$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/BC60BC2A63F711EA8CBEB029C4F9AE02.roa File: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (raw, json) Hash identifier: 9vdbZGWI4WbWk19ZKHaxpuc4iKT7cExMtnmI4PUcPIo= Subject key identifier: 81:3A:F4:86:3B:18:DD:B4:E3:28:31:70:B9:E4:64:8A:9A:50:CC:19 Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Certificate serial: 0C27 Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/BC60BC2A63F711EA8CBEB029C4F9AE02.roa Signing time: Sat 26 Sep 2026 19:38:38 +0000 ROA not before: Sat 26 Sep 2026 19:38:38 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 0 IP address blocks: 2001:7fa:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 18:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Validity Not Before: Sep 26 19:38:38 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab81f3e-c0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:8e:1d:8a:56:ae:68:0b:6b:87:f6:02:71: 71:cb:7f:46:a7:5e:f7:61:e2:d0:30:45:ca:92:a8: 18:a3:1e:ab:7b:05:5f:17:e5:42:6b:59:f0:c8:9e: 08:56:f9:1c:ec:d1:c8:05:a6:a6:0d:3b:f3:ce:f7: 9b:fa:dc:34:80:c3:dc:72:17:d8:78:e1:49:0e:1c: 6c:70:8a:27:66:cd:a2:ed:04:10:57:ce:81:30:c5: d6:1b:0d:94:2e:1d:d6:73:a6:5f:e5:bc:b0:d8:16: 7d:2e:16:ff:7c:00:b7:d1:d0:fd:81:a4:51:10:b9: e5:2f:9d:a3:21:58:0b:87:a6:8d:4f:0c:c1:7f:06: 2a:17:52:f5:56:98:40:d8:77:c0:ab:f4:91:6e:d6: be:51:c6:ff:15:5b:23:a5:46:41:94:72:78:ca:69: 8d:cd:fa:26:87:65:ba:9c:11:15:b4:59:7d:b7:1c: a4:18:15:a6:2c:9b:61:83:e2:a8:25:8e:7e:0d:a6: 2c:0d:70:08:10:33:07:8f:49:fc:15:aa:44:91:08: 55:48:0e:56:91:a0:42:4a:42:8f:fd:35:13:fa:f8: 39:9c:5a:31:65:47:95:10:0d:7c:cd:4e:c5:ec:0f: 91:1c:2d:32:b1:c7:3c:f9:67:4a:c1:02:a7:03:d3: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3A:F4:86:3B:18:DD:B4:E3:28:31:70:B9:E4:64:8A:9A:50:CC:19 X509v3 Authority Key Identifier: keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/BC60BC2A63F711EA8CBEB029C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:7fa:11::/48 Signature Algorithm: sha256WithRSAEncryption ba:2d:c2:90:69:67:97:7b:de:ba:2e:43:2e:e2:20:aa:0e:8e: 6b:29:5a:8f:2a:f6:e1:9f:ee:31:a1:b4:8b:46:b0:22:38:5a: 44:dc:34:05:ae:f9:ac:5c:a6:79:47:b0:84:ee:d5:f5:8e:e4: dc:6c:bc:63:90:66:78:7a:b3:90:5e:b2:93:69:e7:48:66:35: 89:f4:01:71:99:d9:3f:7e:be:15:4d:5b:95:71:67:9d:7e:03: 70:f6:0c:c1:5b:9a:42:03:d8:39:c7:cb:42:a9:ab:41:1e:15: f5:0c:07:17:96:9f:72:1c:62:5e:2d:28:e2:91:26:9b:4b:89: 00:6e:2c:77:12:71:0f:0d:95:11:ab:bd:2e:2d:37:39:ce:f4: eb:8e:7a:cc:e3:02:da:39:ac:d4:d8:12:f3:af:56:30:24:01: 9b:0e:76:a7:4f:81:62:67:30:ce:70:ab:f8:49:27:84:fb:ea: d3:6b:b3:a5:5e:94:40:18:08:7c:dd:3b:17:7e:33:61:0e:c9: 85:e7:54:d0:d4:70:11:a7:8e:7d:e5:d7:ed:06:b9:9b:ff:58: ba:66:4e:ae:55:55:3a:a4:bd:bb:46:45:17:30:91:7a:7e:25: 3f:9f:2c:24:82:74:da:0c:68:93:f9:2c:e6:74:f3:80:2f:50: 22:b7:31:cf -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw QzM2RUQxOEUwHhcNMjYwOTI2MTkzODM4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4MWYzZS1jMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulOOHYpWrmgLa4f2AnFxy39Gp173YeLQMEXKkqgYox6rewVfF+VCa1nwyJ4I Vvkc7NHIBaamDTvzzveb+tw0gMPcchfYeOFJDhxscIonZs2i7QQQV86BMMXWGw2U Lh3Wc6Zf5byw2BZ9Lhb/fAC30dD9gaRRELnlL52jIVgLh6aNTwzBfwYqF1L1VphA 2HfAq/SRbta+Ucb/FVsjpUZBlHJ4ymmNzfomh2W6nBEVtFl9txykGBWmLJthg+Ko JY5+DaYsDXAIEDMHj0n8FapEkQhVSA5WkaBCSkKP/TUT+vg5nFoxZUeVEA18zU7F 7A+RHC0yscc8+WdKwQKnA9OrgwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFIE69IY7 GN204ygxcLnkZIqaUMwZMB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVGNTEvQkEzQ0Q0QTYzRDgyMTFFQTlGMjY3MzcwQzRGOUFFMDIvQkM2MEJDMkE2 M0Y3MTFFQThDQkVCMDI5QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEH+gARMA0GCSqGSIb3DQEBCwUAA4IBAQC6LcKQaWeXe966LkMu 4iCqDo5rKVqPKvbhn+4xobSLRrAiOFpE3DQFrvmsXKZ5R7CE7tX1juTcbLxjkGZ4 erOQXrKTaedIZjWJ9AFxmdk/fr4VTVuVcWedfgNw9gzBW5pCA9g5x8tCqatBHhX1 DAcXlp9yHGJeLSjikSabS4kAbix3EnEPDZURq70uLTc5zvTrjnrM4wLaOazU2BLz r1YwJAGbDnanT4FiZzDOcKv4SSeE++rTa7OlXpRAGAh83TsXfjNhDsmF51TQ1HAR p4595dftBrmb/1i6Zk6uVVU6pL27RkUXMJF6fiU/nywkgnTaDGiT+SzmdPOAL1Ai tzHP -----END CERTIFICATE-----Generated at Thu Oct 22 13:11:57 2026 by rpki-client