$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/3EF53D4AAC4A11F199EB65634211F970.roa File: 3EF53D4AAC4A11F199EB65634211F970.roa (raw, json) Hash identifier: FSEebEPFVWkVjoqVliVL4Vc0nC/1o7SgkRxMZgCnPtM= Subject key identifier: 15:55:05:D3:31:F4:5E:DC:77:58:7C:09:55:FC:4F:FF:0D:80:F1:45 Certificate issuer: /CN=A9110DC8/serialNumber=C9001409B924733A4EDF015A52DCD413CC49B850 Certificate serial: 10 Authority key identifier: C9:00:14:09:B9:24:73:3A:4E:DF:01:5A:52:DC:D4:13:CC:49:B8:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/3EF53D4AAC4A11F199EB65634211F970.roa Signing time: Wed 09 Sep 2026 12:30:31 +0000 ROA not before: Wed 09 Sep 2026 12:30:31 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 154173 IP address blocks: 2001:df7:54c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.crl rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DC8, serialNumber=C9001409B924733A4EDF015A52DCD413CC49B850 Validity Not Before: Sep 9 12:30:31 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa15167-6f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:18:02:ed:9d:c2:83:88:29:1c:7d:b4:29: 86:6d:03:2f:7b:9e:a8:36:e2:8b:22:ab:bf:8a:d1: 8d:be:13:ca:fb:dd:e6:29:b1:72:c4:1b:4d:79:59: 6b:07:06:59:5b:78:3b:1f:10:e5:1d:bb:82:37:f5: e3:58:2e:d8:2a:e8:d1:4b:72:9a:42:37:8d:89:35: fd:4b:68:08:e3:e5:55:1f:ce:bb:a1:1b:b0:2b:f3: 70:72:0d:32:55:42:80:7e:3f:9e:0e:32:65:02:99: ca:6e:f0:73:6b:d7:10:b1:cd:34:fb:fb:24:61:6c: 37:d5:61:41:b9:7e:b2:47:d8:63:5c:14:d1:9b:48: 3d:55:b6:02:fe:6c:7b:5c:31:f0:f8:d1:f3:ff:70: 23:ae:05:d4:7f:34:50:f1:b5:5b:bb:ba:3f:47:9b: 42:97:31:47:56:41:e3:b1:c5:1a:15:db:c7:aa:c5: 4c:2e:ee:0d:73:93:da:09:87:77:b9:50:50:37:7e: 15:fa:94:7d:45:38:e1:09:81:97:f9:fb:e9:e0:aa: b5:24:7f:cb:97:ec:8e:fc:11:ff:83:65:d0:56:c6: 9c:03:4b:c9:96:63:77:3b:db:ae:53:0a:2a:99:ab: 87:dc:d0:79:fa:68:f3:d1:28:f5:bc:f2:ec:9e:ad: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:55:05:D3:31:F4:5E:DC:77:58:7C:09:55:FC:4F:FF:0D:80:F1:45 X509v3 Authority Key Identifier: keyid:C9:00:14:09:B9:24:73:3A:4E:DF:01:5A:52:DC:D4:13:CC:49:B8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/3EF53D4AAC4A11F199EB65634211F970.roa sbgp-ipAddrBlock: critical IPv6: 2001:df7:54c0::/48 Signature Algorithm: sha256WithRSAEncryption 57:13:b6:76:fe:fe:3f:2a:1f:3a:30:a3:15:e7:a5:56:67:84: e1:17:5f:f1:b0:38:c0:05:dc:05:d2:e7:b7:b5:f5:94:5a:59: 30:2c:b6:66:9a:9c:b9:46:9b:61:8f:83:6c:6a:be:50:7f:cb: 2a:b7:0e:ef:b7:df:ec:5d:84:f7:4e:d6:98:d5:5b:14:77:cd: f6:1d:89:ff:7b:3d:0f:1c:3e:a3:3c:40:2c:23:18:54:0c:84: 3a:64:e0:e2:6f:be:09:61:99:35:fe:bf:f2:78:99:93:ce:b8: cb:fe:49:a3:84:d0:8d:c9:78:ef:16:27:92:aa:5d:6d:62:0f: 7c:8d:6e:17:76:12:ae:8f:ea:83:08:9f:02:97:34:64:f9:ee: 8b:48:90:4b:41:9a:ed:06:e6:0d:19:be:28:43:e2:ea:b3:f0: 44:c1:c4:32:e2:1a:75:b4:44:21:23:22:c6:62:b6:7c:46:97: b7:e9:57:53:7e:39:fe:02:ab:38:0e:b5:6a:04:5c:1f:8b:2d: ac:36:d5:c2:59:4f:f9:eb:ad:98:ec:76:34:14:51:5f:64:f5: 08:8a:7f:aa:48:68:1f:08:f2:5a:b6:7d:73:5f:84:7b:60:06: dc:53:d3:01:29:56:a9:7c:4e:01:9f:39:39:12:cd:ea:cc:9c: 30:d2:c9:0d -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MERDODExMC8GA1UEBRMoQzkwMDE0MDlCOTI0NzMzQTRFREYwMTVBNTJEQ0Q0MTND QzQ5Qjg1MDAeFw0yNjA5MDkxMjMwMzFaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTE1MTY3LTZmNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEyRgC7Z3Cg4gpHH20KYZtAy97nqg24osiq7+K0Y2+E8r73eYpsXLEG015WWsH BllbeDsfEOUdu4I39eNYLtgq6NFLcppCN42JNf1LaAjj5VUfzruhG7Ar83ByDTJV QoB+P54OMmUCmcpu8HNr1xCxzTT7+yRhbDfVYUG5frJH2GNcFNGbSD1VtgL+bHtc MfD40fP/cCOuBdR/NFDxtVu7uj9Hm0KXMUdWQeOxxRoV28eqxUwu7g1zk9oJh3e5 UFA3fhX6lH1FOOEJgZf5++ngqrUkf8uX7I78Ef+DZdBWxpwDS8mWY3c7265TCiqZ q4fc0Hn6aPPRKPW88uyerYcLAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUFVUF0zH0 Xtx3WHwJVfxP/w2A8UUwHwYDVR0jBBgwFoAUyQAUCbkkczpO3wFaUtzUE8xJuFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwREM4LzQ3QTk0QkE4OUMw NDExRjE4QkM0RDMwMDZCMTFGOTcwL3lRQVVDYmtrY3pwTzN3RmFVdHpVRTh4SnVG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVFBVUNia2tjenBPM3dGYVV0elVFOHhKdUZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERDOC80N0E5NEJBODlDMDQxMUYxOEJDNEQzMDA2QjExRjk3MC8zRUY1M0Q0QUFD NEExMUYxOTlFQjY1NjM0MjExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ33VMAwDQYJKoZIhvcNAQELBQADggEBAFcTtnb+/j8qHzowoxXn pVZnhOEXX/GwOMAF3AXS57e19ZRaWTAstmaanLlGm2GPg2xqvlB/yyq3Du+33+xd hPdO1pjVWxR3zfYdif97PQ8cPqM8QCwjGFQMhDpk4OJvvglhmTX+v/J4mZPOuMv+ SaOE0I3JeO8WJ5KqXW1iD3yNbhd2Eq6P6oMInwKXNGT57otIkEtBmu0G5g0ZvihD 4uqz8ETBxDLiGnW0RCEjIsZitnxGl7fpV1N+Of4CqzgOtWoEXB+LLaw21cJZT/nr rZjsdjQUUV9k9QiKf6pIaB8I8lq2fXNfhHtgBtxT0wEpVql8TgGfOTkSzerMnDDS yQ0= -----END CERTIFICATE-----Generated at Wed Sep 23 18:22:39 2026 by rpki-client