$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/321C6B5C2C6711F0B5DEE20CC4F9AE02.roa File: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (raw, json) Hash identifier: t+j78JKyyGcK9bTbXkrgFsRqm83ni7JvJaxQ5E6oLdk= Subject key identifier: CC:C2:88:79:6E:2F:4E:EA:69:6B:BC:C0:59:BC:A2:FF:F4:AC:D7:CC Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 97 Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/321C6B5C2C6711F0B5DEE20CC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:04:52 +0000 ROA not before: Thu 08 May 2025 23:50:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134090 IP address blocks: 2402:920::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: May 8 23:50:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3e514-a28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:05:35:ba:0c:d1:22:06:ad:48:92:08:d5: 63:0a:7f:cb:64:64:68:90:ff:72:cf:2a:23:2a:bc: f0:26:72:12:5e:25:ef:d6:01:92:cc:c3:90:6a:ee: 19:f4:f0:26:22:5d:c6:7c:54:ff:c0:e3:84:56:8b: 03:9a:e3:e0:99:8e:59:91:7d:49:a3:e3:1c:f4:38: 61:7f:57:4a:46:08:f8:15:9c:f7:a8:05:1a:f7:5a: 19:5e:d6:6d:0a:f7:3e:6f:fb:34:c5:d1:1c:b4:17: 68:28:60:39:ab:5a:9d:df:88:76:c0:45:7b:be:b2: 6d:0d:58:bb:14:33:92:d7:a4:15:4a:d6:ce:30:00: 28:41:51:60:a3:4e:05:35:11:65:0c:03:81:44:fc: e9:08:4b:d7:42:01:bc:3b:2a:b8:71:31:4a:8f:ea: 4e:55:9d:bd:db:6b:30:e1:1d:90:2f:6c:ad:82:89: 20:be:69:a8:1a:78:11:0b:88:30:6a:31:8c:6f:e9: eb:66:32:b6:16:27:fa:38:e7:b7:a0:b2:25:64:bb: 56:60:d9:31:eb:ea:17:12:65:9a:a0:8c:52:b5:a1: 87:13:90:ee:e8:7f:dd:09:7e:cb:86:8e:9e:b0:7f: ef:98:ad:f4:0c:42:69:ea:ed:b5:5c:15:fa:15:18: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C2:88:79:6E:2F:4E:EA:69:6B:BC:C0:59:BC:A2:FF:F4:AC:D7:CC X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/321C6B5C2C6711F0B5DEE20CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:920::/32 Signature Algorithm: sha256WithRSAEncryption 99:48:92:29:90:45:7b:b5:e3:80:30:e6:34:37:8b:26:f8:df: b3:d2:8d:f7:ed:7b:cb:5d:28:04:38:70:82:68:3d:02:39:7c: 09:32:b4:94:b2:ad:de:49:af:e1:f1:ec:51:a3:3d:72:43:10: d2:a4:47:f6:69:2c:55:8a:8a:bb:08:6c:38:11:a1:22:46:65: ce:e6:40:03:16:fe:d1:16:5a:1a:2b:19:cd:6d:93:b2:6d:6c: 55:2c:3d:7d:26:c3:07:d6:f3:80:54:8a:2c:9a:45:a1:ce:42: 90:ca:18:6a:8a:17:43:0e:2b:a9:9c:51:a8:a2:13:2a:93:e7: 1d:9f:fe:36:3c:21:f6:5b:db:50:39:c1:82:a1:9b:62:35:f1: 51:a3:ff:3f:31:72:0f:3f:46:0f:ab:8a:13:66:c1:45:a1:39: 9a:6f:f2:ad:88:74:50:cd:c9:cb:b8:6e:d6:7d:40:38:34:4f: ee:05:54:c1:bf:45:4d:88:2d:7e:49:7c:b1:0c:99:87:11:63: 60:aa:d1:46:cb:95:dc:cc:4a:5a:09:e9:e9:40:81:a7:05:d1: 98:3b:bf:65:b6:58:69:00:a9:52:83:dc:dc:16:a2:f6:89:7a: 13:91:d7:36:4c:48:9a:30:dc:4c:7e:7b:2f:df:be:43:9b:d2: 90:ba:5d:8e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwNDkxMTAvBgNVBAUTKEQ5RDFCMDU1RkVGQzg5RjU4MDNBN0ZBOEUyQjkwMjYx OUYzMzhEOEUwHhcNMjUwNTA4MjM1MDE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTUxNC1hMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4oFNboM0SIGrUiSCNVjCn/LZGRokP9yzyojKrzwJnISXiXv1gGSzMOQau4Z 9PAmIl3GfFT/wOOEVosDmuPgmY5ZkX1Jo+Mc9Dhhf1dKRgj4FZz3qAUa91oZXtZt Cvc+b/s0xdEctBdoKGA5q1qd34h2wEV7vrJtDVi7FDOS16QVStbOMAAoQVFgo04F NRFlDAOBRPzpCEvXQgG8Oyq4cTFKj+pOVZ2922sw4R2QL2ytgokgvmmoGngRC4gw ajGMb+nrZjK2Fif6OOe3oLIlZLtWYNkx6+oXEmWaoIxStaGHE5Du6H/dCX7Lho6e sH/vmK30DEJp6u21XBX6FRjCFwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFMzCiHlu L07qaWu8wFm8ov/0rNfMMB8GA1UdIwQYMBaAFNnRsFX+/In1gDp/qOK5AmGfM42O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9CMDlDQkQ2NjJD NjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlmV0FPbi1vNHJrQ1laOHpq WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDcwNDkvQjA5Q0JENjYyQzY2MTFGMDlEQTU2QjBCQzRGOUFFMDIvMzIxQzZCNUMy QzY3MTFGMEI1REVFMjBDQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAIJIDANBgkqhkiG9w0BAQsFAAOCAQEAmUiSKZBFe7XjgDDmNDeL Jvjfs9KN9+17y10oBDhwgmg9Ajl8CTK0lLKt3kmv4fHsUaM9ckMQ0qRH9mksVYqK uwhsOBGhIkZlzuZAAxb+0RZaGisZzW2Tsm1sVSw9fSbDB9bzgFSKLJpFoc5CkMoY aooXQw4rqZxRqKITKpPnHZ/+Njwh9lvbUDnBgqGbYjXxUaP/PzFyDz9GD6uKE2bB RaE5mm/yrYh0UM3Jy7hu1n1AODRP7gVUwb9FTYgtfkl8sQyZhxFjYKrRRsuV3MxK Wgnp6UCBpwXRmDu/ZbZYaQCpUoPc3Bai9ol6E5HXNkxImjDcTH57L9++Q5vSkLpd jg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:24 2026 by rpki-client