$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/CBD704945F5F11EFB99ABA76C4F9AE02.roa File: CBD704945F5F11EFB99ABA76C4F9AE02.roa (raw, json) Hash identifier: BXSVEWRNWk6Z5rdKJ6F8tnumvM/u/16zJocy0sihtdo= Subject key identifier: F8:F0:C1:39:E8:13:FD:34:2C:FE:3B:8F:AB:A0:DF:42:B5:51:17:8E Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192 Certificate serial: 0F16 Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/CBD704945F5F11EFB99ABA76C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:48:40 +0000 ROA not before: Mon 18 Aug 2025 17:57:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45275 IP address blocks: 240c::/48 maxlen: 48 240c:6::/48 maxlen: 48 240c:6:1::/48 maxlen: 48 240c:6:3::/48 maxlen: 48 240c:f::/48 maxlen: 48 240c:f:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3862 (0xf16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192 Validity Not Before: Aug 18 17:57:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a5a348-568b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:c6:fc:59:04:ab:a8:c9:03:17:b5:79:88: 5a:32:98:f4:db:54:87:d4:1a:95:3c:28:34:5e:38: 94:93:08:67:14:1b:2a:c2:8a:34:1f:96:f5:cd:ee: 81:a5:9b:d0:cc:76:65:0c:3e:a3:de:1c:29:ee:89: b7:4b:bc:33:88:e7:52:b2:12:6e:49:5b:4d:c0:15: ad:8a:24:db:e7:59:67:e7:11:be:ef:96:0e:58:44: 7e:e5:e2:db:eb:c5:65:09:6d:0a:62:9e:73:c2:c7: 89:11:1f:ec:e0:d0:71:e5:07:ad:8e:5f:61:d3:b6: a6:11:8b:ea:d9:d0:2a:1a:29:fb:54:31:92:5a:d9: 0b:66:9d:99:91:34:f2:b2:30:8b:64:c8:44:08:bc: a1:36:ee:ab:9e:ee:3e:7f:a1:c9:90:8d:f4:45:7a: 4f:f8:d3:db:e7:2d:01:f7:3e:46:b2:84:02:d5:95: 45:f7:4d:3f:02:01:19:5e:5b:f8:a6:c3:53:c0:12: 30:55:2e:1e:ab:9a:c9:65:00:38:dc:8a:37:ba:1f: f0:3e:4d:ea:1c:7e:f5:8d:52:56:eb:4d:91:83:3b: 2c:9b:6c:19:92:da:de:0c:35:d5:31:72:12:41:d7: 6d:7f:7e:6e:da:40:9f:cb:3d:b7:99:a5:f7:a7:8d: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F0:C1:39:E8:13:FD:34:2C:FE:3B:8F:AB:A0:DF:42:B5:51:17:8E X509v3 Authority Key Identifier: keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/CBD704945F5F11EFB99ABA76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 240c::/48 240c:6::/47 240c:6:3::/48 240c:f::/47 Signature Algorithm: sha256WithRSAEncryption 65:64:5e:50:31:55:55:ce:51:9d:4a:80:78:29:ac:f1:00:d2: 46:00:cb:9d:b8:5f:e2:33:8c:aa:ca:aa:e7:53:47:5a:0f:eb: bc:66:6b:c5:21:0d:c0:b1:88:2a:eb:b4:95:1e:32:bb:13:eb: cc:1e:9e:10:86:f9:d1:bc:a5:2e:e5:48:43:d2:51:58:fd:b0: 26:67:88:80:0e:1d:8a:e3:ab:30:57:6b:51:de:b9:9c:b0:eb: 07:2d:46:cc:42:11:c4:b2:d0:c1:90:52:a9:08:bf:0a:fc:dd: 2a:48:04:e0:56:77:e4:8b:99:8e:89:ec:30:9d:90:ca:e1:c2: 05:12:2c:ae:99:65:61:02:83:8d:d0:5e:ae:7c:1c:06:57:56: 99:44:23:ef:6f:8d:f8:9b:3b:7c:7d:95:ba:bb:08:68:87:c3: 79:66:1f:cf:2d:ac:65:09:e4:aa:bb:39:4b:13:0a:1a:55:e0: 09:95:66:0a:39:72:89:77:fb:a7:7d:7c:92:7b:30:36:c7:a3: e0:38:6c:17:fc:d8:35:90:c3:82:0d:a4:65:7c:0b:32:db:06: a3:4c:95:81:45:84:b7:81:f0:35:18:d6:01:83:35:f3:03:c6: d6:76:02:cc:d3:29:ab:4c:a5:cd:8a:e5:0d:25:61:b2:f8:80: e4:ca:c4:12 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICDxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBNkUxMTAvBgNVBAUTKEQwMDY2MTBFQkQ2ODI5Nzg0NTdERjhBREEyOTExMDAx MzM5MTAxOTIwHhcNMjUwODE4MTc1NzUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTM0OC01NjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CTG/FkEq6jJAxe1eYhaMpj021SH1BqVPCg0XjiUkwhnFBsqwoo0H5b1ze6B pZvQzHZlDD6j3hwp7om3S7wziOdSshJuSVtNwBWtiiTb51ln5xG+75YOWER+5eLb 68VlCW0KYp5zwseJER/s4NBx5Qetjl9h07amEYvq2dAqGin7VDGSWtkLZp2ZkTTy sjCLZMhECLyhNu6rnu4+f6HJkI30RXpP+NPb5y0B9z5GsoQC1ZVF900/AgEZXlv4 psNTwBIwVS4eq5rJZQA43Io3uh/wPk3qHH71jVJW602Rgzssm2wZktreDDXVMXIS Qddtf35u2kCfyz23maX3p41d+wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPjwwTno E/00LP47j6ug30K1UReOMB8GA1UdIwQYMBaAFNAGYQ69aCl4RX34raKREAEzkQGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0E2RS83OUVDRTgzODk4 QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tYaEZmZml0b3BFUUFUT1JB WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBWmhEcjFvS1hoRmZmaXRvcEVRQVRPUkFaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBNkUvNzlFQ0U4Mzg5OEJEMTFFOUFDOTlFNzRFQzRGOUFFMDIvQ0JENzA0OTQ1 RjVGMTFFRkI5OUFCQTc2QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAAjAkAwcAJAwAAAAAAwcBJAwABgAAAwcAJAwABgADAwcBJAwADwAAMA0GCSqG SIb3DQEBCwUAA4IBAQBlZF5QMVVVzlGdSoB4KazxANJGAMuduF/iM4yqyqrnU0da D+u8ZmvFIQ3AsYgq67SVHjK7E+vMHp4QhvnRvKUu5UhD0lFY/bAmZ4iADh2K46sw V2tR3rmcsOsHLUbMQhHEstDBkFKpCL8K/N0qSATgVnfki5mOiewwnZDK4cIFEiyu mWVhAoON0F6ufBwGV1aZRCPvb434mzt8fZW6uwhoh8N5Zh/PLaxlCeSquzlLEwoa VeAJlWYKOXKJd/unfXySezA2x6PgOGwX/Ng1kMOCDaRlfAsy2wajTJWBRYS3gfA1 GNYBgzXzA8bWdgLM0ymrTKXNiuUNJWGy+IDkysQS -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:46 2026 by rpki-client