$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/7FFE71389D3311F18AF9939B4911F970.roa File: 7FFE71389D3311F18AF9939B4911F970.roa (raw, json) Hash identifier: EoUyUFsqGCvstD3CgILHZ4DcPcFszbAPPZuEKcHz5ms= Subject key identifier: 93:AE:6A:AC:E8:B9:3C:9B:0B:43:63:B7:32:B9:E3:D7:83:D9:97:A5 Certificate issuer: /CN=A911E3C6/serialNumber=03867130401AFB1283677BC07309EA94C708C76F Certificate serial: 1A Authority key identifier: 03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/7FFE71389D3311F18AF9939B4911F970.roa Signing time: Sun 06 Sep 2026 18:03:10 +0000 ROA not before: Sun 06 Sep 2026 18:03:10 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 9515 IP address blocks: 45.249.63.0/24 maxlen: 24 2402:6e60:2::/48 maxlen: 48 2402:6e60:3::/48 maxlen: 48 2402:6e60:4::/48 maxlen: 48 2402:6e60:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E3C6, serialNumber=03867130401AFB1283677BC07309EA94C708C76F Validity Not Before: Sep 6 18:03:10 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9daade-7944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c0:0a:25:cf:61:28:3a:f1:05:2e:e6:e4:a9: a8:bf:80:26:24:4a:6c:c1:c1:5f:b0:c6:9a:c0:65: 81:55:d0:29:00:ef:6c:d7:63:36:99:fc:eb:d3:64: 2d:cb:ee:b1:86:0b:08:05:ef:a9:4b:6a:fe:0d:ed: ef:04:fa:e2:b7:37:1e:3f:9f:6a:48:2c:60:6d:f7: 7c:8c:0d:7e:e3:d6:c6:23:94:fa:5e:e9:e8:28:12: c2:96:7c:0a:92:25:89:08:47:8a:e7:7c:04:cb:ba: fb:19:8f:53:cb:37:43:81:8a:61:9e:30:60:f6:5e: c6:ca:79:64:db:a3:f0:9b:5b:15:e8:17:40:6b:2c: cf:a8:9b:f8:6a:78:8f:89:d0:e0:90:d4:b9:20:67: 52:ef:40:e6:7a:83:2e:a1:e8:39:0e:d9:3f:53:ef: 2e:1e:bd:42:74:ba:a6:7d:42:11:e6:80:08:43:d2: 93:e7:f4:62:55:d7:07:cb:08:34:34:57:d6:a6:b8: 94:32:6b:ca:4a:23:51:45:1b:e3:94:d6:44:45:23: 3d:ee:7a:19:84:03:ba:c0:17:bc:fc:68:dc:1d:b8: 61:29:53:ca:0f:80:81:64:d7:e9:43:de:a2:b4:a6: 59:e4:a2:89:0d:78:50:0b:f0:a2:23:60:ae:66:5e: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AE:6A:AC:E8:B9:3C:9B:0B:43:63:B7:32:B9:E3:D7:83:D9:97:A5 X509v3 Authority Key Identifier: keyid:03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/7FFE71389D3311F18AF9939B4911F970.roa sbgp-ipAddrBlock: critical IPv4: 45.249.63.0/24 IPv6: 2402:6e60:2::-2402:6e60:4:ffff:ffff:ffff:ffff:ffff 2402:6e60:1000::/36 Signature Algorithm: sha256WithRSAEncryption 3d:30:83:72:8c:88:23:2c:19:47:9b:23:14:4e:70:bf:62:75: d7:6e:90:c0:0b:e7:f0:38:df:d8:6f:9c:54:c5:39:7d:bc:48: 8b:22:24:fc:86:03:d6:37:a9:29:d7:b0:7b:44:ac:0c:a8:d4: a9:8d:be:1a:76:86:ec:a5:90:0c:47:ac:cc:0e:de:bc:f5:48: 34:18:77:41:a4:d5:52:c3:5c:77:c6:14:34:9f:2a:c3:52:b3: da:f8:2b:8e:3d:75:5b:22:4d:02:c9:72:6f:5b:02:54:f2:e6: 13:11:53:93:ec:a2:03:ff:cc:2a:65:80:ac:ee:e2:0d:df:37: 5b:f8:c7:c7:e1:57:8c:d4:cc:c4:43:16:d3:98:54:00:8b:a2: 12:fa:19:2e:a3:84:3c:4a:c3:f3:d3:dd:3c:d8:0e:9d:9a:14: 41:00:df:16:12:c4:85:e5:41:66:e1:30:56:4c:91:a0:fa:b1: 88:76:22:85:24:bd:0a:c5:59:e9:4e:55:4a:7f:92:16:c9:ca: 6c:0e:d0:e0:49:c8:94:b6:c3:47:6f:88:3a:bb:5f:0a:66:4d: 59:b6:4e:4d:44:7b:43:29:4f:30:ba:2c:db:72:14:64:a4:a1: ab:02:de:ed:d3:fa:ab:76:ac:4c:09:20:09:3b:70:8f:a8:90: f5:c5:5b:c5 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTNDNjExMC8GA1UEBRMoMDM4NjcxMzA0MDFBRkIxMjgzNjc3QkMwNzMwOUVBOTRD NzA4Qzc2RjAeFw0yNjA5MDYxODAzMTBaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWRhYWRlLTc5NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhwAolz2EoOvEFLubkqai/gCYkSmzBwV+wxprAZYFV0CkA72zXYzaZ/OvTZC3L 7rGGCwgF76lLav4N7e8E+uK3Nx4/n2pILGBt93yMDX7j1sYjlPpe6egoEsKWfAqS JYkIR4rnfATLuvsZj1PLN0OBimGeMGD2XsbKeWTbo/CbWxXoF0BrLM+om/hqeI+J 0OCQ1LkgZ1LvQOZ6gy6h6DkO2T9T7y4evUJ0uqZ9QhHmgAhD0pPn9GJV1wfLCDQ0 V9amuJQya8pKI1FFG+OU1kRFIz3uehmEA7rAF7z8aNwduGEpU8oPgIFk1+lD3qK0 plnkookNeFAL8KIjYK5mXsY7AgMBAAGjggKEMIICgDAdBgNVHQ4EFgQUk65qrOi5 PJsLQ2O3Mrnj14PZl6UwHwYDVR0jBBgwFoAUA4ZxMEAa+xKDZ3vAcwnqlMcIx28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFM0M2LzI1Rjk2MDQ0OTc0 MzExRjE5RDY2ODYwQTM4MTFGOTcwL0E0WnhNRUFhLXhLRFozdkFjd25xbE1jSXgy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTRaeE1FQWEteEtEWjN2QWN3bnFsTWNJeDI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTNDNi8yNUY5NjA0NDk3NDMxMUYxOUQ2Njg2MEEzODExRjk3MC83RkZFNzEzODlE MzMxMUYxOEFGOTkzOUI0OTExRjk3MC5yb2EwQwYIKwYBBQUHAQcBAf8ENDAyMAwE AgABMAYDBAAt+T8wIgQCAAIwHDASAwcBJAJuYAACAwcAJAJuYAAEAwYEJAJuYBAw DQYJKoZIhvcNAQELBQADggEBAD0wg3KMiCMsGUebIxROcL9idddukMAL5/A439hv nFTFOX28SIsiJPyGA9Y3qSnXsHtErAyo1KmNvhp2huylkAxHrMwO3rz1SDQYd0Gk 1VLDXHfGFDSfKsNSs9r4K449dVsiTQLJcm9bAlTy5hMRU5PsogP/zCplgKzu4g3f N1v4x8fhV4zUzMRDFtOYVACLohL6GS6jhDxKw/PT3TzYDp2aFEEA3xYSxIXlQWbh MFZMkaD6sYh2IoUkvQrFWelOVUp/khbJymwO0OBJyJS2w0dviDq7XwpmTVm2Tk1E e0MpTzC6LNtyFGSkoasC3u3T+qt2rEwJIAk7cI+okPXFW8U= -----END CERTIFICATE-----Generated at Tue Sep 22 18:54:23 2026 by rpki-client