$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/3CDB97F6B03911F09A54BE60C4F9AE02.roa File: 3CDB97F6B03911F09A54BE60C4F9AE02.roa (raw, json) Hash identifier: ub1/IpzR6a2eFu+k1eQE363sBtNpdMipe2SlnT7hz+w= Subject key identifier: A4:08:F5:D3:82:EA:69:86:75:A7:97:6C:4F:1F:2D:78:14:07:96:51 Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Certificate serial: 03EC Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/3CDB97F6B03911F09A54BE60C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:56:07 +0000 ROA not before: Thu 23 Oct 2025 17:53:54 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149311 IP address blocks: 2001:df0:c240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Validity Not Before: Oct 23 17:53:54 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47db7-7893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:95:02:6c:c0:50:75:1e:48:eb:bb:0e:d6: a0:b7:ca:8b:38:33:90:4a:87:a9:b6:63:b7:c7:18: 61:e5:81:4e:15:d3:c7:79:90:c0:d4:ca:8c:92:c3: 54:76:4b:fc:9a:73:48:d7:64:0d:3e:b6:95:87:b8: 10:a6:be:3d:1d:af:56:d6:2d:55:1a:0a:f3:89:82: 55:d8:14:c2:5f:e3:d9:31:89:09:e9:39:12:44:a1: c7:4d:cf:de:5b:b9:23:5c:0c:2f:c3:ce:64:5e:42: 7e:7c:9f:20:6b:7f:72:6c:20:f1:05:26:50:4e:cd: d7:73:e2:bb:e9:69:a5:ea:ac:0e:7d:82:33:c8:16: 8d:9d:20:98:c1:e8:b4:ce:03:b2:33:8a:91:8f:8f: fa:2b:e8:2d:f7:4d:30:cf:24:ca:ab:71:0a:36:d2: c6:28:09:5d:0e:7f:32:ea:98:78:56:e5:e5:c5:28: fe:9d:19:d4:b1:47:33:4e:f6:89:5a:40:6b:dc:2d: 9d:41:a8:95:e9:38:66:29:c4:54:78:18:41:5b:b6: 54:33:a6:0d:0d:d9:a7:f7:4a:87:b7:cc:96:84:20: f9:bd:ff:e5:57:55:0d:f9:43:a6:8a:d9:18:ff:94: 4f:e9:56:dd:a2:0b:83:b9:cb:8e:75:fb:95:39:75: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:08:F5:D3:82:EA:69:86:75:A7:97:6C:4F:1F:2D:78:14:07:96:51 X509v3 Authority Key Identifier: keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/3CDB97F6B03911F09A54BE60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:c240::/48 Signature Algorithm: sha256WithRSAEncryption 4f:7f:39:02:7f:5b:5f:ca:13:31:dd:e2:9f:7d:49:e4:e6:01: 5a:5d:31:14:9f:3e:64:98:83:e3:f7:e2:60:3b:f8:80:cd:23: 21:9b:8b:55:dc:56:76:01:a6:b9:36:d6:26:b5:e4:e9:c7:57: 05:ce:85:13:86:db:ec:7a:81:e5:2d:f6:d0:e3:0b:32:42:22: 73:2f:a6:a2:7b:7f:c1:56:24:60:4f:9a:a7:1d:68:f9:b3:cb: d6:11:c8:bf:7f:0e:70:91:ff:22:29:1a:a9:0a:ba:dc:7f:5c: 44:9f:a7:d6:a9:71:49:2a:56:32:b5:0c:99:0d:82:df:37:37: 1f:0b:6b:6d:28:32:f2:22:c7:eb:26:50:53:4a:24:b4:43:89: 4c:3d:f6:5d:16:99:22:96:a5:7b:6e:f5:5c:8e:a8:4b:3c:3b: 9a:8b:0a:64:49:f5:0a:f1:a8:34:1d:eb:d0:9c:61:3b:2a:a8: 75:46:65:2b:be:92:f2:a2:aa:b6:ba:56:53:9a:91:de:c5:f7: f6:27:28:f5:cc:ba:d2:18:19:8b:c6:8b:50:49:40:e7:16:26: ec:a1:f8:88:5a:0b:fd:f7:65:8c:79:3a:22:18:09:51:04:4a: 50:68:03:9c:57:4e:a0:2f:ed:67:21:dc:56:8c:fa:bd:24:1e: 23:bc:95:9a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1QjExMTAvBgNVBAUTKERGREMzQURCMzNDQUE4NTkxRUZBRjI3NzZDM0IwQzU1 NkMwOEEyQjYwHhcNMjUxMDIzMTc1MzU0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2RiNy03ODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttaVAmzAUHUeSOu7Dtagt8qLODOQSoeptmO3xxhh5YFOFdPHeZDA1MqMksNU dkv8mnNI12QNPraVh7gQpr49Ha9W1i1VGgrziYJV2BTCX+PZMYkJ6TkSRKHHTc/e W7kjXAwvw85kXkJ+fJ8ga39ybCDxBSZQTs3Xc+K76Wml6qwOfYIzyBaNnSCYwei0 zgOyM4qRj4/6K+gt900wzyTKq3EKNtLGKAldDn8y6ph4VuXlxSj+nRnUsUczTvaJ WkBr3C2dQaiV6ThmKcRUeBhBW7ZUM6YNDdmn90qHt8yWhCD5vf/lV1UN+UOmitkY /5RP6VbdoguDucuOdfuVOXXpiwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKQI9dOC 6mmGdaeXbE8fLXgUB5ZRMB8GA1UdIwQYMBaAFN/cOtszyqhZHvryd2w7DFVsCKK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjVCMS9FRDYyOUYwQ0Q3 RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FGa2UtdkozYkRzTVZXd0lv clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM5dzYyelBLcUZrZS12SjNiRHNNVld3SW9yWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1QjEvRUQ2MjlGMENEN0U4MTFFQzkyQTk0RjRDQzRGOUFFMDIvM0NEQjk3RjZC MDM5MTFGMDlBNTRCRTYwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8MJAMA0GCSqGSIb3DQEBCwUAA4IBAQBPfzkCf1tfyhMx3eKf fUnk5gFaXTEUnz5kmIPj9+JgO/iAzSMhm4tV3FZ2Aaa5NtYmteTpx1cFzoUThtvs eoHlLfbQ4wsyQiJzL6aie3/BViRgT5qnHWj5s8vWEci/fw5wkf8iKRqpCrrcf1xE n6fWqXFJKlYytQyZDYLfNzcfC2ttKDLyIsfrJlBTSiS0Q4lMPfZdFpkilqV7bvVc jqhLPDuaiwpkSfUK8ag0HevQnGE7Kqh1RmUrvpLyoqq2ulZTmpHexff2Jyj1zLrS GBmLxotQSUDnFibsofiIWgv992WMeToiGAlRBEpQaAOcV06gL+1nIdxWjPq9JB4j vJWa -----END CERTIFICATE-----Generated at Mon Mar 2 09:55:55 2026 by rpki-client