$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa File: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (raw, json) Hash identifier: d6qZOj923EDM5j/eus1GyHzZQ94N2O8LPvUvtab7u4U= Subject key identifier: FD:4D:46:E0:CA:F5:33:4D:AB:12:A4:40:A7:BC:46:D8:DD:9F:D1:47 Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 3588 Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:12:43 +0000 ROA not before: Thu 08 May 2025 15:21:12 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56264 IP address blocks: 2401:9440::/33 maxlen: 33 2401:9440:8000::/33 maxlen: 33 2406:9b00::/33 maxlen: 36 2406:9b00::/48 maxlen: 48 2406:9b00:1::/48 maxlen: 48 2406:9b00:2::/48 maxlen: 48 2406:9b00:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: May 8 15:21:12 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42d3b-9ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:54:cb:60:5d:48:f7:dd:3b:2d:5b:ba:fd: 66:e2:aa:62:5c:5c:ba:49:e5:8f:38:82:fd:ce:e5: 63:8e:96:6e:67:c1:ec:1a:31:4e:96:25:42:af:d9: 7a:c2:92:32:a8:0b:e8:aa:84:12:d5:7c:50:a6:da: b7:ff:83:e2:3c:32:9a:b3:8e:60:b6:28:ae:d3:51: 13:03:2b:c1:ab:9a:f5:21:53:97:5d:4d:ab:d8:84: 94:cc:f3:0e:2b:f0:33:bd:6e:05:d2:87:db:bd:09: b3:bb:71:b4:bb:91:51:fc:d8:1e:e1:91:12:81:b8: c1:0a:27:84:6d:64:59:87:a9:db:56:c1:2f:fe:3e: c8:f5:51:6e:11:9f:aa:2d:72:85:97:2b:15:1a:c6: 7c:41:8a:c4:7a:d6:64:2a:38:22:1b:b0:fe:32:e3: 11:06:05:a7:6b:c1:0a:45:d5:e2:56:34:54:46:bb: af:80:df:05:72:a5:79:38:b1:74:a7:58:12:50:1c: a1:73:f4:f0:77:a6:0e:0a:12:ed:9e:41:ce:89:18: 7d:20:49:58:15:a2:61:79:9d:76:7c:4a:b3:da:36: 4b:59:9f:44:f1:1a:83:e6:5f:6d:4e:7a:c8:c5:89: 38:a7:ba:56:af:57:e2:72:5c:01:74:a0:84:5a:72: 9a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:46:E0:CA:F5:33:4D:AB:12:A4:40:A7:BC:46:D8:DD:9F:D1:47 X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:9440::/32 2406:9b00::/32 Signature Algorithm: sha256WithRSAEncryption 0d:f7:66:31:cb:7b:d1:db:28:f6:a5:0e:77:14:3f:4c:36:f0: ba:1d:bf:18:20:65:2a:bc:31:f9:44:b3:60:33:a9:23:3b:26: ba:bc:42:c2:7f:e5:54:65:03:ef:00:5c:5f:ac:9b:21:64:70: e9:73:5d:88:db:57:5d:14:b3:b6:87:06:b3:6f:40:13:88:92: 63:5c:87:ba:39:46:1f:8e:19:fe:6d:b3:63:5c:61:79:96:4a: 6c:8f:1c:09:da:84:19:7b:b5:52:65:f4:62:ea:87:f5:3f:dd: ed:4c:5c:40:01:74:b9:1b:f3:61:de:94:f0:18:85:22:78:fd: 21:7b:97:02:95:31:11:77:55:6d:6a:a9:de:0b:11:cd:35:97: 5d:fa:63:7c:6d:e4:de:b8:5a:39:d5:db:a4:26:f5:c0:08:02: 7d:83:b0:30:c8:e7:49:20:5b:fa:10:16:4f:58:b9:1a:d5:75: 52:e8:18:8b:ed:96:4c:ac:2a:b8:d9:28:0c:50:58:9d:97:15: 16:95:e8:af:56:f3:90:a6:a9:2a:2c:35:6f:75:a1:33:8a:76: d0:f4:77:d0:2e:dd:3c:a9:eb:cb:8a:98:4d:6a:78:c3:27:07: 3d:8c:81:7c:03:96:25:14:2e:ff:2c:ce:7e:a6:32:4c:43:01: db:96:a0:27 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjUwNTA4MTUyMTEyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmQzYi05ZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrJUy2BdSPfdOy1buv1m4qpiXFy6SeWPOIL9zuVjjpZuZ8HsGjFOliVCr9l6 wpIyqAvoqoQS1XxQptq3/4PiPDKas45gtiiu01ETAyvBq5r1IVOXXU2r2ISUzPMO K/AzvW4F0ofbvQmzu3G0u5FR/Nge4ZESgbjBCieEbWRZh6nbVsEv/j7I9VFuEZ+q LXKFlysVGsZ8QYrEetZkKjgiG7D+MuMRBgWna8EKRdXiVjRURruvgN8FcqV5OLF0 p1gSUByhc/Twd6YOChLtnkHOiRh9IElYFaJheZ12fEqz2jZLWZ9E8RqD5l9tTnrI xYk4p7pWr1ficlwBdKCEWnKafwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFP1NRuDK 9TNNqxKkQKe8Rtjdn9FHMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc3MjYvRjlGRkY2QUMxREE3MTFFMjk2M0FGQUExMDhCMDJDRDIvOUQwMzAyM0VB ODZFMTFFREFCQTFGQTJBQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAAjAOAwUAJAGUQAMFACQGmwAwDQYJKoZIhvcNAQELBQADggEBAA33ZjHLe9Hb KPalDncUP0w28LodvxggZSq8MflEs2AzqSM7Jrq8QsJ/5VRlA+8AXF+smyFkcOlz XYjbV10Us7aHBrNvQBOIkmNch7o5Rh+OGf5ts2NcYXmWSmyPHAnahBl7tVJl9GLq h/U/3e1MXEABdLkb82HelPAYhSJ4/SF7lwKVMRF3VW1qqd4LEc01l136Y3xt5N64 WjnV26Qm9cAIAn2DsDDI50kgW/oQFk9YuRrVdVLoGIvtlkysKrjZKAxQWJ2XFRaV 6K9W85CmqSosNW91oTOKdtD0d9Au3Typ68uKmE1qeMMnBz2MgXwDliUULv8szn6m MkxDAduWoCc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:34:25 2026 by rpki-client