$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa File: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (raw, json) Hash identifier: /bxoDydlBnXQXqec5/Xh6lqt0u+nbWaabKQ7eRpi4K0= Subject key identifier: AF:6E:73:93:68:B9:38:B8:79:B3:18:EE:1E:78:4A:6B:25:CB:39:3B Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: 90 Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:15:59 +0000 ROA not before: Sun 21 Dec 2025 06:25:58 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 38722 IP address blocks: 2001:df3:1b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Dec 21 06:25:58 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4582f-5db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:cf:0d:ed:78:8e:98:37:e8:26:52:e4:e1: 07:bb:db:c1:07:1a:d6:4c:d5:eb:9d:82:1b:74:5b: 00:10:60:c0:e7:45:5d:c0:be:4f:c2:58:c7:25:28: ac:68:c6:7e:78:bd:bf:d8:1d:92:cb:d6:a7:06:fb: 34:29:03:69:6a:dc:56:f2:49:63:c4:13:b1:f8:0f: 66:cc:2b:66:98:6b:5c:f9:d8:bb:a8:23:63:e2:14: a1:b7:8b:46:c8:5f:47:f5:f8:fc:1b:65:63:1d:41: 00:a4:d3:86:2f:c6:90:7c:49:46:34:91:b8:0a:f0: a4:d7:6c:71:f2:c9:ff:3f:52:57:11:1c:79:af:75: f2:af:0b:6a:00:ae:b1:54:d7:1d:e9:c8:04:1d:16: b2:81:8a:0c:38:ad:73:ea:84:c4:fd:02:3b:80:26: a2:8a:86:71:6c:f2:ad:e3:b6:26:b0:44:00:01:ea: 3a:75:9e:20:2a:e8:1b:49:18:9b:d9:1b:16:86:33: ec:c8:b7:3e:6d:aa:1b:23:a2:83:51:27:79:0c:ba: 68:b3:fa:b1:0f:f7:52:2a:e3:b0:28:de:88:6e:64: f0:98:c8:c8:4a:78:8d:2f:b4:c4:db:bb:1d:6c:3a: 27:31:15:6b:de:7a:89:57:94:55:12:e2:b0:f3:e2: 44:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6E:73:93:68:B9:38:B8:79:B3:18:EE:1E:78:4A:6B:25:CB:39:3B X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:1b80::/48 Signature Algorithm: sha256WithRSAEncryption 0a:85:67:23:39:b7:43:bc:6f:8f:b7:85:07:83:e6:eb:74:5d: d2:74:97:e1:c2:25:9a:b5:67:26:25:69:d6:46:a5:66:1d:15: 96:1a:ba:10:33:ff:11:c6:0b:dc:88:9f:c0:91:2a:03:1d:31: 5a:e1:29:c8:b4:8a:1c:58:63:d1:b1:09:77:31:a5:ac:44:af: a5:e0:3e:86:15:b0:8f:2b:05:8d:92:fd:fd:04:ba:c4:db:1a: 44:bf:99:bd:9a:aa:f1:12:ad:76:20:d4:a7:99:38:d0:3f:e5: 5d:58:c8:90:48:0b:88:6b:91:59:4c:5f:a5:8e:f0:30:e7:43: c0:a5:fb:0c:b7:41:1e:dc:48:b5:69:d7:06:e5:64:09:a2:89: ea:5b:9b:33:d5:5b:ff:eb:2b:ed:1b:2b:d5:58:1a:3f:6b:ba: 32:a6:10:a4:dd:cf:7d:62:d3:36:f6:f5:a4:50:95:02:2c:96: 55:a6:fe:a1:78:f9:a5:e5:58:1e:56:69:a5:15:0e:39:78:d6: 92:ff:d2:c6:9d:77:f1:62:e1:ff:f4:af:3b:60:3e:45:0e:0a: 60:47:a8:c7:ae:df:c5:0d:fc:aa:80:18:bd:c1:9d:74:3d:0f: 7d:60:02:17:00:3e:20:b4:df:9a:46:66:ff:1e:3d:5a:4a:ce: f7:10:d9:bd -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVBMjcxMTAvBgNVBAUTKDkyOEU4QUE4MEQ5OUE3MjNGNkE5MDIxQUU1RTdCMDMy QUNFRERCN0EwHhcNMjUxMjIxMDYyNTU4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTgyZi01ZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/TPDe14jpg36CZS5OEHu9vBBxrWTNXrnYIbdFsAEGDA50VdwL5PwljHJSis aMZ+eL2/2B2Sy9anBvs0KQNpatxW8kljxBOx+A9mzCtmmGtc+di7qCNj4hSht4tG yF9H9fj8G2VjHUEApNOGL8aQfElGNJG4CvCk12xx8sn/P1JXERx5r3XyrwtqAK6x VNcd6cgEHRaygYoMOK1z6oTE/QI7gCaiioZxbPKt47YmsEQAAeo6dZ4gKugbSRib 2RsWhjPsyLc+baobI6KDUSd5DLpos/qxD/dSKuOwKN6IbmTwmMjISniNL7TE27sd bDonMRVr3nqJV5RVEuKw8+JEXwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFK9uc5No uTi4ebMY7h54Smslyzk7MB8GA1UdIwQYMBaAFJKOiqgNmacj9qkCGuXnsDKs7dt6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUEyNy85REMyMjA1NDRB NTgxMUYwQjk3NzMxODBDNEY5QUUwMi9rbzZLcUEyWnB5UDJxUUlhNWVld01xenQy M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVBMjcvOURDMjIwNTQ0QTU4MTFGMEI5NzczMTgwQzRGOUFFMDIvNDlCMTRBMjg0 QTVCMTFGMEJCOEJDRDI2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8xuAMA0GCSqGSIb3DQEBCwUAA4IBAQAKhWcjObdDvG+Pt4UH g+brdF3SdJfhwiWatWcmJWnWRqVmHRWWGroQM/8RxgvciJ/AkSoDHTFa4SnItIoc WGPRsQl3MaWsRK+l4D6GFbCPKwWNkv39BLrE2xpEv5m9mqrxEq12INSnmTjQP+Vd WMiQSAuIa5FZTF+ljvAw50PApfsMt0Ee3Ei1adcG5WQJoonqW5sz1Vv/6yvtGyvV WBo/a7oyphCk3c99YtM29vWkUJUCLJZVpv6hePml5VgeVmmlFQ45eNaS/9LGnXfx YuH/9K87YD5FDgpgR6jHrt/FDfyqgBi9wZ10PQ99YAIXAD4gtN+aRmb/Hj1aSs73 ENm9 -----END CERTIFICATE-----Generated at Mon Mar 2 12:24:04 2026 by rpki-client