$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa File: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (raw, json) Hash identifier: dcfhIH+ADMwvtvoD4Y9cayQx//RYelcz4dYD7gy5YCg= Subject key identifier: 49:43:30:DD:2B:E5:54:91:F8:EC:73:13:11:E4:ED:D3:58:40:0D:D8 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0B14 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:46:52 +0000 ROA not before: Mon 10 Mar 2025 20:09:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 56111 IP address blocks: 2001:df3:f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2836 (0xb14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Mar 10 20:09:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4272c-016f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:a3:2a:d4:bb:1e:67:69:1b:01:30:ef:64: 64:39:74:a9:44:99:13:29:9f:7b:e1:64:ce:2d:45: c9:7e:fb:6a:68:92:e0:3c:c1:98:2c:31:f3:97:a0: d7:96:43:9d:ea:d5:fa:60:61:77:84:ad:8d:8e:8c: 59:d8:cc:f4:41:37:d6:79:be:86:51:47:8c:3a:92: 34:16:45:61:89:c6:f2:62:7b:1a:5c:2c:7e:d4:dd: 91:ef:ba:f3:88:6a:71:94:ff:f9:bf:16:26:d6:ce: 2d:6d:ad:0b:c4:87:02:9e:c5:ed:6f:55:9a:e9:42: c8:84:03:de:c8:ab:b8:08:2b:e1:6a:ad:6c:1d:08: 94:77:07:d6:2b:21:be:e7:1a:1f:ed:ed:2c:0a:ab: f2:14:5b:e2:e4:b6:15:4d:2f:ec:7c:f0:48:52:88: ff:1d:eb:ce:5d:6f:02:f4:fe:f0:19:97:59:75:81: ef:1b:c9:e0:8c:84:1b:06:69:c8:4f:6b:e5:40:a0: 03:8d:7b:9a:b9:98:47:8e:29:41:2d:41:fd:5d:7e: 26:80:f8:d6:b4:01:e6:fa:64:63:3c:39:c9:01:e3: 97:17:fa:ac:52:40:d5:8e:38:15:96:5c:b4:7d:8b: ba:b5:28:87:2d:ac:ff:ec:54:a3:45:33:03:b6:ee: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:43:30:DD:2B:E5:54:91:F8:EC:73:13:11:E4:ED:D3:58:40:0D:D8 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:f80::/48 Signature Algorithm: sha256WithRSAEncryption b9:18:8c:33:e9:23:af:95:16:d6:3b:f8:c0:05:39:47:08:6b: 09:6d:92:96:2f:74:8a:e1:99:94:b1:8e:35:73:5c:79:a5:c6: e0:d4:0d:cc:ed:13:2d:16:8b:ec:bf:ce:b5:8d:37:e1:52:81: 94:ff:f9:d9:11:05:d1:41:3a:89:d2:de:22:57:75:13:d9:49: 3f:b3:38:79:79:57:aa:78:c3:21:9b:bd:0d:d0:af:27:58:9b: 56:44:82:0d:c2:8d:1e:9d:3a:d3:b2:9c:02:60:64:de:db:da: d2:d1:06:f9:03:01:ef:f3:b4:66:ab:3c:52:2a:db:6b:2e:e5: ae:ab:99:f3:e7:6b:64:b8:27:c4:e7:6f:b2:5f:4a:ba:1f:0e: 9a:52:3a:99:14:19:e6:a2:ee:9c:0a:37:b9:8f:e2:f1:19:51: 97:2f:b1:2d:f5:66:20:e0:27:ed:27:86:67:f5:02:1b:45:4c: 2a:14:a2:ef:31:be:f7:57:bd:75:f1:0d:66:ef:8c:e9:c0:94: 6d:d8:ff:dd:da:25:7f:98:61:7f:35:30:d5:8b:65:ac:65:a8: 25:a5:36:7f:32:08:d5:4a:a1:f8:13:3a:87:dc:75:98:f8:0c: ae:f3:f2:26:bc:35:d9:f3:ea:e2:cd:ef:6b:d5:5b:de:4d:90: 4f:ce:19:d8 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUwMzEwMjAwOTIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjcyYy0wMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttejKtS7HmdpGwEw72RkOXSpRJkTKZ974WTOLUXJfvtqaJLgPMGYLDHzl6DX lkOd6tX6YGF3hK2NjoxZ2Mz0QTfWeb6GUUeMOpI0FkVhicbyYnsaXCx+1N2R77rz iGpxlP/5vxYm1s4tba0LxIcCnsXtb1Wa6ULIhAPeyKu4CCvhaq1sHQiUdwfWKyG+ 5xof7e0sCqvyFFvi5LYVTS/sfPBIUoj/HevOXW8C9P7wGZdZdYHvG8ngjIQbBmnI T2vlQKADjXuauZhHjilBLUH9XX4mgPjWtAHm+mRjPDnJAeOXF/qsUkDVjjgVlly0 fYu6tSiHLaz/7FSjRTMDtu44DwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFElDMN0r 5VSR+OxzExHk7dNYQA3YMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM0NUIvMjhEODJDODI1RjZFMTFFQTkyNEI5QjgwQzRGOUFFMDIvODg1REFFMzgz QjFDMTFFRUE2REYxMTdBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8w+AMA0GCSqGSIb3DQEBCwUAA4IBAQC5GIwz6SOvlRbWO/jA BTlHCGsJbZKWL3SK4ZmUsY41c1x5pcbg1A3M7RMtFovsv861jTfhUoGU//nZEQXR QTqJ0t4iV3UT2Uk/szh5eVeqeMMhm70N0K8nWJtWRIINwo0enTrTspwCYGTe29rS 0Qb5AwHv87RmqzxSKttrLuWuq5nz52tkuCfE52+yX0q6Hw6aUjqZFBnmou6cCje5 j+LxGVGXL7Et9WYg4CftJ4Zn9QIbRUwqFKLvMb73V7118Q1m74zpwJRt2P/d2iV/ mGF/NTDVi2WsZaglpTZ/MgjVSqH4EzqH3HWY+Ayu8/ImvDXZ8+rize9r1VveTZBP zhnY -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:17 2026 by rpki-client