$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/C2BDF91086EE11EFB5A6B352C4F9AE02.roa File: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (raw, json) Hash identifier: DGkc44cg4KTTtMc35ker9L4kUFjIMHeDUThOm8rbEJU= Subject key identifier: A9:1D:E1:EA:2B:1F:BB:92:D3:F8:F4:42:B5:6E:D9:46:05:C1:CD:70 Certificate issuer: /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Certificate serial: 067E Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/C2BDF91086EE11EFB5A6B352C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:49:03 +0000 ROA not before: Thu 04 Dec 2025 21:35:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152879 IP address blocks: 2401:bc40:a500::/40 maxlen: 48 2401:bc40:e305::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Validity Not Before: Dec 4 21:35:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46dff-0f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:1a:3b:32:80:a0:85:fc:b7:92:15:56:01: 9e:09:9c:f6:1d:c8:21:23:99:7b:b7:d7:80:29:c3: 1a:60:dc:17:5e:1b:6a:d6:3b:6e:19:e7:9f:f1:80: b3:42:3c:31:b4:d0:8b:02:5d:26:a2:c5:45:94:bf: d9:b8:0d:67:3d:32:99:cf:c0:f7:a7:de:8e:da:fd: ad:9b:21:02:6c:63:00:16:8b:99:b4:d5:84:0a:64: a7:4d:6d:2b:3c:26:e8:19:ea:f7:00:6f:13:44:fb: 61:1d:8f:45:d8:3f:f1:9b:d0:e0:55:d5:09:4e:71: ba:99:d7:f8:72:14:c9:7a:27:44:a2:de:2f:b1:b3: a2:d8:d9:d1:01:af:d0:0a:f1:5d:dd:ae:98:46:69: 34:3a:ea:22:35:f1:ad:1f:57:16:0a:13:72:59:1e: a7:82:6d:ad:1b:98:16:9b:0b:5f:00:be:cd:0f:80: 19:6a:ef:a2:a6:55:d1:4e:47:85:6d:7e:95:eb:9e: 3e:61:0c:ce:fb:b3:7a:f4:ff:1c:ba:a9:e9:c0:58: 9c:d6:d2:5b:01:79:31:92:77:58:81:d4:b5:62:1d: 21:00:cc:4d:75:50:1b:2e:0f:f7:dd:82:c0:22:39: 8b:a1:bb:20:20:c2:03:51:97:78:37:df:eb:5e:2a: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:E1:EA:2B:1F:BB:92:D3:F8:F4:42:B5:6E:D9:46:05:C1:CD:70 X509v3 Authority Key Identifier: keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/C2BDF91086EE11EFB5A6B352C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:bc40:a500::/40 2401:bc40:e305::/48 Signature Algorithm: sha256WithRSAEncryption 34:bf:06:72:03:6e:58:78:5b:9b:ad:2b:53:f3:93:24:8c:65: 8f:2e:2f:4f:56:56:ed:78:5f:e4:01:02:62:39:df:da:14:99: 45:c9:da:f8:76:fe:db:9f:0f:23:2d:85:6c:7f:3f:b0:22:c8: 7b:56:33:1a:c7:16:39:d0:8e:6f:27:b8:78:f8:4c:39:9c:bb: 32:06:25:dd:33:22:70:f2:60:c9:94:ea:11:3d:c0:d3:74:47: a0:d3:0e:57:b1:95:a5:91:18:63:c8:f0:fc:83:e1:a5:d6:58: f5:85:71:af:e0:72:a2:09:07:f3:8b:7a:13:f7:90:a8:59:e8: e8:d5:78:1f:97:99:9f:3e:25:c4:74:a7:92:6f:1a:2b:d9:4e: 0e:1c:fe:0e:d7:af:50:9c:13:ad:69:d8:56:dc:9e:28:4d:d1: 30:1c:8b:9e:14:c7:f9:ec:a3:49:33:2f:25:38:3c:eb:18:34: b9:41:49:0c:0a:9d:4f:54:cc:8c:d0:d0:f2:2b:2a:b6:64:84: f9:7d:04:a8:37:bb:b9:19:c8:a1:d8:c6:be:08:fd:65:35:4b: 3c:41:25:22:20:d0:65:83:89:0a:e2:fb:fe:f8:1d:0f:38:0d: 7e:3f:9a:54:bd:4c:53:b0:d4:b2:a6:c4:c9:b6:2e:dc:14:e1: c9:ee:21:88 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MkMxMTAvBgNVBAUTKDU4QjRERjhFNDc1N0NBRkRFNTQ2MkY0QTFBRjg3MEZF MjE0NERDNUIwHhcNMjUxMjA0MjEzNTU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmRmZi0wZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhcaOzKAoIX8t5IVVgGeCZz2HcghI5l7t9eAKcMaYNwXXhtq1jtuGeef8YCz QjwxtNCLAl0mosVFlL/ZuA1nPTKZz8D3p96O2v2tmyECbGMAFouZtNWECmSnTW0r PCboGer3AG8TRPthHY9F2D/xm9DgVdUJTnG6mdf4chTJeidEot4vsbOi2NnRAa/Q CvFd3a6YRmk0OuoiNfGtH1cWChNyWR6ngm2tG5gWmwtfAL7ND4AZau+iplXRTkeF bX6V654+YQzO+7N69P8cuqnpwFic1tJbAXkxkndYgdS1Yh0hAMxNdVAbLg/33YLA IjmLobsgIMIDUZd4N9/rXiqDwQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFKkd4eor H7uS0/j0QrVu2UYFwc1wMB8GA1UdIwQYMBaAFFi0345HV8r95UYvShr4cP4hRNxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzcyQy84RUM2MTQwRUMz QUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2M2xSaTlLR3Zod19pRkUz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dMVGZqa2RYeXYzbFJpOUtHdmh3X2lGRTNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3MkMvOEVDNjE0MEVDM0FBMTFFQjg3MEVBOTFDQzRGOUFFMDIvQzJCREY5MTA4 NkVFMTFFRkI1QTZCMzUyQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAAjARAwYAJAG8QKUDBwAkAbxA4wUwDQYJKoZIhvcNAQELBQADggEBADS/BnID blh4W5utK1PzkySMZY8uL09WVu14X+QBAmI539oUmUXJ2vh2/tufDyMthWx/P7Ai yHtWMxrHFjnQjm8nuHj4TDmcuzIGJd0zInDyYMmU6hE9wNN0R6DTDlexlaWRGGPI 8PyD4aXWWPWFca/gcqIJB/OLehP3kKhZ6OjVeB+XmZ8+JcR0p5JvGivZTg4c/g7X r1CcE61p2FbcnihN0TAci54Ux/nso0kzLyU4POsYNLlBSQwKnU9UzIzQ0PIrKrZk hPl9BKg3u7kZyKHYxr4I/WU1SzxBJSIg0GWDiQri+/74HQ84DX4/mlS9TFOw1LKm xMm2LtwU4cnuIYg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:44 2026 by rpki-client