ba:ff:cb:67:06:5e:1b:a8:a3: a7:6d:0b:47:13:f5:d3:41:8b:8a:0f:38:51:be:8a: 36:c2:3d:e1:34:8d:41:fe:e6:94:6c:ed:80:f1:0f: 93:52:23:7c:36:1e:7f:66:da:17:a9:02:81:fa:7f: 86:0e:73:93:07:81:58:ba:a8:aa:64:96:31:29:60: 04:94:b8:b1:f3:85:04:ef:d7:d1:51:36:df:93:a2: d8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A8:32:B2:BB:10:F8:E1:BA:AE:49:62:D4:C9:13:99:96:24:73:FE X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:b000:4015::/48 2407:b001:1010::/48 Signature Algorithm: sha256WithRSAEncryption 5d:78:31:98:dc:04:00:d4:f4:96:ed:04:de:41:80:5d:2f:9b: a5:df:51:f6:ef:0a:de:65:20:40:17:cf:52:f5:c1:21:26:7a: 7b:2b:a0:32:bb:c6:07:e7:2e:7f:9d:36:81:af:3a:15:db:1f: 0e:14:eb:d8:ca:4c:b4:3d:83:ee:04:be:42:72:75:06:24:1e: 8e:36:48:b8:ff:a1:29:3d:de:05:c8:e0:96:fb:1c:d8:8a:31: 34:11:3d:ba:6c:b3:54:1f:55:38:19:f3:66:f0:68:27:09:91: 50:63:12:d1:89:6f:45:e6:1a:f1:08:51:3b:04:3b:79:46:ba: 83:6c:65:87:1b:0f:a9:f5:56:6d:02:1a:16:f9:7f:a8:60:66: e6:b6:32:f6:ab:eb:d6:74:4d:7b:bb:ab:a7:bf:a4:7e:a2:7b: a8:79:62:d0:67:ef:8f:07:6f:ff:cf:fd:c8:b9:77:5e:6c:13: 56:82:73:03:01:53:b1:56:8a:dd:af:a0:51:c6:26:fa:88:2c: ad:7d:da:53:e7:40:81:dd:93:58:44:28:c2:41:40:a4:bb:e3: cb:bb:8d:dc:38:a1:2e:b6:83:c9:41:5f:25:73:bc:df:71:5e: c1:fa:5b:f4:63:cd:e1:7d:2c:18:3e:8f:97:ac:83:22:8b:02: 56:67:19:d8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjYwODE0MTkzODQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmNmVjMi03ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugVovllyuzuPfCR+TYprXbOBstwdZEI2EUruUgU+JEc6jdEamSBbEp8SQPBa Z8cJeVbGsnC+kAxZnjscJQq2a4BnAJuqp7jU5XfvW6f6DbUuoxmSvjC523F+ua9B PKuwM6bg4iyVSwK/SvakBrPu7bN/6teHSiZ39jjAzd66AnD5X4YrFlikt+IR+Xnt guHT9OgbY98WgHSi28+Vw1RElGSsbWKJ/YwbqAO6/8tnBl4bqKOnbQtHE/XTQYuK DzhRvoo2wj3hNI1B/uaUbO2A8Q+TUiN8Nh5/ZtoXqQKB+n+GDnOTB4FYuqiqZJYx KWAElLix84UE79fRUTbfk6LYUwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGeoMrK7 EPjhuq5JYtTJE5mWJHP+MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvOTU4Q0M4REEx QzI2MTFFQ0I0MTZBQTY4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAJAewAEAVAwcAJAewARAQMA0GCSqGSIb3DQEBCwUAA4IBAQBdeDGY 3AQA1PSW7QTeQYBdL5ul31H27wreZSBAF89S9cEhJnp7K6Ayu8YH5y5/nTaBrzoV 2x8OFOvYyky0PYPuBL5CcnUGJB6ONki4/6EpPd4FyOCW+xzYijE0ET26bLNUH1U4 GfNm8GgnCZFQYxLRiW9F5hrxCFE7BDt5RrqDbGWHGw+p9VZtAhoW+X+oYGbmtjL2 q+vWdE17u6unv6R+onuoeWLQZ++PB2//z/3IuXdebBNWgnMDAVOxVordr6BRxib6 iCytfdpT50CB3ZNYRCjCQUCku+PLu43cOKEutoPJQV8lc7zfcV7B+lv0Y83hfSwY Po+XrIMiiwJWZxnY -----END CERTIFICATE-----Generated at Fri Aug 21 23:09:26 2026 by rpki-client