$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/3CDB97F6B03911F09A54BE60C4F9AE02.roa File: 3CDB97F6B03911F09A54BE60C4F9AE02.roa (raw, json) Hash identifier: XYYEp4+pWJhBAcllf1jrqLk0LM79mrzc460EAtwHUUw= Subject key identifier: 5D:0D:63:6D:E5:AC:90:5D:BF:66:57:FA:68:5B:D4:F6:A2:F7:48:DF Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Certificate serial: 043D Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/3CDB97F6B03911F09A54BE60C4F9AE02.roa Signing time: Sat 25 Jul 2026 01:50:02 +0000 ROA not before: Sat 25 Jul 2026 01:50:02 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 149311 IP address blocks: 2001:df0:c240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 01:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Validity Not Before: Jul 25 01:50:02 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a64164a-939a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:84:50:72:8d:60:b6:2b:2c:d5:6c:1b:52: 53:14:45:a9:b4:aa:14:41:39:12:58:77:1c:a6:2a: 86:8b:53:c1:3c:52:84:5d:90:eb:bb:57:8e:38:af: 9b:2e:1d:2d:28:3f:ba:08:b3:a3:43:6a:ad:26:16: 01:5a:bb:ff:68:de:48:d8:a2:7a:0c:19:ef:87:65: b4:eb:db:fa:23:13:84:b1:27:2e:2f:30:2e:72:7c: c6:6a:89:df:12:fc:1a:e6:85:0a:f3:93:96:a7:f1: 07:53:aa:57:f9:78:88:ff:b5:44:cf:7f:75:fd:d5: 95:f2:e2:09:b8:30:c3:97:3e:c5:96:ce:55:26:67: 27:f9:2e:63:4c:ec:90:57:92:13:e4:2d:0c:55:fb: b8:48:77:c4:a2:0f:fa:0f:88:55:13:62:2b:4c:4d: 38:47:b3:87:b6:e7:bc:9a:7f:91:b3:41:05:b1:e9: 69:85:93:1a:f1:1e:54:14:ef:fb:5c:bb:c6:67:4b: ca:ea:21:08:fd:e5:0b:c3:72:68:77:46:49:1c:a7: c8:a8:fa:cf:57:c4:4a:50:da:72:99:69:d6:5f:f8: 9b:3e:d7:da:51:95:19:b6:72:4d:de:ce:ab:8f:a7: 58:44:6f:a3:6f:ba:e2:c7:9f:e7:3e:01:01:20:94: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:63:6D:E5:AC:90:5D:BF:66:57:FA:68:5B:D4:F6:A2:F7:48:DF X509v3 Authority Key Identifier: keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/3CDB97F6B03911F09A54BE60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:c240::/48 Signature Algorithm: sha256WithRSAEncryption 4c:12:bd:29:6e:1d:eb:4a:6c:92:5b:36:bc:e7:09:3f:b8:18: b4:71:f0:43:20:e9:6d:00:51:c0:96:2a:7b:ea:d5:bd:41:78: 2d:ef:dd:3b:3f:7c:36:e8:37:2f:17:ab:65:cc:ec:f5:f2:fd: 60:5e:67:e3:41:eb:0a:9d:94:16:b7:30:89:57:a9:50:e1:5e: af:25:99:8d:38:e6:12:39:b9:7a:8d:a0:c5:45:26:26:4a:1b: 57:cb:83:4a:5e:26:dc:bf:55:8c:01:d5:98:66:f7:a7:69:22: 62:99:c4:db:bb:d5:61:18:ac:c9:f7:17:ad:ac:d8:b2:a6:80: 14:fb:54:6e:23:b8:5d:16:5e:73:a1:8b:fe:80:92:73:24:2d: 83:d2:57:46:50:b5:8e:07:9d:59:2f:9a:04:67:84:75:60:ad: ae:e0:34:e0:e7:28:15:f8:0d:81:c2:d7:9c:96:f9:78:58:28: b0:10:37:d9:d5:df:96:28:6d:68:56:e0:e0:f3:c0:b1:f2:ca: 9b:42:0e:58:c1:00:f0:8f:11:ec:2f:b7:83:07:32:05:10:34: 3e:2a:5f:87:5c:e4:98:f1:55:b9:f1:ea:72:da:a0:a9:f6:4b: 8c:a3:b9:72:39:ad:9b:2b:3c:6c:85:12:30:a9:f7:8c:4a:19: 78:90:74:bb -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1QjExMTAvBgNVBAUTKERGREMzQURCMzNDQUE4NTkxRUZBRjI3NzZDM0IwQzU1 NkMwOEEyQjYwHhcNMjYwNzI1MDE1MDAyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY0MTY0YS05MzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPCEUHKNYLYrLNVsG1JTFEWptKoUQTkSWHccpiqGi1PBPFKEXZDru1eOOK+b Lh0tKD+6CLOjQ2qtJhYBWrv/aN5I2KJ6DBnvh2W069v6IxOEsScuLzAucnzGaonf Evwa5oUK85OWp/EHU6pX+XiI/7VEz391/dWV8uIJuDDDlz7Fls5VJmcn+S5jTOyQ V5IT5C0MVfu4SHfEog/6D4hVE2IrTE04R7OHtue8mn+Rs0EFselphZMa8R5UFO/7 XLvGZ0vK6iEI/eULw3Jod0ZJHKfIqPrPV8RKUNpymWnWX/ibPtfaUZUZtnJN3s6r j6dYRG+jb7rix5/nPgEBIJRBQQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFF0NY23l rJBdv2ZX+mhb1Pai90jfMB8GA1UdIwQYMBaAFN/cOtszyqhZHvryd2w7DFVsCKK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjVCMS9FRDYyOUYwQ0Q3 RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FGa2UtdkozYkRzTVZXd0lv clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM5dzYyelBLcUZrZS12SjNiRHNNVld3SW9yWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1QjEvRUQ2MjlGMENEN0U4MTFFQzkyQTk0RjRDQzRGOUFFMDIvM0NEQjk3RjZC MDM5MTFGMDlBNTRCRTYwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8MJAMA0GCSqGSIb3DQEBCwUAA4IBAQBMEr0pbh3rSmySWza8 5wk/uBi0cfBDIOltAFHAlip76tW9QXgt7907P3w26DcvF6tlzOz18v1gXmfjQesK nZQWtzCJV6lQ4V6vJZmNOOYSObl6jaDFRSYmShtXy4NKXibcv1WMAdWYZvenaSJi mcTbu9VhGKzJ9xetrNiypoAU+1RuI7hdFl5zoYv+gJJzJC2D0ldGULWOB51ZL5oE Z4R1YK2u4DTg5ygV+A2Bwteclvl4WCiwEDfZ1d+WKG1oVuDg88Cx8sqbQg5YwQDw jxHsL7eDBzIFEDQ+Kl+HXOSY8VW58epy2qCp9kuMo7lyOa2bKzxshRIwqfeMShl4 kHS7 -----END CERTIFICATE-----Generated at Wed Jul 29 07:48:10 2026 by rpki-client