$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa File: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (raw, json) Hash identifier: xKsH9gSwF7sZT+ZPXjEc1UEWzCTliKI2+RHmCgXSAzQ= Subject key identifier: E2:1C:80:63:6E:0B:4C:CA:F4:F4:36:E9:20:5B:89:34:DE:9C:72:C0 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2964 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:10:01 +0000 ROA not before: Sat 26 Jul 2025 15:54:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2402:9e80:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10596 (0x2964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a48f09-dc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:ad:9e:d8:12:a0:00:cd:18:66:9b:f1:05: 7b:84:d7:84:1c:aa:b1:ef:5b:96:d5:c1:49:c6:07: 16:75:41:97:9e:3e:07:b5:27:84:ef:67:57:1d:1d: 8b:25:aa:6a:74:b4:59:89:b3:6e:b3:04:e6:50:13: ff:5d:68:37:21:0d:d0:f7:8d:40:73:d0:5d:f9:6c: 3c:ea:31:fe:e1:22:ed:bd:7f:a9:cc:b3:d2:0b:fc: 94:b4:b0:58:1f:26:79:18:a8:50:31:86:b6:8e:48: 9e:46:82:e4:ee:85:1b:f7:10:11:78:29:58:eb:9f: f8:3b:76:cc:69:69:59:e3:a2:5b:6d:76:2b:0a:3d: 35:e1:0d:31:f4:18:c3:26:81:98:aa:cf:0e:17:b4: 31:46:28:51:19:48:c1:21:21:71:28:79:7a:5b:a6: 93:36:75:7d:b1:2c:48:5e:cd:d5:43:ea:ea:14:8d: fa:21:64:15:d9:98:ab:03:e9:df:dc:0c:23:23:11: 0c:90:3f:a9:93:ed:c2:0e:34:0c:ec:51:a2:9c:53: d0:f9:59:ee:5e:f6:30:0c:d7:a2:f4:18:1e:fc:23: e6:8b:15:8a:d3:aa:92:40:1d:e8:b5:b3:15:6e:74: 12:76:7d:2d:e5:a0:c4:2b:42:1a:76:b6:6c:95:6b: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1C:80:63:6E:0B:4C:CA:F4:F4:36:E9:20:5B:89:34:DE:9C:72:C0 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:9e80:10::/48 Signature Algorithm: sha256WithRSAEncryption 3c:31:74:72:c2:c7:09:6a:61:bd:26:5a:82:54:09:0c:7c:f5: f6:01:53:e7:26:4d:88:6c:13:96:c9:65:9a:fd:c4:b3:e9:c2: d5:e6:ec:72:4c:e8:7b:6a:8d:ab:e2:4e:69:1f:27:6c:98:b9: c5:45:be:e9:1b:5a:52:c5:ce:3e:02:af:f3:87:6c:e6:0e:a9: da:a5:23:9c:5e:18:3b:bf:40:bb:01:0b:af:2a:dd:a7:1e:3c: e1:7b:e4:99:0c:ee:27:69:5e:28:69:74:56:b3:87:09:b1:44: 16:b7:1a:9f:1f:68:79:e9:62:2b:2b:7d:b4:e9:f6:41:36:ed: 33:bf:0f:3c:72:96:ce:85:23:69:f1:10:b2:1f:d1:ef:eb:94: a2:65:be:c4:02:b0:49:c5:c6:f3:1b:36:76:39:f4:0b:23:18: be:35:46:0a:b3:49:11:05:ef:41:75:6f:5b:2e:e0:d5:92:85: e7:1f:1f:b8:de:52:43:f6:aa:1a:d2:89:f6:e6:df:c9:40:cf: f9:1c:a5:bd:8a:cd:f7:d1:4b:a5:f1:77:9f:e5:b8:e7:91:59: 66:79:69:3e:ea:b8:d6:6f:10:21:39:ef:c6:39:50:23:9b:22: 6c:6f:be:7d:99:5f:9f:5b:ba:4a:44:f2:59:91:05:47:a9:56: e9:78:fc:d1 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICKWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGYwOS1kYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10atntgSoADNGGab8QV7hNeEHKqx71uW1cFJxgcWdUGXnj4HtSeE72dXHR2L JapqdLRZibNuswTmUBP/XWg3IQ3Q941Ac9Bd+Ww86jH+4SLtvX+pzLPSC/yUtLBY HyZ5GKhQMYa2jkieRoLk7oUb9xAReClY65/4O3bMaWlZ46JbbXYrCj014Q0x9BjD JoGYqs8OF7QxRihRGUjBISFxKHl6W6aTNnV9sSxIXs3VQ+rqFI36IWQV2ZirA+nf 3AwjIxEMkD+pk+3CDjQM7FGinFPQ+VnuXvYwDNei9Bge/CPmixWK06qSQB3otbMV bnQSdn0t5aDEK0IadrZslWvaqwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOIcgGNu C0zK9PQ26SBbiTTenHLAMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvOURFOThBNzZE OUI1MTFFQkE0RkM1QjFBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAKegAAQMA0GCSqGSIb3DQEBCwUAA4IBAQA8MXRywscJamG9JlqC VAkMfPX2AVPnJk2IbBOWyWWa/cSz6cLV5uxyTOh7ao2r4k5pHydsmLnFRb7pG1pS xc4+Aq/zh2zmDqnapSOcXhg7v0C7AQuvKt2nHjzhe+SZDO4naV4oaXRWs4cJsUQW txqfH2h56WIrK3206fZBNu0zvw88cpbOhSNp8RCyH9Hv65SiZb7EArBJxcbzGzZ2 OfQLIxi+NUYKs0kRBe9BdW9bLuDVkoXnHx+43lJD9qoa0on25t/JQM/5HKW9is33 0Uul8Xef5bjnkVlmeWk+6rjWbxAhOe/GOVAjmyJsb759mV+fW7pKRPJZkQVHqVbp ePzR -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:30 2026 by rpki-client