$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa File: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (raw, json) Hash identifier: EykGpXwalZSOBcmCqBPjJofqYixjM46Qzlbp8WB+N/Q= Subject key identifier: E1:63:9A:CC:CF:C7:F8:FB:BA:03:2B:89:9E:F5:E9:8B:C5:2E:28:52 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0CBD Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:27:46 +0000 ROA not before: Sat 16 Aug 2025 19:30:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 394749 IP address blocks: 2407:b000:4015::/48 maxlen: 48 2407:b001:1010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 16 19:30:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a59052-a8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:c9:3d:fe:ca:b5:18:74:6d:e5:ec:cc:dc: 5c:74:28:1e:8e:5a:85:5a:0e:d7:48:44:49:ea:bb: 8d:4c:a1:32:d3:dd:b3:e5:cd:ca:52:50:fb:9f:af: b0:df:32:c4:1e:80:be:6c:13:2c:34:ab:99:40:5b: f9:e5:fd:30:76:6b:b4:4f:aa:ec:9d:58:60:ac:c0: c7:3c:10:2a:e9:5e:c2:06:97:0b:87:53:0f:f5:47: d1:ed:87:bd:21:d0:fc:f5:81:e8:24:43:d4:1b:3f: 8f:ad:4e:03:3b:20:b9:6c:05:ce:30:43:c4:d3:50: 63:d9:66:51:37:eb:22:d1:cb:a1:55:e3:47:db:cd: e8:04:77:60:f2:c1:0e:64:8d:41:52:25:35:b8:a2: d6:5a:cd:54:cf:a3:15:ca:ca:c4:80:90:5d:fe:69: ff:e2:cd:8f:a9:3a:fc:14:2e:ed:e2:0f:24:28:d8: 71:23:e5:0f:c7:9a:c3:1d:cb:45:24:d3:fe:07:36: 47:58:8a:6b:7b:ef:0a:3d:65:ad:f8:4b:eb:1f:69: a4:dd:d6:7f:d5:7b:a3:ac:80:f4:93:ab:b1:83:d1: aa:ec:89:54:02:f3:15:2d:69:6a:4b:2b:02:e3:2d: 58:04:c8:22:ee:45:51:03:74:82:9f:fe:76:4f:e9: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:9A:CC:CF:C7:F8:FB:BA:03:2B:89:9E:F5:E9:8B:C5:2E:28:52 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/958CC8DA1C2611ECB416AA68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:b000:4015::/48 2407:b001:1010::/48 Signature Algorithm: sha256WithRSAEncryption 18:53:0d:b0:9b:c5:ce:f4:d7:09:87:1c:42:89:ac:97:d8:fd: f1:75:da:ed:ff:f1:0e:10:1c:ba:a5:62:89:09:a1:68:c1:3f: e1:33:82:eb:f5:67:c3:ce:01:42:9f:c0:f6:62:76:ed:64:59: 98:3b:12:d7:17:df:8b:d2:99:d8:79:60:48:32:98:be:f8:78: e5:22:2c:5b:83:33:c0:46:c2:c5:fd:43:30:29:5b:dd:be:70: 46:e7:e6:45:f9:5e:33:67:85:68:05:93:12:5d:4e:d6:ed:78: 06:b3:82:a7:77:3a:8a:7c:03:35:75:09:27:7d:aa:c3:15:3f: 94:6b:b6:e2:22:a5:3b:a5:81:03:9c:03:3f:4f:67:99:71:3f: 94:bf:e2:25:df:93:1a:5b:e1:6f:74:cf:fe:a5:69:66:77:f5: f2:92:f9:8b:fb:2e:c4:3d:b1:4e:cf:fa:86:2a:da:34:89:1c: b2:f4:ec:01:3f:8b:af:eb:81:c9:d6:0f:23:94:34:2b:ff:68: 1e:cf:8b:c2:ca:34:dc:63:54:05:63:81:0f:ef:4a:c7:2f:df: 52:32:ba:56:6b:f2:40:df:a0:25:ac:26:90:10:aa:b8:bc:6c: e7:80:10:e6:7b:b0:47:29:f5:76:dd:19:a1:bd:e1:f7:f0:a7: 30:0d:ea:99 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwODE2MTkzMDA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTA1Mi1hOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16TJPf7KtRh0beXszNxcdCgejlqFWg7XSERJ6ruNTKEy092z5c3KUlD7n6+w 3zLEHoC+bBMsNKuZQFv55f0wdmu0T6rsnVhgrMDHPBAq6V7CBpcLh1MP9UfR7Ye9 IdD89YHoJEPUGz+PrU4DOyC5bAXOMEPE01Bj2WZRN+si0cuhVeNH283oBHdg8sEO ZI1BUiU1uKLWWs1Uz6MVysrEgJBd/mn/4s2PqTr8FC7t4g8kKNhxI+UPx5rDHctF JNP+BzZHWIpre+8KPWWt+EvrH2mk3dZ/1XujrID0k6uxg9Gq7IlUAvMVLWlqSysC 4y1YBMgi7kVRA3SCn/52T+lm6wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOFjmszP x/j7ugMriZ716YvFLihSMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvOTU4Q0M4REEx QzI2MTFFQ0I0MTZBQTY4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAJAewAEAVAwcAJAewARAQMA0GCSqGSIb3DQEBCwUAA4IBAQAYUw2w m8XO9NcJhxxCiayX2P3xddrt//EOEBy6pWKJCaFowT/hM4Lr9WfDzgFCn8D2Ynbt ZFmYOxLXF9+L0pnYeWBIMpi++HjlIixbgzPARsLF/UMwKVvdvnBG5+ZF+V4zZ4Vo BZMSXU7W7XgGs4KndzqKfAM1dQknfarDFT+Ua7biIqU7pYEDnAM/T2eZcT+Uv+Il 35MaW+FvdM/+pWlmd/XykvmL+y7EPbFOz/qGKto0iRyy9OwBP4uv64HJ1g8jlDQr /2gez4vCyjTcY1QFY4EP70rHL99SMrpWa/JA36AlrCaQEKq4vGzngBDme7BHKfV2 3RmhveH38KcwDeqZ -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:38 2026 by rpki-client