$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa File: 08B9DE4CD40B11F0B7778216C4F9AE02.roa (raw, json) Hash identifier: pQ2/r9TVxsT9sincpYfJ2ROvljz4U4zxiRmcX+U9iPk= Subject key identifier: 88:CB:F2:C3:D3:8C:DA:92:2E:8C:78:91:94:79:97:BB:BB:50:9C:DC Certificate issuer: /CN=A913FA2D/serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E Certificate serial: 33 Authority key identifier: 7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa Signing time: Sun 01 Mar 2026 05:58:09 +0000 ROA not before: Mon 08 Dec 2025 07:53:51 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152685 IP address blocks: 2001:df6:6840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA2D, serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E Validity Not Before: Dec 8 07:53:51 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d571-a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:1d:e3:3d:b5:f9:0f:30:2e:21:35:64:9f: 3b:92:ee:43:db:1d:26:8e:85:89:19:a0:5f:d8:76: b4:ab:05:e4:0d:90:48:eb:f1:1d:58:00:c8:27:36: 80:bb:d2:17:a0:4a:5a:e1:f2:84:4a:0b:ba:01:72: 8c:93:4a:09:47:f9:1c:cc:46:f4:86:7e:6d:4e:d3: d3:f8:0d:e7:c3:c7:ea:99:10:8e:82:03:90:94:8a: 2e:69:2e:8c:13:a2:f7:ad:24:8c:ca:93:13:13:0a: 1a:0b:68:0b:dc:ca:d5:cc:eb:cf:4d:48:c0:42:f4: 02:85:0f:c8:91:5b:b4:54:75:7e:20:e7:e8:a2:29: 44:8f:75:1f:4f:21:d7:02:14:3a:71:d7:1e:47:86: 76:85:3a:6c:1a:36:7f:77:b5:17:b0:7f:ed:8c:8a: 31:01:47:f4:e6:75:5a:f0:41:c6:1c:fb:e1:17:d6: ea:96:85:19:aa:53:15:8d:d7:5b:4b:66:ea:49:69: cd:7f:4d:a9:fc:71:08:18:1b:44:77:0e:1b:1d:ce: 56:bf:77:81:cb:cb:94:ad:01:5d:f0:75:79:86:e4: 3c:44:68:ef:54:0f:7e:35:62:b1:d6:f1:3d:e5:81: 4d:80:af:33:03:60:e0:6f:ac:ec:dc:c7:de:41:af: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CB:F2:C3:D3:8C:DA:92:2E:8C:78:91:94:79:97:BB:BB:50:9C:DC X509v3 Authority Key Identifier: keyid:7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:6840::/48 Signature Algorithm: sha256WithRSAEncryption 3a:83:e6:43:c5:80:0d:41:69:9c:10:20:20:99:f1:49:f4:32: 01:31:ba:ff:75:73:d0:d1:8b:80:0f:fa:e5:1c:0f:9b:a9:3e: 8a:b9:0e:d3:f5:34:1c:f5:e9:ac:12:6d:d5:a0:84:0c:fb:e7: bf:82:b8:19:4c:35:ef:79:35:f8:7e:43:45:26:32:43:5c:ae: cd:37:c3:48:dd:79:c8:47:44:3b:fb:87:43:c9:3b:5c:5d:23: c9:a7:77:73:35:8c:e6:d3:a4:45:02:40:86:29:dc:6c:63:83: 93:76:e0:97:ee:37:e1:98:7a:1c:86:3a:7a:56:f2:f1:f6:29: ad:78:f9:ed:9d:89:d5:e5:f6:8a:f3:4b:5e:5a:f3:02:66:13: 05:39:1b:41:c7:6f:85:27:c3:a3:ca:db:72:17:36:f8:60:2a: 30:79:48:14:bb:51:59:cd:63:0c:70:7b:02:de:60:68:c5:54: e4:cf:99:99:d2:2c:fb:04:af:c8:82:0f:8f:89:59:fb:34:08: 2a:d4:b0:77:db:97:8c:ef:e7:0e:dd:ef:cc:95:d3:bd:5a:df: 06:fa:3e:8c:dd:53:3c:51:8a:6e:b7:67:be:eb:af:fc:f9:96: 0f:56:19:8c:8a:aa:f6:01:dc:06:0c:00:35:14:ea:23:7c:b8: af:69:45:66 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkEyRDExMC8GA1UEBRMoN0U0RkM3Qjk0NERDODA5QThCMUM3MUZGMjE4Q0ZCOTk1 RENDOTUzRTAeFw0yNTEyMDgwNzUzNTFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNTcxLWE3MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCshB3jPbX5DzAuITVknzuS7kPbHSaOhYkZoF/YdrSrBeQNkEjr8R1YAMgnNoC7 0hegSlrh8oRKC7oBcoyTSglH+RzMRvSGfm1O09P4DefDx+qZEI6CA5CUii5pLowT ovetJIzKkxMTChoLaAvcytXM689NSMBC9AKFD8iRW7RUdX4g5+iiKUSPdR9PIdcC FDpx1x5HhnaFOmwaNn93tRewf+2MijEBR/TmdVrwQcYc++EX1uqWhRmqUxWN11tL ZupJac1/Tan8cQgYG0R3Dhsdzla/d4HLy5StAV3wdXmG5DxEaO9UD341YrHW8T3l gU2ArzMDYOBvrOzcx95Br5lhAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUiMvyw9OM 2pIujHiRlHmXu7tQnNwwHwYDVR0jBBgwFoAUfk/HuUTcgJqLHHH/IYz7mV3MlT4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGQTJEL0M5MUVFOEEyRDIw NDExRjA4RDRGQjAxOUM0RjlBRTAyL2ZrX0h1VVRjZ0pxTEhISF9JWXo3bVYzTWxU NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmtfSHVVVGNnSnFMSEhIX0lZejdtVjNNbFQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkEyRC9DOTFFRThBMkQyMDQxMUYwOEQ0RkIwMTlDNEY5QUUwMi8wOEI5REU0Q0Q0 MEIxMUYwQjc3NzgyMTZDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32aEAwDQYJKoZIhvcNAQELBQADggEBADqD5kPFgA1BaZwQICCZ 8Un0MgExuv91c9DRi4AP+uUcD5upPoq5DtP1NBz16awSbdWghAz757+CuBlMNe95 Nfh+Q0UmMkNcrs03w0jdechHRDv7h0PJO1xdI8mnd3M1jObTpEUCQIYp3Gxjg5N2 4JfuN+GYehyGOnpW8vH2Ka14+e2didXl9orzS15a8wJmEwU5G0HHb4Unw6PK23IX NvhgKjB5SBS7UVnNYwxwewLeYGjFVOTPmZnSLPsEr8iCD4+JWfs0CCrUsHfbl4zv 5w7d78yV071a3wb6PozdUzxRim63Z77rr/z5lg9WGYyKqvYB3AYMADUU6iN8uK9p RWY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:40 2026 by rpki-client