$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/A8DA1B1E9EE511EA890A7220C4F9AE02.roa File: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (raw, json) Hash identifier: wWSjcw2Ok0AjX38Jalp5jeYRBwKOimHHIAdxglDe+3Y= Subject key identifier: DF:15:9F:89:50:2E:BE:5C:5C:1A:78:27:A9:91:4B:E0:69:7F:78:CB Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF Certificate serial: 110F Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/A8DA1B1E9EE511EA890A7220C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:12:42 +0000 ROA not before: Fri 06 Feb 2026 17:14:59 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 140675 IP address blocks: 2404:9ec0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4367 (0x110f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF Validity Not Before: Feb 6 17:14:59 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a4819a-a5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:19:8f:bc:e1:47:73:64:cf:62:66:da:8f: 7a:00:59:17:cd:70:3d:56:da:d5:19:2b:24:69:1b: 6b:67:84:a8:3d:0f:54:77:94:40:6c:a8:b0:c2:92: d5:05:53:f4:34:09:d3:19:79:0a:bd:5c:bc:fe:06: a1:87:c4:bd:bb:d4:c0:9d:85:f1:8c:2b:d4:f1:15: 87:b0:45:f4:b3:ce:da:45:24:70:4b:61:e9:17:58: b3:a3:35:34:0e:0e:32:88:20:80:44:7d:41:e5:bf: f5:7b:64:e2:54:20:85:73:45:44:dc:b3:57:77:50: 44:d9:d9:dc:3e:ca:a1:bc:6c:2d:69:72:2b:1d:75: 16:80:33:4b:33:2c:ef:5c:6f:2a:91:8a:7c:7b:05: 42:6c:60:2f:1c:45:17:69:eb:dd:ef:a8:d2:0c:52: 9c:e9:14:2f:c9:54:a8:68:2e:a0:91:7c:ed:ca:94: 89:8a:a4:d3:be:48:a0:16:dc:48:47:63:37:da:18: 11:72:1b:b6:82:34:09:60:1e:5d:a5:e4:7a:e4:84: 90:17:6d:d6:f4:9e:7a:43:28:8c:2e:b4:d6:f8:59: 55:55:c1:80:9c:30:6c:42:44:59:79:23:b7:84:e2: f6:4b:3d:a3:e3:4a:64:0e:66:7a:df:f5:51:05:00: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:9F:89:50:2E:BE:5C:5C:1A:78:27:A9:91:4B:E0:69:7F:78:CB X509v3 Authority Key Identifier: keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/A8DA1B1E9EE511EA890A7220C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2404:9ec0:8::/48 Signature Algorithm: sha256WithRSAEncryption 68:7d:2d:68:17:5a:6d:f9:4e:78:76:57:2a:c5:40:88:4e:b9: 3a:84:52:41:65:2c:b9:68:41:97:da:f8:84:45:63:86:72:1f: b3:00:a9:16:5e:80:67:05:5e:f3:49:e0:54:6d:ed:5b:f1:a3: 91:90:01:71:44:1c:f7:56:01:e8:6d:19:28:a6:3e:ce:17:8c: 2d:4a:4f:7f:60:e7:79:29:17:39:4e:39:32:90:79:b4:66:03: 12:d7:db:98:c9:80:cb:aa:66:c3:3c:65:49:a4:20:b6:3c:f5: c6:04:e4:a1:59:23:00:93:32:59:a3:4e:ac:65:e8:b6:4c:53: d4:25:e8:1a:6c:45:dc:a1:51:1a:5d:8b:b5:86:04:e3:81:5c: 81:59:35:41:25:74:20:f2:80:18:e3:ed:5e:e4:fd:b4:9f:45: 46:27:36:b6:1f:32:82:7e:fb:46:f8:5d:76:0f:e6:69:70:b6: e6:48:0c:ef:fd:90:55:d1:94:1f:3f:11:81:09:cd:a3:bf:3f: 4b:bb:b6:d5:ca:72:84:02:f4:cd:b9:93:46:b7:4d:20:f7:c3: 16:32:7c:da:e3:e4:5e:e0:a6:e7:a4:ce:98:d9:b3:b7:c1:26: d9:93:39:48:de:37:31:93:8f:ca:99:4c:be:1a:89:ed:4c:d9: 6b:b8:5b:95 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICEQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEOUMxMTAvBgNVBAUTKDVCMkNGMEZCNjJGMTYwRjE4MzhBRUUzRTZDREUwNzU0 NERGRjhCRkYwHhcNMjYwMjA2MTcxNDU5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODE5YS1hNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyugZj7zhR3Nkz2Jm2o96AFkXzXA9VtrVGSskaRtrZ4SoPQ9Ud5RAbKiwwpLV BVP0NAnTGXkKvVy8/gahh8S9u9TAnYXxjCvU8RWHsEX0s87aRSRwS2HpF1izozU0 Dg4yiCCARH1B5b/1e2TiVCCFc0VE3LNXd1BE2dncPsqhvGwtaXIrHXUWgDNLMyzv XG8qkYp8ewVCbGAvHEUXaevd76jSDFKc6RQvyVSoaC6gkXztypSJiqTTvkigFtxI R2M32hgRchu2gjQJYB5dpeR65ISQF23W9J56QyiMLrTW+FlVVcGAnDBsQkRZeSO3 hOL2Sz2j40pkDmZ63/VRBQCN1QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFN8Vn4lQ Lr5cXBp4J6mRS+Bpf3jLMB8GA1UdIwQYMBaAFFss8Pti8WDxg4ruPmzeB1RN/4v/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Q5Qy80NTU5NDJENjUw QjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQR0RpdTQtYk40SFZFM19p XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d5enctMkx4WVBHRGl1NC1iTjRIVkUzX2lfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNEOUMvNDU1OTQyRDY1MEIyMTFFOUI1REI2QTZCQzRGOUFFMDIvQThEQTFCMUU5 RUU1MTFFQTg5MEE3MjIwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJASewAAIMA0GCSqGSIb3DQEBCwUAA4IBAQBofS1oF1pt+U54dlcq xUCITrk6hFJBZSy5aEGX2viERWOGch+zAKkWXoBnBV7zSeBUbe1b8aORkAFxRBz3 VgHobRkopj7OF4wtSk9/YOd5KRc5TjkykHm0ZgMS19uYyYDLqmbDPGVJpCC2PPXG BOShWSMAkzJZo06sZei2TFPUJegabEXcoVEaXYu1hgTjgVyBWTVBJXQg8oAY4+1e 5P20n0VGJza2HzKCfvtG+F12D+ZpcLbmSAzv/ZBV0ZQfPxGBCc2jvz9Lu7bVynKE AvTNuZNGt00g98MWMnza4+Re4KbnpM6Y2bO3wSbZkzlI3jcxk4/KmUy+GontTNlr uFuV -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:47 2026 by rpki-client