$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/86656B28AB4611F19C0E979A7111F970.roa File: 86656B28AB4611F19C0E979A7111F970.roa (raw, json) Hash identifier: BzGaeJIXXko6guFlWp6+OZOjNO6jvG5AMimk+3YukgI= Subject key identifier: 07:CA:FA:FF:4C:93:64:75:8F:78:C1:27:4A:32:F6:19:56:BF:EE:3A Certificate issuer: /CN=A916B5CE/serialNumber=03481D151DC2EC763C47F2DB6B7F19BED28801DD Certificate serial: 02 Authority key identifier: 03:48:1D:15:1D:C2:EC:76:3C:47:F2:DB:6B:7F:19:BE:D2:88:01:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/86656B28AB4611F19C0E979A7111F970.roa Signing time: Tue 08 Sep 2026 05:31:22 +0000 ROA not before: Tue 08 Sep 2026 05:31:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9498 IP address blocks: 2001:df3:4a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.crl rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B5CE, serialNumber=03481D151DC2EC763C47F2DB6B7F19BED28801DD Validity Not Before: Sep 8 05:31:22 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a9f9da9-cb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:e8:f4:a7:9f:dc:eb:16:0e:1e:c6:90:20: 50:fc:59:df:9c:c0:35:0e:dd:fa:aa:5f:48:ba:ed: 93:c7:da:b3:90:ad:5c:3f:0d:b5:e4:2b:7e:10:9a: a6:32:89:25:74:5c:b6:53:0f:5f:78:3c:df:98:0e: c8:db:30:b8:ba:da:4f:73:b5:85:62:bc:c3:2f:3b: 52:fb:7a:7c:fd:53:a9:9d:6c:51:f9:52:15:12:8e: 0f:af:98:8e:24:6f:5d:d5:e1:54:fe:ad:d9:87:d0: 44:92:c2:2f:59:bb:e5:1b:81:20:92:01:fa:05:a8: 40:7b:6d:39:3f:7c:1e:11:a0:36:50:c9:59:4c:8b: 26:ed:d9:7e:52:0d:6f:e2:c3:98:8b:b0:ce:b1:48: f4:cb:17:48:55:26:d1:11:f9:90:00:b2:d8:49:a3: 04:d9:46:99:02:85:a8:be:dc:d3:9b:32:67:7c:14: 45:09:e2:e2:eb:0f:52:05:11:ae:23:64:ca:a6:c4: ab:d4:25:88:b9:3f:ea:9d:fe:45:16:ba:ae:6c:72: b2:45:c0:b8:ba:55:ef:51:ae:71:cb:9b:26:c0:7b: 93:0f:b0:5a:97:d3:0b:8c:e7:38:8a:17:81:c1:c4: 1f:9f:4a:f1:ed:00:a1:22:a0:b6:c4:2e:44:86:ae: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CA:FA:FF:4C:93:64:75:8F:78:C1:27:4A:32:F6:19:56:BF:EE:3A X509v3 Authority Key Identifier: keyid:03:48:1D:15:1D:C2:EC:76:3C:47:F2:DB:6B:7F:19:BE:D2:88:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/A0gdFR3C7HY8R_Lba38ZvtKIAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0gdFR3C7HY8R_Lba38ZvtKIAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B5CE/633AE306AB4311F183533DDD7011F970/86656B28AB4611F19C0E979A7111F970.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:4a40::/48 Signature Algorithm: sha256WithRSAEncryption ef:3f:67:ab:17:73:24:37:44:66:d7:cd:70:0d:ec:7b:55:35: b6:bd:9d:1f:f4:49:7e:fb:33:67:84:99:6e:f8:b9:0d:00:fe: aa:d2:63:69:c1:45:b6:3d:e0:25:24:2e:51:fa:fe:9c:8c:f2: 34:0a:5d:61:2e:1b:df:af:c0:a9:0a:cc:40:16:1a:ab:e0:2f: 1d:3c:90:82:92:14:bc:e5:4e:45:27:b9:b7:6e:31:d8:69:fa: c9:3a:e1:7e:1c:1c:70:38:2e:de:a0:0c:2c:4e:49:d0:fa:cc: 34:82:7c:ef:2a:0f:cb:69:76:34:49:52:0a:6c:7f:75:33:5e: ba:52:b1:18:f9:56:78:b5:bb:c8:5f:43:c3:ea:51:07:11:99: f0:a8:87:fa:46:4b:82:bb:1d:ad:77:42:86:4f:6b:cc:76:d2: 7c:74:5d:b7:08:ec:d2:06:ee:39:25:e3:ce:c0:e3:70:3c:30: ac:81:0b:6f:3a:32:d2:4b:07:66:d7:d9:62:6c:09:45:b3:2a: 4a:47:5b:08:35:70:b3:cc:d5:7f:07:3f:e1:0b:d2:bc:ef:55: 21:41:15:f4:c5:cc:0f:c6:eb:c9:7b:96:f5:bf:2f:12:2a:31: ee:6a:84:91:e3:90:9a:ec:33:71:1e:75:86:c6:cb:5d:60:34: a7:3d:b9:60 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjVDRTExMC8GA1UEBRMoMDM0ODFEMTUxREMyRUM3NjNDNDdGMkRCNkI3RjE5QkVE Mjg4MDFERDAeFw0yNjA5MDgwNTMxMjJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWY5ZGE5LWNiMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoE+j0p5/c6xYOHsaQIFD8Wd+cwDUO3fqqX0i67ZPH2rOQrVw/DbXkK34QmqYy iSV0XLZTD194PN+YDsjbMLi62k9ztYVivMMvO1L7enz9U6mdbFH5UhUSjg+vmI4k b13V4VT+rdmH0ESSwi9Zu+UbgSCSAfoFqEB7bTk/fB4RoDZQyVlMiybt2X5SDW/i w5iLsM6xSPTLF0hVJtER+ZAAsthJowTZRpkChai+3NObMmd8FEUJ4uLrD1IFEa4j ZMqmxKvUJYi5P+qd/kUWuq5scrJFwLi6Ve9RrnHLmybAe5MPsFqX0wuM5ziKF4HB xB+fSvHtAKEioLbELkSGruy5AgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUB8r6/0yT ZHWPeMEnSjL2GVa/7jowHwYDVR0jBBgwFoAUA0gdFR3C7HY8R/Lba38ZvtKIAd0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNUNFLzYzM0FFMzA2QUI0 MzExRjE4MzUzM0RERDcwMTFGOTcwL0EwZ2RGUjNDN0hZOFJfTGJhMzhadnRLSUFk MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTBnZEZSM0M3SFk4Ul9MYmEzOFp2dEtJQWQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjVDRS82MzNBRTMwNkFCNDMxMUYxODM1MzNEREQ3MDExRjk3MC84NjY1NkIyOEFC NDYxMUYxOUMwRTk3OUE3MTExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ3zSkAwDQYJKoZIhvcNAQELBQADggEBAO8/Z6sXcyQ3RGbXzXAN 7HtVNba9nR/0SX77M2eEmW74uQ0A/qrSY2nBRbY94CUkLlH6/pyM8jQKXWEuG9+v wKkKzEAWGqvgLx08kIKSFLzlTkUnubduMdhp+sk64X4cHHA4Lt6gDCxOSdD6zDSC fO8qD8tpdjRJUgpsf3UzXrpSsRj5Vni1u8hfQ8PqUQcRmfCoh/pGS4K7Ha13QoZP a8x20nx0XbcI7NIG7jkl487A43A8MKyBC286MtJLB2bX2WJsCUWzKkpHWwg1cLPM 1X8HP+EL0rzvVSFBFfTFzA/G68l7lvW/LxIqMe5qhJHjkJrsM3EedYbGy11gNKc9 uWA= -----END CERTIFICATE-----Generated at Fri Sep 11 14:23:09 2026 by rpki-client