$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B2F3EE3C12C911F1AFB167917BEE528E.roa File: B2F3EE3C12C911F1AFB167917BEE528E.roa (raw, json) Hash identifier: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc= Subject key identifier: CE:27:2A:4D:E6:49:D6:7E:DF:E3:78:D2:3A:63:DA:C6:4D:A0:DD:A3 Certificate issuer: /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA Certificate serial: 08 Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B2F3EE3C12C911F1AFB167917BEE528E.roa Signing time: Sun 01 Mar 2026 17:21:33 +0000 ROA not before: Thu 26 Feb 2026 04:14:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153038 IP address blocks: 2403:21c0::/32 maxlen: 32 2403:21c0::/36 maxlen: 36 2403:21c0:1000::/36 maxlen: 36 2403:21c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA Validity Not Before: Feb 26 04:14:53 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4759d-1ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:7a:27:40:f0:d5:3f:eb:31:fe:47:9d:a4: dc:f5:31:0f:02:de:cd:2a:04:2c:b9:ed:f6:87:58: 3b:49:b9:45:b2:5f:f2:2f:51:36:03:89:dc:15:b8: 6f:a7:90:87:b5:62:2c:a6:3b:4b:af:e9:a0:74:1b: fe:46:13:44:1f:1f:14:5a:ff:c0:26:fe:40:bf:72: 39:ee:fe:48:2f:28:f3:be:6d:0d:df:c1:7c:d3:77: f4:30:b1:2b:a3:bd:ae:08:c6:22:32:2f:39:58:a7: 3c:4c:80:2d:97:8b:63:3e:6a:c2:ef:94:09:49:da: 80:93:f1:37:bd:f7:46:96:7f:ad:87:55:51:b4:7d: c8:89:56:4f:cb:99:c9:6b:e4:76:a6:fe:b2:ad:c3: cd:63:be:f5:b6:e2:87:0a:3a:17:66:1e:5a:65:26: aa:13:66:50:7e:61:a5:df:55:3f:97:98:f4:c2:5b: 58:48:d2:74:80:a9:4f:15:05:74:21:19:08:19:b8: ac:a8:e3:b4:71:89:59:34:66:70:4c:5c:13:1e:cc: 70:a5:01:a7:74:8f:e0:ef:d5:b1:1c:20:d0:9e:7f: 7e:e8:c0:9a:70:15:e3:3d:5f:73:4d:62:18:2d:33: 35:c1:c1:eb:da:a8:44:82:ba:69:ba:b5:b5:57:64: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:27:2A:4D:E6:49:D6:7E:DF:E3:78:D2:3A:63:DA:C6:4D:A0:DD:A3 X509v3 Authority Key Identifier: keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B2F3EE3C12C911F1AFB167917BEE528E.roa sbgp-ipAddrBlock: critical IPv6: 2403:21c0::/32 Signature Algorithm: sha256WithRSAEncryption 01:e1:85:55:6b:af:c0:7a:f1:7a:84:7d:a1:8f:4f:9d:ac:7f: ad:a9:0f:99:c9:6c:9e:2b:7d:22:82:61:05:d9:48:42:ea:ff: 77:6b:bc:b0:aa:64:4e:32:41:a2:cc:ea:b9:d0:5e:f2:7b:36: 9c:d7:58:cf:d8:7b:31:a5:19:d9:a6:cc:75:8e:b5:7a:d1:6d: ed:d4:ff:13:89:ac:f8:1f:91:39:7b:2c:54:5b:c7:fc:8c:95: 57:75:0f:56:6a:0b:16:b3:dd:56:ae:f7:c4:cc:33:3f:9f:6e: 70:15:8a:44:85:3d:94:34:be:01:91:37:b4:2a:3c:a4:30:d9: 5c:f1:fd:0b:57:79:43:f3:39:dc:58:4b:30:a3:88:98:d6:b3: be:fd:b4:20:c5:d4:f2:25:0f:7d:e2:53:1f:8c:22:6a:dd:e9: 43:f9:fc:f9:1b:1f:23:79:49:91:b2:98:07:81:34:f3:a5:d7: 15:a3:d4:f0:bc:f7:82:67:33:48:4b:32:40:44:0d:26:d8:4c: ec:18:34:6e:9c:ab:75:14:5d:de:fa:25:7a:93:4b:dc:ec:d5: bc:30:a7:2b:c2:2a:dc:04:a8:64:b6:e7:de:cb:c9:e6:d5:97: 4e:84:55:9c:66:7a:09:fe:64:8e:b4:04:cb:21:d2:04:1a:16: cb:89:04:d1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTYzRDExMC8GA1UEBRMoOUYxQjMxRkE3NzAwQjc0NThGQzE4ODlCODYyNTQxQ0U5 RDQ4MjRDQTAeFw0yNjAyMjYwNDE0NTNaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQ3NTlkLTFjZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjBnonQPDVP+sx/kedpNz1MQ8C3s0qBCy57faHWDtJuUWyX/IvUTYDidwVuG+n kIe1YiymO0uv6aB0G/5GE0QfHxRa/8Am/kC/cjnu/kgvKPO+bQ3fwXzTd/QwsSuj va4IxiIyLzlYpzxMgC2Xi2M+asLvlAlJ2oCT8Te990aWf62HVVG0fciJVk/Lmclr 5Ham/rKtw81jvvW24ocKOhdmHlplJqoTZlB+YaXfVT+XmPTCW1hI0nSAqU8VBXQh GQgZuKyo47RxiVk0ZnBMXBMezHClAad0j+Dv1bEcINCef37owJpwFeM9X3NNYhgt MzXBwevaqESCumm6tbVXZASXAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUzicqTeZJ 1n7f43jSOmPaxk2g3aMwHwYDVR0jBBgwFoAUnxsx+ncAt0WPwYibhiVBzp1IJMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjNEL0Y5Qzk3NjZDNzI2 NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBXUHdZaWJoaVZCenAxSUpN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnhzeC1uY0F0MFdQd1lpYmhpVkJ6cDFJSk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi9CMkYzRUUzQzEy QzkxMUYxQUZCMTY3OTE3QkVFNTI4RS5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAyHAMA0GCSqGSIb3DQEBCwUAA4IBAQAB4YVVa6/AevF6hH2hj0+d rH+tqQ+ZyWyeK30igmEF2UhC6v93a7ywqmROMkGizOq50F7yezac11jP2HsxpRnZ psx1jrV60W3t1P8Tiaz4H5E5eyxUW8f8jJVXdQ9WagsWs91WrvfEzDM/n25wFYpE hT2UNL4BkTe0KjykMNlc8f0LV3lD8zncWEswo4iY1rO+/bQgxdTyJQ994lMfjCJq 3elD+fz5Gx8jeUmRspgHgTTzpdcVo9TwvPeCZzNISzJARA0m2EzsGDRunKt1FF3e +iV6k0vc7NW8MKcrwircBKhktufey8nm1ZdOhFWcZnoJ/mSOtATLIdIEGhbLiQTR -----END CERTIFICATE-----Generated at Mon Mar 2 11:29:36 2026 by rpki-client