$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa File: 8E6CF9C8E59911E98D355932C4F9AE02.roa (raw, json) Hash identifier: 0JqXWVNYYl5QUi3Ff44dnxQVqYfsFqTw62wHqYfZBwc= Subject key identifier: 9F:D5:10:C8:A3:55:F8:BD:A4:22:1D:32:35:47:F7:94:FF:4A:62:85 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 146D Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:14:09 +0000 ROA not before: Sat 20 Dec 2025 17:14:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139702 IP address blocks: 2403:cfc0:1015::/48 maxlen: 48 2403:cfc0:101c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5229 (0x146d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a58d21-c9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:fd:1a:e0:78:d5:5d:21:82:b8:22:c5:20: 9f:9e:a7:71:56:77:52:72:3c:72:5f:c6:d9:bc:ab: 9a:40:60:aa:33:a6:55:ff:0f:3a:4f:04:79:32:e4: 9e:d5:bd:ed:f0:24:02:5b:b8:bd:cc:d6:5f:f0:02: fc:20:0d:97:fe:1c:e6:f5:ce:1b:3c:66:cb:68:6f: 45:7a:b0:e8:7d:a0:47:e9:da:ac:43:96:42:c0:ed: 2f:74:2e:72:0f:1f:d6:63:16:5c:8c:7c:f3:50:a9: 04:a8:39:25:90:e4:b9:3f:db:77:44:45:70:1f:2a: 0f:82:83:e6:21:05:ed:62:26:eb:68:b2:40:26:b0: 36:99:7a:69:97:bc:01:a2:76:1b:b5:67:29:c5:4b: c7:a1:0c:30:92:85:8f:6f:eb:9c:f6:87:0c:d6:b1: ac:cf:8e:8a:75:5e:2a:5e:c0:9b:af:2e:3a:8b:ea: c3:21:1f:d3:10:71:61:11:35:18:0e:28:63:83:46: 7e:a2:4a:61:5d:0c:23:d2:44:3c:b8:ed:2d:f8:26: b2:5f:0c:e7:2a:c9:65:60:f3:ca:05:99:f4:25:e5: 3f:73:de:fd:dd:74:dd:0b:e1:3d:b9:c5:03:6d:4a: 98:88:02:de:d0:68:61:65:9d:2a:f5:e8:42:32:b1: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D5:10:C8:A3:55:F8:BD:A4:22:1D:32:35:47:F7:94:FF:4A:62:85 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1015::/48 2403:cfc0:101c::/48 Signature Algorithm: sha256WithRSAEncryption 3e:d3:e0:89:22:71:b0:81:f7:bf:35:f9:cb:94:0f:11:dd:08: d2:b7:b0:ae:61:7a:e8:0f:80:02:92:73:80:af:d8:c6:dc:c1: 64:da:c1:df:4c:0d:e0:41:71:b4:df:22:2d:52:2c:a5:a0:ce: 3d:a1:38:8e:9f:04:dc:28:a6:ad:46:37:0c:8d:d5:27:56:a7: 88:86:a5:fc:f3:11:57:58:77:42:52:99:82:8e:d5:eb:d1:da: f8:8b:46:06:b8:8a:ae:83:cf:c7:68:70:ba:85:8c:07:84:0e: c3:ef:04:e0:49:f3:10:b6:4b:e7:cd:36:5a:e8:b8:93:40:09: eb:fa:2e:28:9c:a9:96:93:4d:d5:58:b6:88:85:21:41:8b:5a: f2:e6:34:6e:94:9c:a7:2f:3e:af:e5:c5:0a:4d:a8:b3:47:78: 39:f4:e3:59:6e:e7:a1:70:5a:ff:f9:ae:b0:74:d8:13:53:5a: 35:b2:f2:ae:23:98:1a:2e:37:52:cc:04:bd:53:0e:6d:3f:bb: b2:22:75:36:74:16:96:45:64:b9:3a:2e:a0:02:1e:56:db:89: f0:f9:52:9b:c4:76:e0:2c:10:7b:40:d4:76:fc:1f:47:d9:a6: 39:a4:20:bd:38:b3:85:b0:4e:12:13:6e:aa:ac:e3:b1:b1:9d: bc:da:49:c7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICFG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGQyMS1jOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhFz9GuB41V0hgrgixSCfnqdxVndScjxyX8bZvKuaQGCqM6ZV/w86TwR5MuSe 1b3t8CQCW7i9zNZf8AL8IA2X/hzm9c4bPGbLaG9FerDofaBH6dqsQ5ZCwO0vdC5y Dx/WYxZcjHzzUKkEqDklkOS5P9t3REVwHyoPgoPmIQXtYibraLJAJrA2mXppl7wB onYbtWcpxUvHoQwwkoWPb+uc9ocM1rGsz46KdV4qXsCbry46i+rDIR/TEHFhETUY Dihjg0Z+okphXQwj0kQ8uO0t+CayXwznKsllYPPKBZn0JeU/c9793XTdC+E9ucUD bUqYiALe0GhhZZ0q9ehCMrGPDQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJ/VEMij Vfi9pCIdMjVH95T/SmKFMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvOEU2Q0Y5QzhF NTk5MTFFOThEMzU1OTMyQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAJAPPwBAVAwcAJAPPwBAcMA0GCSqGSIb3DQEBCwUAA4IBAQA+0+CJ InGwgfe/NfnLlA8R3QjSt7CuYXroD4ACknOAr9jG3MFk2sHfTA3gQXG03yItUiyl oM49oTiOnwTcKKatRjcMjdUnVqeIhqX88xFXWHdCUpmCjtXr0dr4i0YGuIqug8/H aHC6hYwHhA7D7wTgSfMQtkvnzTZa6LiTQAnr+i4onKmWk03VWLaIhSFBi1ry5jRu lJynLz6v5cUKTaizR3g59ONZbuehcFr/+a6wdNgTU1o1svKuI5gaLjdSzAS9Uw5t P7uyInU2dBaWRWS5Oi6gAh5W24nw+VKbxHbgLBB7QNR2/B9H2aY5pCC9OLOFsE4S E26qrOOxsZ282knH -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:09 2026 by rpki-client