$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa File: 3D34A750A88111ED80831318C4F9AE02.roa (raw, json) Hash identifier: bfzeYGUzhmju4UBpRVlco+BnDmJ+eLaB1Aqj15egdaw= Subject key identifier: A8:5E:0F:93:D1:BE:AF:EA:5D:3A:D5:63:EB:73:EB:AC:BC:60:11:64 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 03B8 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:09:40 +0000 ROA not before: Sat 09 Aug 2025 02:39:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 60445 IP address blocks: 2400:9ce0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 00:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Aug 9 02:39:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a51b94-c01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:4f:ed:19:f9:15:3d:2f:29:49:8d:c1:90: f5:2c:10:06:14:0d:f4:b3:49:7c:bb:cf:48:a6:d0: ac:7c:ff:6b:58:e6:d4:11:ec:11:f5:44:79:b1:9e: 76:50:6b:0b:71:c1:18:9c:ae:d8:4d:19:49:8b:c3: ee:32:ca:ab:b3:1a:cc:e4:0a:46:d7:c8:2e:72:ab: c5:71:d6:78:22:32:08:db:4b:b4:53:49:14:3f:b9: 0e:d9:ac:86:c1:61:56:b9:81:37:0b:18:44:9e:9c: db:af:ff:0f:3f:0b:56:6a:ac:63:3e:99:e1:6b:bc: 73:33:98:df:a0:6a:a5:32:e5:ef:ac:8e:2c:c9:4a: c0:5a:73:91:0f:d7:46:f4:1b:ca:3c:fb:d7:c6:f0: 80:00:89:4a:75:73:e6:19:c8:47:e5:db:34:9a:36: 5b:92:3f:cb:91:ed:a9:1a:37:2e:6c:d9:d1:95:a0: fe:a9:0a:7c:f8:01:60:5f:35:49:3b:11:69:7e:6b: 08:65:8a:8b:55:3b:3f:8f:9f:eb:df:63:06:08:6b: 80:ad:59:64:c9:0d:d6:17:b1:7a:ad:fe:23:33:f2: bf:79:a6:2f:25:22:30:2b:d8:27:b8:17:1d:b7:20: 89:f3:08:8c:4b:42:bd:56:14:26:55:e6:4b:5e:67: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:0F:93:D1:BE:AF:EA:5D:3A:D5:63:EB:73:EB:AC:BC:60:11:64 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:9ce0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 16:9d:66:c7:bb:f5:64:ed:e8:57:04:8b:20:ce:f6:65:98:85: 1e:b2:73:26:f6:3e:41:50:2e:e1:eb:71:1b:da:c6:f7:6e:f6: eb:94:b5:eb:99:5b:7d:54:af:0c:51:db:cd:87:26:16:be:55: ac:31:e7:71:75:8b:51:44:3c:41:5e:cd:cb:13:73:e9:c0:2a: d8:1f:6c:cd:b2:7a:fc:66:ec:8d:a4:6e:74:8b:c6:de:17:fb: f8:65:7d:64:23:33:5d:30:37:16:48:1a:1c:e8:86:57:11:2b: 5b:1e:2b:51:65:03:36:9a:c0:58:c8:c9:6e:f6:be:b8:2d:42: a1:4e:8a:97:42:b2:07:45:08:a8:8a:9d:38:5d:da:5a:77:0d: d9:a6:d6:78:dc:47:4d:f5:ba:a6:f6:f7:91:d9:39:a7:0a:2f: db:2d:75:ec:63:ad:12:a9:21:de:0f:f5:5e:76:82:0a:f0:05: d6:a4:d5:88:d5:fd:2e:27:cd:4e:ba:c1:7d:e4:21:7d:78:e9: 4e:63:ac:b7:27:c7:b1:a4:f9:05:a2:ed:38:29:fe:45:b8:77: 1e:79:81:35:f7:e1:14:fc:73:e7:21:21:62:b6:c2:0d:3c:f6: 00:17:0b:c1:cd:67:0d:5c:39:ed:ba:7f:27:04:d0:9c:a1:9d: cc:27:95:72 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwODA5MDIzOTI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWI5NC1jMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqStP7Rn5FT0vKUmNwZD1LBAGFA30s0l8u89IptCsfP9rWObUEewR9UR5sZ52 UGsLccEYnK7YTRlJi8PuMsqrsxrM5ApG18gucqvFcdZ4IjII20u0U0kUP7kO2ayG wWFWuYE3CxhEnpzbr/8PPwtWaqxjPpnha7xzM5jfoGqlMuXvrI4syUrAWnORD9dG 9BvKPPvXxvCAAIlKdXPmGchH5ds0mjZbkj/Lke2pGjcubNnRlaD+qQp8+AFgXzVJ OxFpfmsIZYqLVTs/j5/r32MGCGuArVlkyQ3WF7F6rf4jM/K/eaYvJSIwK9gnuBcd tyCJ8wiMS0K9VhQmVeZLXmdPtwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFKheD5PR vq/qXTrVY+tz66y8YBFkMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JBQzUvNDcwQTYyMDQxNTMwMTFFREJBQTNEMDI3QzRGOUFFMDIvM0QzNEE3NTBB ODgxMTFFRDgwODMxMzE4QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJACc4EAwDQYJKoZIhvcNAQELBQADggEBABadZse79WTt6FcEiyDO 9mWYhR6ycyb2PkFQLuHrcRvaxvdu9uuUteuZW31UrwxR282HJha+Vawx53F1i1FE PEFezcsTc+nAKtgfbM2yevxm7I2kbnSLxt4X+/hlfWQjM10wNxZIGhzohlcRK1se K1FlAzaawFjIyW72vrgtQqFOipdCsgdFCKiKnThd2lp3Ddmm1njcR031uqb295HZ OacKL9stdexjrRKpId4P9V52ggrwBdak1YjV/S4nzU66wX3kIX146U5jrLcnx7Gk +QWi7Tgp/kW4dx55gTX34RT8c+chIWK2wg089gAXC8HNZw1cOe26fycE0Jyhncwn lXI= -----END CERTIFICATE-----Generated at Thu Mar 12 18:21:04 2026 by rpki-client