$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/D9CB701ACBF311EBB9D2A784C4F9AE02.roa File: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (raw, json) Hash identifier: mFrAzTRPV3WslTnkqKUh6O339a07mEVqEj4HKXYQYeU= Subject key identifier: 3D:CB:A0:83:8A:C0:80:20:25:44:12:97:7A:A2:D3:17:92:21:49:B5 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2957 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/D9CB701ACBF311EBB9D2A784C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:09:50 +0000 ROA not before: Sat 26 Jul 2025 15:53:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 141376 IP address blocks: 2402:e380:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10583 (0x2957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:53:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a48efe-747b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:5a:0f:ba:3e:63:af:87:30:d0:7d:9d:19: 5d:87:c2:8c:04:51:3b:71:aa:97:91:6c:83:ae:1e: 40:1d:92:59:c1:c5:93:2c:c6:15:0e:8e:bb:26:c9: fe:65:aa:ea:00:34:c5:62:8a:9d:5a:2d:a5:be:08: 1c:10:d9:af:65:0b:e1:b4:6e:6d:fc:37:7b:71:4f: 80:87:31:cc:ac:d4:af:cb:98:8a:6a:df:93:4f:f1: 36:8b:fd:8e:4d:d5:4e:a9:9f:4f:26:fa:b9:d4:7b: 45:47:90:20:7e:80:1f:fd:c3:cc:20:2c:7d:37:23: 3a:5e:25:a1:54:d8:d5:f4:4f:1c:86:e5:f0:b0:26: c2:94:20:1a:aa:66:f5:2b:50:e6:93:9a:16:9f:f0: 09:e7:43:b3:fb:29:50:e6:99:d3:20:46:d9:58:4f: 00:f4:4c:6f:95:5f:93:a7:a4:51:21:d1:eb:01:d6: 75:d7:1e:85:2f:02:ae:ab:c6:95:f7:bb:19:d5:01: 4c:ef:3a:81:7d:e4:3f:bd:5b:23:a0:39:47:2d:bf: 4e:55:70:e2:0e:fa:17:59:a8:94:99:3c:dc:8f:5f: 6f:71:fa:1c:44:b1:45:1d:c9:26:18:e0:bf:16:1f: f4:88:fc:e7:54:b2:38:68:f8:cf:60:e0:8b:19:ba: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CB:A0:83:8A:C0:80:20:25:44:12:97:7A:A2:D3:17:92:21:49:B5 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/D9CB701ACBF311EBB9D2A784C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:e380:400::/40 Signature Algorithm: sha256WithRSAEncryption c4:92:94:b7:38:b6:72:92:8f:3d:fc:e7:92:86:3a:ed:99:63: 26:de:ba:2e:db:fe:57:0c:60:9d:d2:a2:49:cc:54:81:4b:89: 32:a6:c0:fc:99:14:b9:7b:84:61:56:04:87:21:fb:8f:7f:74: 66:96:a2:ef:88:07:19:d1:ca:d2:d1:b5:d5:eb:2c:2e:52:6e: 1f:6a:52:db:d1:7e:21:9b:65:25:98:9d:2b:70:3a:d9:7c:23: 70:31:c9:f7:70:f8:7d:53:90:5b:04:17:7a:26:e4:54:1e:94: 95:f1:0c:89:92:2c:d2:af:be:68:3f:05:d6:5c:12:53:f3:66: 77:0d:5d:1a:f2:fe:b2:e0:d8:ac:e4:9a:0d:9c:89:c6:1c:44: 5a:14:8a:6d:44:81:be:4a:40:07:ac:d6:f5:50:56:1a:3f:9b: af:9f:15:8f:6f:ed:e8:03:9b:ff:fb:be:1d:8c:e4:76:44:23: ef:80:7d:12:19:d1:b4:67:6e:52:8b:a3:af:36:99:2d:d0:92: 64:e3:18:8e:5d:e0:c3:e6:d8:f2:f0:b0:6d:a6:38:a1:5f:85: f2:00:63:02:46:4f:ef:ef:44:b1:4f:ec:8a:58:a4:86:c8:75: 8b:1e:45:4b:78:90:d9:51:57:06:51:0c:0d:0f:57:42:a2:a6: b0:26:f6:b6 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgICKVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzU3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGVmZS03NDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6NaD7o+Y6+HMNB9nRldh8KMBFE7caqXkWyDrh5AHZJZwcWTLMYVDo67Jsn+ ZarqADTFYoqdWi2lvggcENmvZQvhtG5t/Dd7cU+AhzHMrNSvy5iKat+TT/E2i/2O TdVOqZ9PJvq51HtFR5AgfoAf/cPMICx9NyM6XiWhVNjV9E8chuXwsCbClCAaqmb1 K1Dmk5oWn/AJ50Oz+ylQ5pnTIEbZWE8A9ExvlV+Tp6RRIdHrAdZ11x6FLwKuq8aV 97sZ1QFM7zqBfeQ/vVsjoDlHLb9OVXDiDvoXWaiUmTzcj19vcfocRLFFHckmGOC/ Fh/0iPznVLI4aPjPYOCLGbqCuwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFD3LoIOK wIAgJUQSl3qi0xeSIUm1MB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRDlDQjcwMUFD QkYzMTFFQkI5RDJBNzg0QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJALjgAQwDQYJKoZIhvcNAQELBQADggEBAMSSlLc4tnKSjz3855KG Ou2ZYybeui7b/lcMYJ3SoknMVIFLiTKmwPyZFLl7hGFWBIch+49/dGaWou+IBxnR ytLRtdXrLC5Sbh9qUtvRfiGbZSWYnStwOtl8I3Axyfdw+H1TkFsEF3om5FQelJXx DImSLNKvvmg/BdZcElPzZncNXRry/rLg2Kzkmg2cicYcRFoUim1Egb5KQAes1vVQ Vho/m6+fFY9v7egDm//7vh2M5HZEI++AfRIZ0bRnblKLo682mS3QkmTjGI5d4MPm 2PLwsG2mOKFfhfIAYwJGT+/vRLFP7IpYpIbIdYseRUt4kNlRVwZRDA0PV0KiprAm 9rY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:54 2026 by rpki-client