$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/CE3E7CF6136F11F1982A4804323D8C67.roa File: CE3E7CF6136F11F1982A4804323D8C67.roa (raw, json) Hash identifier: UQRfzo1c/HYpw7uRcuRbUI8vrLw5R69JNp0rwuqqffU= Subject key identifier: 45:65:2B:81:B1:09:31:99:D3:C7:14:F0:9F:FC:14:F6:B6:75:57:86 Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Certificate serial: 77 Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/CE3E7CF6136F11F1982A4804323D8C67.roa Signing time: Fri 11 Sep 2026 08:58:52 +0000 ROA not before: Fri 11 Sep 2026 08:58:52 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 133427 IP address blocks: 2001:df5:e840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Validity Not Before: Sep 11 08:58:52 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa3c2cc-74df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:f6:f8:46:0b:76:7f:bd:2f:9e:47:2d:3b: a9:42:b1:da:55:bd:94:15:de:f6:c3:ad:24:e9:64: 75:38:95:ab:b7:40:c2:36:34:be:6e:00:50:9c:4d: 76:58:d1:af:69:31:73:5d:43:4e:0a:9e:80:32:6d: 92:d3:7a:b9:69:56:3f:39:1e:88:45:b2:c4:55:77: 11:a4:c2:3c:de:e5:b6:6a:87:69:0a:eb:5e:b5:0d: 69:fe:69:55:89:7e:2e:25:4a:04:89:26:10:2a:3b: 60:a2:b9:99:c4:57:01:6a:93:e9:a3:3c:59:5f:d5: ba:a0:1e:ba:38:83:7b:63:4f:30:48:b0:0a:9c:74: e3:78:3e:45:d4:df:91:79:ec:6a:19:bc:c8:13:5e: 9e:a6:db:28:a9:63:f2:68:f4:24:ec:71:7a:ca:76: 3e:bc:75:a6:1b:17:ef:19:56:fc:48:67:7b:51:51: 51:5f:91:d3:f4:21:fe:1c:b0:65:43:da:6e:21:c1: 58:2f:de:48:e5:e3:44:76:9b:a7:7a:86:c5:4f:ab: e2:20:7d:50:2c:4d:a9:8a:00:88:da:48:82:c3:9d: 10:50:d8:3d:79:f0:f7:90:9a:e7:16:ba:69:bc:12: e1:01:4c:57:c8:3f:f8:0d:cf:77:09:11:fe:66:6e: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:2B:81:B1:09:31:99:D3:C7:14:F0:9F:FC:14:F6:B6:75:57:86 X509v3 Authority Key Identifier: keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/CE3E7CF6136F11F1982A4804323D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:e840::/48 Signature Algorithm: sha256WithRSAEncryption 1f:03:11:46:db:b3:f8:b3:38:f2:01:5c:50:4d:c1:8d:81:b4: 08:fc:ae:9c:ed:d1:1b:db:79:61:91:99:a0:7d:64:89:65:d1: 7b:ec:5a:7c:75:34:24:74:f3:01:0b:24:53:05:49:02:3a:4e: 76:11:60:e3:55:7f:cb:d4:57:4b:59:a2:2a:ab:57:19:66:a5: 78:ff:03:38:03:a9:5f:89:e2:cc:6e:84:d1:a0:e0:1f:cb:54: f0:ea:e9:52:69:5c:5a:98:68:30:a1:94:d8:d9:55:8d:58:3e: a1:d0:33:c9:8d:4e:03:a5:39:63:98:aa:dc:01:fb:48:59:a8: 31:48:0d:79:25:95:8b:fb:2b:b6:aa:30:e1:e1:2c:13:dc:c2: 28:78:1d:41:27:fa:c8:b9:b2:3e:65:9f:b7:8b:bc:09:24:41: c1:c8:45:a2:dc:8f:9f:20:f3:02:6c:f1:af:82:ef:01:29:f6: f6:f7:c0:2a:c3:0b:52:e5:55:cf:7e:7d:fc:11:12:7f:26:bc: ef:7d:cc:4b:a7:a3:2c:61:c1:19:86:1a:63:2f:6b:f6:9a:62: ff:e2:c2:ba:c5:6f:a7:73:16:43:78:3e:fb:60:96:d9:ce:26: f0:5e:e2:ea:04:ac:7a:d1:a3:0a:1d:ac:28:98:da:8b:f1:88: 86:58:da:46 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoQjlGQzVDMTRCMkQyNzUyOUQ1MEU2RTU5M0RBOENCMEFB ODdENjUxMDAeFw0yNjA5MTEwODU4NTJaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTNjMmNjLTc0ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkzfb4Rgt2f70vnkctO6lCsdpVvZQV3vbDrSTpZHU4lau3QMI2NL5uAFCcTXZY 0a9pMXNdQ04KnoAybZLTerlpVj85HohFssRVdxGkwjze5bZqh2kK6161DWn+aVWJ fi4lSgSJJhAqO2CiuZnEVwFqk+mjPFlf1bqgHro4g3tjTzBIsAqcdON4PkXU35F5 7GoZvMgTXp6m2yipY/Jo9CTscXrKdj68daYbF+8ZVvxIZ3tRUVFfkdP0If4csGVD 2m4hwVgv3kjl40R2m6d6hsVPq+IgfVAsTamKAIjaSILDnRBQ2D158PeQmucWumm8 EuEBTFfIP/gNz3cJEf5mbtQlAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQURWUrgbEJ MZnTxxTwn/wU9rZ1V4YwHwYDVR0jBBgwFoAUufxcFLLSdSnVDm5ZPajLCqh9ZRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0MxQkExQTIyMTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNuVkRtNVpQYWpMQ3FoOVpS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZ4Y0ZMTFNkU25WRG01WlBhakxDcWg5WlJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU4Ny9DMUJBMUEyMjEzNkUxMUYxQUQ3OTFCQTMzMTNEOEM2Ny9DRTNFN0NGNjEz NkYxMUYxOTgyQTQ4MDQzMjNEOEM2Ny5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ316EAwDQYJKoZIhvcNAQELBQADggEBAB8DEUbbs/izOPIBXFBN wY2BtAj8rpzt0RvbeWGRmaB9ZIll0XvsWnx1NCR08wELJFMFSQI6TnYRYONVf8vU V0tZoiqrVxlmpXj/AzgDqV+J4sxuhNGg4B/LVPDq6VJpXFqYaDChlNjZVY1YPqHQ M8mNTgOlOWOYqtwB+0hZqDFIDXkllYv7K7aqMOHhLBPcwih4HUEn+si5sj5ln7eL vAkkQcHIRaLcj58g8wJs8a+C7wEp9vb3wCrDC1LlVc9+ffwREn8mvO99zEunoyxh wRmGGmMva/aaYv/iwrrFb6dzFkN4PvtgltnOJvBe4uoErHrRowodrCiY2ovxiIZY 2kY= -----END CERTIFICATE-----Generated at Thu Sep 24 11:23:30 2026 by rpki-client