$ rpki-client -vvf rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/21F007E0F5FF11F0A5E3E8DF536F56BC.roa File: 21F007E0F5FF11F0A5E3E8DF536F56BC.roa (raw, json) Hash identifier: K3jSyxq8p/3+7DJVFIJng13juLUKHPhs4uBeYZ3/TD0= Subject key identifier: D1:69:8F:56:FC:66:5B:B1:7C:23:9D:C5:40:77:3D:5B:70:70:26:7E Certificate issuer: /CN=A9154515/serialNumber=43FBDDD5DB779A6B1EC48B3637FA97B318665B1B Certificate serial: 1D Authority key identifier: 43:FB:DD:D5:DB:77:9A:6B:1E:C4:8B:36:37:FA:97:B3:18:66:5B:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/21F007E0F5FF11F0A5E3E8DF536F56BC.roa Signing time: Sun 01 Mar 2026 05:44:00 +0000 ROA not before: Tue 03 Feb 2026 08:26:32 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142647 IP address blocks: 2001:df6:9b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.crl rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154515, serialNumber=43FBDDD5DB779A6B1EC48B3637FA97B318665B1B Validity Not Before: Feb 3 08:26:32 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3d220-aa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:20:05:bd:6c:d2:5e:74:7d:ae:12:78:e1:c5: 18:d5:f3:95:e3:81:64:09:aa:6f:e3:b4:6a:be:23: 5f:c3:9d:28:d5:73:06:c7:02:7f:98:bf:4b:dc:2e: 58:1b:4f:30:51:b2:82:60:98:be:14:0f:85:df:11: 26:0a:76:54:fa:3d:34:aa:34:df:54:47:81:ec:7b: 00:21:5c:05:20:1b:05:6e:61:3a:08:25:c5:e6:1c: 80:d2:72:69:e1:f0:b2:9b:3e:5f:a7:02:2f:ba:94: b3:11:27:7e:f9:d6:b2:db:5d:d6:d7:5f:9a:71:94: 09:0a:a6:c3:82:9a:18:e9:8c:22:fd:9d:d6:b5:1f: 3b:41:5a:ff:5e:48:9b:3f:80:7d:03:3d:c2:92:7d: 32:8d:82:97:67:48:92:5e:73:48:81:83:83:20:aa: bd:e7:0d:7e:6d:9e:ea:5e:c3:2a:ce:fe:4e:76:dc: a7:01:1e:cc:e7:2d:9f:8e:50:df:2c:0a:8c:f8:72: 8b:bf:6d:89:c5:5e:2d:bc:43:6c:1b:2a:41:3d:3c: df:d8:d9:1c:f6:b0:93:27:18:3d:e9:9a:c6:cc:45: 76:4a:55:46:d4:7c:4b:36:7e:32:e2:50:4b:f4:12: 6a:46:57:5e:d6:fb:71:e2:79:73:5c:18:e9:bd:34: 54:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:69:8F:56:FC:66:5B:B1:7C:23:9D:C5:40:77:3D:5B:70:70:26:7E X509v3 Authority Key Identifier: keyid:43:FB:DD:D5:DB:77:9A:6B:1E:C4:8B:36:37:FA:97:B3:18:66:5B:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/21F007E0F5FF11F0A5E3E8DF536F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:9b40::/48 Signature Algorithm: sha256WithRSAEncryption 46:91:72:56:62:c4:1b:7e:15:92:f4:76:5b:bc:14:32:36:4d: 3b:d3:19:21:0e:09:1a:fe:7d:6c:1a:e5:87:1e:bb:26:ee:9f: 0a:97:2c:92:76:83:ed:95:0c:c6:35:de:f3:a7:6a:a2:e6:da: 6a:ef:29:83:ac:5a:d0:fa:4b:7c:26:d6:12:5f:60:e4:4a:31: fe:50:3a:b4:2b:0c:02:e3:f7:ed:25:9f:71:d2:59:44:e4:40: 35:2b:06:8b:b9:9d:75:8a:38:0b:00:13:43:2f:59:34:c3:57: a3:98:60:5d:f0:cd:a1:46:a2:1e:7a:d0:d3:fa:18:f6:39:67: 7c:0d:9f:60:34:ab:a6:4d:83:72:4a:23:9b:42:b2:7a:80:90: ce:58:67:fb:ae:5c:15:16:8a:48:53:2d:be:a1:29:91:a6:f8: ea:80:e7:f7:87:40:53:5c:1d:38:42:7b:fb:38:84:6d:18:03: 43:81:91:10:cb:f9:f4:4f:11:04:3c:7f:dc:12:0a:7a:00:49: b9:cf:da:4f:c4:c9:95:28:be:b5:7c:ba:2f:f9:31:f3:40:8b: 7f:51:c2:d6:67:71:c6:0e:ea:b7:d3:28:42:75:d2:f2:c5:cf: 3f:cc:99:2b:38:08:b8:4b:7d:e2:67:a5:2b:da:47:f3:da:c7: 53:a7:0c:43 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDUxNTExMC8GA1UEBRMoNDNGQkRERDVEQjc3OUE2QjFFQzQ4QjM2MzdGQTk3QjMx ODY2NUIxQjAeFw0yNjAyMDMwODI2MzJaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMjIwLWFhNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbIAW9bNJedH2uEnjhxRjV85XjgWQJqm/jtGq+I1/DnSjVcwbHAn+Yv0vcLlgb TzBRsoJgmL4UD4XfESYKdlT6PTSqNN9UR4HsewAhXAUgGwVuYToIJcXmHIDScmnh 8LKbPl+nAi+6lLMRJ3751rLbXdbXX5pxlAkKpsOCmhjpjCL9nda1HztBWv9eSJs/ gH0DPcKSfTKNgpdnSJJec0iBg4Mgqr3nDX5tnupewyrO/k523KcBHsznLZ+OUN8s Coz4cou/bYnFXi28Q2wbKkE9PN/Y2Rz2sJMnGD3pmsbMRXZKVUbUfEs2fjLiUEv0 EmpGV17W+3HieXNcGOm9NFTRAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQU0WmPVvxm W7F8I53FQHc9W3BwJn4wHwYDVR0jBBgwFoAUQ/vd1dt3mmsexIs2N/qXsxhmWxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NTE1Lzc4OEM3NzA2RjVG RTExRjA5MURCMENERTUzNkY1NkJDL1FfdmQxZHQzbW1zZXhJczJOX3FYc3hobVd4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUV92ZDFkdDNtbXNleElzMk5fcVhzeGhtV3hzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxNS83ODhDNzcwNkY1RkUxMUYwOTFEQjBDREU1MzZGNTZCQy8yMUYwMDdFMEY1 RkYxMUYwQTVFM0U4REY1MzZGNTZCQy5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32m0AwDQYJKoZIhvcNAQELBQADggEBAEaRclZixBt+FZL0dlu8 FDI2TTvTGSEOCRr+fWwa5YceuybunwqXLJJ2g+2VDMY13vOnaqLm2mrvKYOsWtD6 S3wm1hJfYORKMf5QOrQrDALj9+0ln3HSWUTkQDUrBou5nXWKOAsAE0MvWTTDV6OY YF3wzaFGoh560NP6GPY5Z3wNn2A0q6ZNg3JKI5tCsnqAkM5YZ/uuXBUWikhTLb6h KZGm+OqA5/eHQFNcHThCe/s4hG0YA0OBkRDL+fRPEQQ8f9wSCnoASbnP2k/EyZUo vrV8ui/5MfNAi39RwtZnccYO6rfTKEJ10vLFzz/MmSs4CLhLfeJnpSvaR/Pax1On DEM= -----END CERTIFICATE-----Generated at Mon Mar 2 07:37:16 2026 by rpki-client