$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8B707C6C17DC11EE959DE671C4F9AE02.roa File: 8B707C6C17DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg= Subject key identifier: 09:06:CE:7D:56:9F:0F:07:CD:25:7F:C9:DA:58:CD:B1:DF:B0:95:30 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0DBE Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8B707C6C17DC11EE959DE671C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:42:13 +0000 ROA not before: Sun 02 Nov 2025 19:08:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 54994 IP address blocks: 2001:e68:20db:10::/64 maxlen: 64 2001:e68:20db:11::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48885-d33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:14:b1:8d:75:55:c0:58:26:49:72:1f:f9: 02:18:bd:62:b3:69:6b:11:c8:ba:ec:de:4e:0f:f5: a6:13:c2:bd:ed:96:4b:90:96:1c:f1:b9:d7:48:5c: 2e:cd:cf:2d:9d:1b:d0:33:12:86:a6:57:83:10:ec: ff:e9:73:87:01:c9:cc:a7:a2:59:ea:6d:8f:95:ad: cd:71:21:be:1e:f2:58:c0:1e:b7:ec:75:36:3e:29: 8b:b1:69:6f:bf:5e:27:5c:27:c8:6b:fd:55:3b:e8: bc:d4:c3:77:8d:1f:4d:b2:80:70:fc:c1:fd:7f:91: dd:8c:34:00:bb:ae:32:89:d1:bc:9d:c2:f0:50:a8: b9:4a:6c:5f:80:20:db:34:f2:29:61:a5:df:0e:30: 8b:0e:37:a6:23:aa:23:f3:51:62:cd:e6:14:90:03: 6f:7d:ae:be:c4:30:83:d5:24:d1:d4:cf:2a:dc:6d: 9e:08:f3:6b:5b:84:7c:12:fd:06:0d:49:8f:0f:16: fa:4f:c7:0b:50:17:77:84:f8:ea:4a:33:b1:a4:1f: 2a:4f:00:75:2c:37:ef:c6:27:52:c3:d5:62:bc:95: 03:98:cb:16:18:02:41:15:a6:ec:a1:b0:c7:64:02: bb:ba:35:f8:98:f4:2c:28:67:b4:b3:f0:a3:8f:49: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:06:CE:7D:56:9F:0F:07:CD:25:7F:C9:DA:58:CD:B1:DF:B0:95:30 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8B707C6C17DC11EE959DE671C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:e68:20db:10::/63 Signature Algorithm: sha256WithRSAEncryption 86:75:35:b8:a3:2f:a3:df:cf:f9:92:f3:c2:8f:80:c8:50:4f: e8:d1:18:8d:eb:6b:09:c1:59:94:58:08:4e:8a:fb:a1:20:f2: 71:41:91:aa:6d:99:c7:67:8b:c6:bb:ef:d3:ec:ea:43:eb:bb: ce:7c:cb:20:ca:d1:bc:13:89:24:e0:1a:d3:9b:e6:2a:48:41: 91:4a:02:1c:3c:c4:81:39:be:f2:aa:78:3b:46:ef:9d:89:d0: 7f:d8:19:52:eb:4d:46:b9:ab:2f:58:13:9f:55:a3:da:cf:17: 30:09:48:12:e8:63:00:c7:df:20:78:b8:40:c2:12:3b:58:b4: 9c:64:d8:26:e2:fb:75:78:6d:32:b6:e0:54:46:4d:00:fe:f2: 31:4a:23:99:56:75:2a:2d:95:1d:4f:7d:f7:fd:db:7b:d1:d7: bb:66:99:3a:dd:34:35:97:a9:14:e3:39:00:5d:09:6e:91:c9: 52:dd:ab:60:f2:59:fe:a9:3e:2d:9f:3a:9e:75:87:9c:9a:03: dc:45:4d:a1:2f:bc:42:98:ff:1d:ae:c0:bc:48:e9:94:02:65: ab:d5:23:ea:98:8c:86:02:7e:cd:b8:2f:cc:d9:6b:07:d6:09: 2d:3e:4b:b2:0a:37:50:44:3a:fc:b3:99:79:f5:e1:54:ee:0c: 83:a7:a9:a8 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODE1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODg4NS1kMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtoUsY11VcBYJklyH/kCGL1is2lrEci67N5OD/WmE8K97ZZLkJYc8bnXSFwu zc8tnRvQMxKGpleDEOz/6XOHAcnMp6JZ6m2Pla3NcSG+HvJYwB637HU2PimLsWlv v14nXCfIa/1VO+i81MN3jR9NsoBw/MH9f5HdjDQAu64yidG8ncLwUKi5SmxfgCDb NPIpYaXfDjCLDjemI6oj81FizeYUkANvfa6+xDCD1STR1M8q3G2eCPNrW4R8Ev0G DUmPDxb6T8cLUBd3hPjqSjOxpB8qTwB1LDfvxidSw9VivJUDmMsWGAJBFabsobDH ZAK7ujX4mPQsKGe0s/Cjj0lIQQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFAkGzn1W nw8HzSV/ydpYzbHfsJUwMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEI3MDdDNkMx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMCQGCCsGAQUFBwEHAQH/BBUwEzAR BAIAAjALAwkBIAEOaCDbABAwDQYJKoZIhvcNAQELBQADggEBAIZ1NbijL6Pfz/mS 88KPgMhQT+jRGI3rawnBWZRYCE6K+6Eg8nFBkaptmcdni8a779Ps6kPru858yyDK 0bwTiSTgGtOb5ipIQZFKAhw8xIE5vvKqeDtG752J0H/YGVLrTUa5qy9YE59Vo9rP FzAJSBLoYwDH3yB4uEDCEjtYtJxk2Cbi+3V4bTK24FRGTQD+8jFKI5lWdSotlR1P fff923vR17tmmTrdNDWXqRTjOQBdCW6RyVLdq2DyWf6pPi2fOp51h5yaA9xFTaEv vEKY/x2uwLxI6ZQCZavVI+qYjIYCfs24L8zZawfWCS0+S7IKN1BEOvyzmXn14VTu DIOnqag= -----END CERTIFICATE-----Generated at Mon Mar 2 06:39:18 2026 by rpki-client