$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D1560E01C6411F1B68A335785EE528E.roa File: 6D1560E01C6411F1B68A335785EE528E.roa (raw, json) Hash identifier: BYU5FIyktvv26Nz2Rm1eQhqdMYLLaex730hzv42dZLo= Subject key identifier: F7:4F:36:0A:F6:DF:FB:15:DD:4F:2C:73:6D:06:31:28:31:6E:51:35 Certificate issuer: /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7 Certificate serial: 05 Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D1560E01C6411F1B68A335785EE528E.roa Signing time: Tue 10 Mar 2026 09:35:08 +0000 ROA not before: Tue 10 Mar 2026 09:35:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151338 IP address blocks: 2407:d840:20::/48 maxlen: 48 2407:d840:21::/48 maxlen: 48 2407:d840:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 22:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7 Validity Not Before: Mar 10 09:35:08 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69afe5cc-ee88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:e2:a3:e0:6d:5e:f1:e2:8a:e0:50:ff:85: aa:21:5a:da:4b:79:1b:c4:30:db:f3:48:60:99:a4: 40:93:34:f3:e1:46:84:e9:db:53:e9:39:3d:37:de: d7:52:4c:d4:42:39:89:6b:7f:c0:2c:44:c9:11:2e: 57:4b:15:ac:97:3b:a1:97:a1:a2:2a:0b:34:53:62: 8b:d4:cd:29:0a:31:4d:34:88:c8:ba:57:73:79:be: 89:2b:4e:4e:20:ea:00:9b:8c:30:e3:5f:ce:26:f0: dc:2b:90:e2:aa:58:31:38:78:b9:3a:05:3d:c0:dc: 84:7d:96:0a:d7:1a:a0:a2:68:e2:75:ee:1a:8f:44: fb:46:7b:55:0d:d5:37:68:8d:be:2f:f8:82:d3:0e: 5c:f6:7f:b3:41:cd:21:eb:2f:6d:58:ef:7b:a7:92: 3a:9d:3b:24:42:11:7f:aa:bc:de:00:57:e6:13:33: 3a:39:f1:88:23:a2:f2:3e:3e:f1:72:ee:50:8a:0d: 4d:ac:01:37:0d:7c:6f:3d:32:2e:49:d5:e3:33:4b: d8:9d:cb:61:66:ae:8d:1e:21:55:87:73:71:3e:92: df:16:73:97:c2:07:0d:ee:72:b7:31:e5:99:fd:47: e5:19:dc:15:28:7b:11:7e:c1:14:09:c8:f1:2d:3e: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4F:36:0A:F6:DF:FB:15:DD:4F:2C:73:6D:06:31:28:31:6E:51:35 X509v3 Authority Key Identifier: keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D1560E01C6411F1B68A335785EE528E.roa sbgp-ipAddrBlock: critical IPv6: 2407:d840:20::/47 2407:d840:200::/40 Signature Algorithm: sha256WithRSAEncryption 3f:df:1a:08:01:d7:f3:72:5f:b6:f8:4c:0a:c7:bd:22:7a:fe: 3f:82:8a:8d:13:44:18:a0:98:11:ea:b6:40:d4:a1:45:87:0f: c3:72:df:de:cd:60:a0:81:5b:64:b6:51:4b:6b:ba:c7:ea:95: f9:5f:2c:57:47:b0:d0:32:65:06:ad:9f:9b:e0:97:c7:de:72: c4:d3:8a:88:2a:88:34:8e:cd:48:11:c4:09:37:2e:90:e0:04: 3f:b9:23:7b:b6:57:93:4b:3b:4f:1e:f1:d7:3d:d8:1d:e3:b2: 1c:26:00:c8:01:ec:52:42:47:42:55:8b:43:6b:5f:92:48:fd: 1d:63:7f:ce:f7:6e:5b:91:c4:09:a7:0c:10:bb:81:8c:25:99: cc:95:ce:39:c4:a4:9b:7e:1e:d6:9c:fe:43:f0:59:de:5f:58: 63:26:c4:8f:11:31:da:0e:f0:8d:84:8a:e5:b7:b4:29:66:2f: 06:d2:98:08:b3:e4:8e:6a:8d:ca:69:de:b7:d5:40:5b:12:a9: 09:8b:8c:4f:1d:2e:87:e3:e3:2d:42:17:45:80:2f:29:71:ac: b6:58:1d:6d:54:4e:a4:cf:05:71:9e:f8:3f:e3:67:ca:66:ee: f6:71:13:21:42:9a:ca:e6:b6:86:cc:7d:95:67:ae:bb:8c:c2: ce:61:6f:bd -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjJFQzExMC8GA1UEBRMoQzkzNDM4RjdEQ0UxQURCM0ZGRTBFNTg4NTM2RkFBQjlF RkZGRUZENzAeFw0yNjAzMTAwOTM1MDhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YWZlNWNjLWVlODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfYuKj4G1e8eKK4FD/haohWtpLeRvEMNvzSGCZpECTNPPhRoTp21PpOT033tdS TNRCOYlrf8AsRMkRLldLFayXO6GXoaIqCzRTYovUzSkKMU00iMi6V3N5vokrTk4g 6gCbjDDjX84m8NwrkOKqWDE4eLk6BT3A3IR9lgrXGqCiaOJ17hqPRPtGe1UN1Tdo jb4v+ILTDlz2f7NBzSHrL21Y73unkjqdOyRCEX+qvN4AV+YTMzo58YgjovI+PvFy 7lCKDU2sATcNfG89Mi5J1eMzS9idy2Fmro0eIVWHc3E+kt8Wc5fCBw3ucrcx5Zn9 R+UZ3BUoexF+wRQJyPEtPqqDAgMBAAGjggJrMIICZzAdBgNVHQ4EFgQU9082Cvbf +xXdTyxzbQYxKDFuUTUwHwYDVR0jBBgwFoAUyTQ499zhrbP/4OWIU2+que//79cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMkVDLzg0Mjc1OTU2MkIw OTExRUM4NTFCOTgwRUM0RjlBRTAyL3lUUTQ5OXpocmJQXzRPV0lVMi1xdWVfXzc5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVRRNDk5emhyYlBfNE9XSVUyLXF1ZV9fNzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJFQy84NDI3NTk1NjJCMDkxMUVDODUxQjk4MEVDNEY5QUUwMi82RDE1NjBFMDFD NjQxMUYxQjY4QTMzNTc4NUVFNTI4RS5yb2EwKgYIKwYBBQUHAQcBAf8EGzAZMBcE AgACMBEDBwEkB9hAACADBgAkB9hAAjANBgkqhkiG9w0BAQsFAAOCAQEAP98aCAHX 83JftvhMCse9Inr+P4KKjRNEGKCYEeq2QNShRYcPw3Lf3s1goIFbZLZRS2u6x+qV +V8sV0ew0DJlBq2fm+CXx95yxNOKiCqINI7NSBHECTcukOAEP7kje7ZXk0s7Tx7x 1z3YHeOyHCYAyAHsUkJHQlWLQ2tfkkj9HWN/zvduW5HECacMELuBjCWZzJXOOcSk m34e1pz+Q/BZ3l9YYybEjxEx2g7wjYSK5be0KWYvBtKYCLPkjmqNymnet9VAWxKp CYuMTx0uh+PjLUIXRYAvKXGstlgdbVROpM8FcZ74P+Nnymbu9nETIUKayua2hsx9 lWeuu4zCzmFvvQ== -----END CERTIFICATE-----Generated at Wed Mar 11 18:39:03 2026 by rpki-client