$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/B283BDAACF7C11F084EB1044C4F9AE02.roa File: B283BDAACF7C11F084EB1044C4F9AE02.roa (raw, json) Hash identifier: fy6KJJinUjEIeyPO+1TR8lYQCArU8HR7M9VaLs/mSNQ= Subject key identifier: 0E:7D:02:CA:D2:7F:58:8B:09:7F:EF:1A:6F:B4:BB:DD:06:9D:1F:2A Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 0536 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/B283BDAACF7C11F084EB1044C4F9AE02.roa Signing time: Tue 13 Oct 2026 00:48:14 +0000 ROA not before: Tue 13 Oct 2026 00:48:14 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 141039 IP address blocks: 2407:e8c0:10::/48 maxlen: 48 2407:e8c0:14::/48 maxlen: 48 2407:e8c0:15::/48 maxlen: 48 2407:e8c0:16::/48 maxlen: 48 2407:e8c0:17::/48 maxlen: 48 2407:e8c0:18::/48 maxlen: 48 2407:e8c0:19::/48 maxlen: 48 2407:e8c0:1a::/48 maxlen: 48 2407:e8c0:1b::/48 maxlen: 48 2407:e8c0:1c::/48 maxlen: 48 2407:e8c0:1d::/48 maxlen: 48 2407:e8c0:1e::/48 maxlen: 48 2407:e8c0:4000::/40 maxlen: 40 2407:e8c0:4100::/40 maxlen: 40 2407:e8c0:4200::/40 maxlen: 40 2407:e8c0:4300::/40 maxlen: 40 2407:e8c0:4400::/40 maxlen: 40 2407:e8c0:4500::/40 maxlen: 40 2407:e8c0:4600::/40 maxlen: 40 2407:e8c0:4700::/40 maxlen: 40 2407:e8c0:4800::/40 maxlen: 40 2407:e8c0:4900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: Oct 13 00:48:14 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acd7fce-a9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:fb:76:9f:ce:66:49:fb:48:0f:8b:fc:d2: bf:31:a3:cd:be:dc:c1:db:11:b8:a4:6d:db:35:6e: 80:a6:26:94:9a:e8:07:71:5d:04:9b:a1:dd:3d:0f: ac:16:1b:95:2e:ed:8c:a9:01:7f:86:29:de:11:0e: 14:aa:11:92:dc:3e:80:13:8c:72:ab:84:7f:c3:90: ac:51:be:19:cc:77:60:53:77:61:20:b7:c8:34:3e: 35:26:6c:75:ec:6f:ec:b5:bf:3d:94:8c:f7:1a:6a: 17:90:63:54:6a:d9:93:dc:35:e5:6c:42:d1:07:27: ce:ee:e3:55:94:cf:a8:64:6b:c9:6e:67:44:61:f2: f2:c8:62:29:8e:84:7e:a1:b3:ee:90:e3:43:0b:a7: 1c:0e:a6:b5:2f:2a:87:ac:c8:de:b5:6f:a3:e0:81: 81:83:4c:26:b5:ee:b7:89:81:dd:66:b8:68:34:a0: fc:20:0f:a1:6c:65:8e:e7:3c:b5:0f:3a:de:80:6b: 70:40:db:c6:68:d2:95:1c:14:11:40:70:5c:6e:74: b1:47:06:8b:c7:76:d3:81:d9:ee:06:6a:a8:68:a6: 94:7b:10:2c:cd:5d:41:0b:21:e1:59:cb:d3:f2:cf: bd:7d:ca:db:6f:86:05:18:40:ff:40:4c:e4:11:1d: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:02:CA:D2:7F:58:8B:09:7F:EF:1A:6F:B4:BB:DD:06:9D:1F:2A X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/B283BDAACF7C11F084EB1044C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:e8c0:10::/48 2407:e8c0:14::-2407:e8c0:1e:ffff:ffff:ffff:ffff:ffff 2407:e8c0:4000::-2407:e8c0:49ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 78:d7:9d:34:24:20:59:50:9d:45:d4:cf:76:86:9e:97:50:59: 0a:fb:a3:72:ed:41:3d:86:93:03:6f:71:92:d1:ed:ec:25:33: 4d:88:c1:14:d0:d8:24:9c:09:3d:5b:13:53:cb:ad:51:5e:31: b1:8e:a7:11:26:37:7a:92:ba:b8:22:d9:8b:04:60:c9:21:c5: e3:0a:e7:06:7e:95:4c:b3:14:69:36:be:2b:8d:47:ea:23:15: d1:89:29:15:5f:e3:47:80:a7:fa:ff:cd:cb:b4:dd:2b:00:ee: 1c:e7:06:14:df:70:4c:a6:1a:ef:e4:d4:f3:45:5b:5c:fe:53: 14:50:d7:f7:99:02:06:b3:45:eb:8a:e8:4e:3b:8e:b2:f7:40: 5a:76:8c:62:7d:24:d3:4c:12:e7:59:94:46:a4:16:3d:27:64: 8a:54:6d:8c:34:30:75:79:93:59:8e:5c:31:3f:6f:af:17:a1: d5:72:b1:34:eb:b1:9b:4f:48:b7:16:82:fd:59:9b:45:76:c9: 07:0d:01:d0:dd:ee:f1:83:8d:d5:b7:3f:cd:4f:24:21:75:71: 57:13:05:f0:fc:be:27:36:10:4d:9e:50:1f:46:36:d9:ea:0c: de:b3:d5:b4:8b:84:99:21:7a:94:5d:a8:27:d3:f5:64:91:9a: 49:4f:26:73 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjYxMDEzMDA0ODE0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkN2ZjZS1hOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwr7dp/OZkn7SA+L/NK/MaPNvtzB2xG4pG3bNW6ApiaUmugHcV0Em6HdPQ+s FhuVLu2MqQF/hineEQ4UqhGS3D6AE4xyq4R/w5CsUb4ZzHdgU3dhILfIND41Jmx1 7G/stb89lIz3GmoXkGNUatmT3DXlbELRByfO7uNVlM+oZGvJbmdEYfLyyGIpjoR+ obPukONDC6ccDqa1LyqHrMjetW+j4IGBg0wmte63iYHdZrhoNKD8IA+hbGWO5zy1 DzregGtwQNvGaNKVHBQRQHBcbnSxRwaLx3bTgdnuBmqoaKaUexAszV1BCyHhWcvT 8s+9fcrbb4YFGED/QEzkER1jNwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFA59AsrS f1iLCX/vGm+0u90GnR8qMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjJFRTEvNzUyRDQyRTg4RkQyMTFFQzk0OEE5MzdFQzRGOUFFMDIvQjI4M0JEQUFD RjdDMTFGMDg0RUIxMDQ0QzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzA1 BAIAAjAvAwcAJAfowAAQMBIDBwIkB+jAABQDBwAkB+jAAB4wEAMGBiQH6MBAAwYB JAfowEgwDQYJKoZIhvcNAQELBQADggEBAHjXnTQkIFlQnUXUz3aGnpdQWQr7o3Lt QT2GkwNvcZLR7ewlM02IwRTQ2CScCT1bE1PLrVFeMbGOpxEmN3qSurgi2YsEYMkh xeMK5wZ+lUyzFGk2viuNR+ojFdGJKRVf40eAp/r/zcu03SsA7hznBhTfcEymGu/k 1PNFW1z+UxRQ1/eZAgazReuK6E47jrL3QFp2jGJ9JNNMEudZlEakFj0nZIpUbYw0 MHV5k1mOXDE/b68XodVysTTrsZtPSLcWgv1Zm0V2yQcNAdDd7vGDjdW3P81PJCF1 cVcTBfD8vic2EE2eUB9GNtnqDN6z1bSLhJkhepRdqCfT9WSRmklPJnM= -----END CERTIFICATE-----Generated at Wed Oct 28 18:44:58 2026 by rpki-client