$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/88A1F6DEE37B11EFB4D75458C4F9AE02.roa File: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (raw, json) Hash identifier: KDGyy/GchxuzslQqk05EAU/7HZtXDChnhvSxOxv70ns= Subject key identifier: 5C:4B:FE:9F:A9:6F:76:5A:27:7A:4F:D9:7F:16:DD:4D:8A:E5:BC:BC Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Certificate serial: C7 Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/88A1F6DEE37B11EFB4D75458C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:58:29 +0000 ROA not before: Wed 05 Feb 2025 04:41:59 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153571 IP address blocks: 2001:df4:f8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Validity Not Before: Feb 5 04:41:59 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3e395-8fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:3c:c3:00:cf:ca:5d:c0:f2:b9:61:01:32: 37:56:b6:15:a2:74:ab:5e:9f:55:5d:6d:52:de:b6: 1f:46:12:19:b8:95:61:e0:d0:34:c5:dc:7c:06:0b: f1:c5:47:d3:ac:78:1d:47:05:10:26:47:8a:93:a9: ae:58:6c:9b:61:8c:7f:35:a0:da:4a:93:96:c8:07: 1b:c7:b4:6f:2e:54:d7:50:db:a8:4e:63:07:00:5c: 6d:6a:e2:f2:e0:a7:66:11:f3:f9:86:9b:76:7b:5b: 46:7d:c3:2c:12:15:15:df:da:15:e3:67:91:48:83: c4:7a:c4:e7:76:b6:c8:36:23:d7:c8:e2:1f:9d:09: 01:88:a5:cd:78:d2:fc:80:90:ec:a5:60:0e:2a:e8: aa:3e:25:87:0c:40:e6:57:9f:f0:28:9e:28:f7:b5: c9:42:ff:80:b7:d1:8b:a6:4f:d0:b6:9e:bb:6c:43: ea:b9:e4:25:76:69:56:27:6b:4a:c4:28:67:d3:a8: 96:a2:fe:80:31:26:20:d0:7f:a7:54:9b:6d:74:59: b8:29:bb:54:6a:63:bf:0a:9a:5f:16:50:71:8f:c1: 88:c9:80:3b:75:92:e8:84:f5:26:00:2f:87:ec:2a: e8:3e:80:4c:e2:64:83:f8:3b:62:3c:cd:e5:84:c2: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4B:FE:9F:A9:6F:76:5A:27:7A:4F:D9:7F:16:DD:4D:8A:E5:BC:BC X509v3 Authority Key Identifier: keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/88A1F6DEE37B11EFB4D75458C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:f8c0::/48 Signature Algorithm: sha256WithRSAEncryption b7:ee:6f:04:da:0a:f3:c5:ea:b7:59:5c:fa:bd:27:f7:38:ee: 2a:23:3a:11:0d:a5:b9:1b:5c:72:ef:fd:61:61:aa:ee:28:02: cb:d3:d8:a5:ac:af:f5:52:fc:10:0f:0f:58:40:ef:c6:ac:33: 24:58:d9:47:1b:4f:46:be:08:48:d3:d0:7a:e3:22:2f:c8:d8: 97:8e:18:cc:40:aa:38:1a:0b:3d:ea:5d:d6:b5:97:86:a8:bd: b9:ec:62:de:43:d5:ab:1b:71:02:c0:5a:ed:3a:98:4d:6e:eb: a6:37:05:9b:0d:2e:a8:27:9c:c1:87:74:f0:04:6e:fd:9d:ed: 74:bb:02:15:5f:27:95:f9:ed:c2:ae:ff:18:fe:6b:5c:6d:d1: 09:61:79:bc:c9:31:30:b1:79:a2:02:f5:5e:ee:53:c5:9c:f2: 58:51:9e:c7:7a:16:52:bc:30:db:8c:9b:fe:35:f1:7e:9a:2e: 33:2f:f3:9f:3f:88:c3:81:b1:2a:05:13:ff:4b:74:33:c1:12: a2:51:ee:d5:f8:9a:c2:8f:ff:1f:84:d5:89:ab:12:37:cd:bc: a6:94:76:29:f9:a4:a0:3b:a1:02:56:bc:9e:06:80:88:70:7b: 5e:d3:f9:c8:55:b3:d3:f5:4b:ce:f4:9a:18:eb:b8:7c:f5:3e: d2:87:83:3a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3OUExMTAvBgNVBAUTKDc1OEFDMkJFREFEQ0JBM0FENzM4MTY5RkIzODlENTA4 QjU0RDc0QkYwHhcNMjUwMjA1MDQ0MTU5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTM5NS04ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIQ8wwDPyl3A8rlhATI3VrYVonSrXp9VXW1S3rYfRhIZuJVh4NA0xdx8Bgvx xUfTrHgdRwUQJkeKk6muWGybYYx/NaDaSpOWyAcbx7RvLlTXUNuoTmMHAFxtauLy 4KdmEfP5hpt2e1tGfcMsEhUV39oV42eRSIPEesTndrbINiPXyOIfnQkBiKXNeNL8 gJDspWAOKuiqPiWHDEDmV5/wKJ4o97XJQv+At9GLpk/Qtp67bEPqueQldmlWJ2tK xChn06iWov6AMSYg0H+nVJttdFm4KbtUamO/CppfFlBxj8GIyYA7dZLohPUmAC+H 7CroPoBM4mSD+DtiPM3lhMJVswIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFxL/p+p b3ZaJ3pP2X8W3U2K5by8MB8GA1UdIwQYMBaAFHWKwr7a3Lo61zgWn7OJ1Qi1TXS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc5QS8yRTEwRURCMkUz NzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9kWXJDdnRyY3VqclhPQmFmczRuVkNMVk5k TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ3OUEvMkUxMEVEQjJFMzc5MTFFRkI0NjY2QjMxQzRGOUFFMDIvODhBMUY2REVF MzdCMTFFRkI0RDc1NDU4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9PjAMA0GCSqGSIb3DQEBCwUAA4IBAQC37m8E2grzxeq3WVz6 vSf3OO4qIzoRDaW5G1xy7/1hYaruKALL09ilrK/1UvwQDw9YQO/GrDMkWNlHG09G vghI09B64yIvyNiXjhjMQKo4Ggs96l3WtZeGqL257GLeQ9WrG3ECwFrtOphNbuum NwWbDS6oJ5zBh3TwBG79ne10uwIVXyeV+e3Crv8Y/mtcbdEJYXm8yTEwsXmiAvVe 7lPFnPJYUZ7HehZSvDDbjJv+NfF+mi4zL/OfP4jDgbEqBRP/S3QzwRKiUe7V+JrC j/8fhNWJqxI3zbymlHYp+aSgO6ECVryeBoCIcHte0/nIVbPT9UvO9JoY67h89T7S h4M6 -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:58 2026 by rpki-client