$ rpki-client -vvf rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/85CAF6160B3B11F185A1FC3F063D8C67.roa File: 85CAF6160B3B11F185A1FC3F063D8C67.roa (raw, json) Hash identifier: WBgwzD/CjfDPglIN1XEYd4/5WhM8OoaoxSUyq6BRdcI= Subject key identifier: 83:2C:49:08:95:95:B3:33:B5:5C:B0:DD:71:72:41:5D:76:F5:E2:AB Certificate issuer: /CN=A915BD82/serialNumber=4B9B24CD33C1F432991B1A95C09EA208CBE5F7DB Certificate serial: 0D Authority key identifier: 4B:9B:24:CD:33:C1:F4:32:99:1B:1A:95:C0:9E:A2:08:CB:E5:F7:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/85CAF6160B3B11F185A1FC3F063D8C67.roa Signing time: Sun 01 Mar 2026 05:35:29 +0000 ROA not before: Mon 16 Feb 2026 13:29:30 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 149783 IP address blocks: 2001:df6:b340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.crl rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BD82, serialNumber=4B9B24CD33C1F432991B1A95C09EA208CBE5F7DB Validity Not Before: Feb 16 13:29:30 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a3d020-ec94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ab:d0:85:fb:a5:c2:c2:63:69:7b:6b:1c:90: 30:55:73:1c:3a:a1:5f:d8:83:e7:c1:8e:da:0c:26: b8:6e:90:f8:09:1d:84:0d:4c:ef:2b:58:e7:34:e3: 35:65:8e:5b:ff:6f:49:63:8c:5d:72:ce:c5:cf:6d: ec:85:c2:85:7e:4f:66:99:e6:98:3d:d3:30:a4:35: c4:32:3c:ac:8f:37:23:d8:3d:c6:ef:5e:6b:49:0c: bf:35:51:fb:0a:97:37:4b:d9:01:78:c2:be:e4:c0: 75:1c:2b:24:24:8a:54:5c:6a:75:9c:19:97:ca:2c: fd:00:57:de:41:97:d0:2f:27:7c:59:5a:19:0e:17: c2:d5:1f:8a:c4:4b:16:aa:45:75:f5:35:05:8a:15: d0:ce:19:3e:e0:90:d2:fb:0d:c0:b6:76:06:1b:33: 9e:80:14:61:7a:e5:18:f9:7d:99:6d:86:b9:eb:f5: 22:67:f4:93:d1:40:0c:21:9e:ce:22:66:ab:db:5b: 63:60:cc:1c:1d:43:a6:52:2c:e4:22:b2:cf:e8:07: bd:18:fe:30:be:83:c8:42:7e:0a:e8:90:2b:7d:4c: 99:13:42:9f:b3:79:94:10:9a:6f:08:ca:1f:04:a2: f9:81:33:f5:4c:25:cf:87:2a:0a:de:3d:6b:ee:7b: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2C:49:08:95:95:B3:33:B5:5C:B0:DD:71:72:41:5D:76:F5:E2:AB X509v3 Authority Key Identifier: keyid:4B:9B:24:CD:33:C1:F4:32:99:1B:1A:95:C0:9E:A2:08:CB:E5:F7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/85CAF6160B3B11F185A1FC3F063D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:b340::/48 Signature Algorithm: sha256WithRSAEncryption 5c:e5:e6:5a:bd:5c:1a:78:fb:15:8f:10:ce:07:9d:8b:97:8f: bf:85:d2:2b:d2:d9:01:e5:6a:5f:83:9d:24:8d:cf:12:f3:0b: 81:cb:98:eb:e7:da:38:2d:f9:1f:2b:c0:01:85:fa:f6:53:f0: a0:e5:ba:a8:a6:09:86:08:c2:0e:f2:77:1a:f0:20:d6:69:cb: d6:1f:4b:60:6b:14:cb:8c:2c:c8:7a:9a:57:07:a3:19:38:51: d3:91:db:7b:8d:0d:7a:f5:63:89:49:02:cb:75:cc:15:a4:46: d8:b4:8f:3e:1c:4f:14:b8:4c:a6:e0:a4:74:2a:5b:27:94:1e: e9:06:7b:7b:27:57:04:93:6e:57:dc:5b:39:06:f5:a9:ba:bc: 73:d3:5e:e1:14:e1:c0:a9:91:f3:cc:ca:fd:9f:b2:fa:c6:72: 19:39:9b:57:a8:e7:d8:6a:11:af:38:23:da:60:70:52:bd:2d: 4f:00:45:be:3a:00:0f:0a:94:31:6b:fb:71:c7:26:89:5f:7b: 9f:0e:7c:7b:ab:0a:4a:3c:48:44:f2:9d:10:1c:c9:11:7d:9a: 1f:97:51:91:a1:b7:50:0d:9f:39:08:79:78:b4:79:25:9b:bd: 94:b4:3a:de:2d:6c:93:22:29:33:67:f2:89:b1:20:5e:0c:c7: c7:3b:9a:ac -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkQ4MjExMC8GA1UEBRMoNEI5QjI0Q0QzM0MxRjQzMjk5MUIxQTk1QzA5RUEyMDhD QkU1RjdEQjAeFw0yNjAyMTYxMzI5MzBaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMDIwLWVjOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtq9CF+6XCwmNpe2sckDBVcxw6oV/Yg+fBjtoMJrhukPgJHYQNTO8rWOc04zVl jlv/b0ljjF1yzsXPbeyFwoV+T2aZ5pg90zCkNcQyPKyPNyPYPcbvXmtJDL81UfsK lzdL2QF4wr7kwHUcKyQkilRcanWcGZfKLP0AV95Bl9AvJ3xZWhkOF8LVH4rESxaq RXX1NQWKFdDOGT7gkNL7DcC2dgYbM56AFGF65Rj5fZlthrnr9SJn9JPRQAwhns4i ZqvbW2NgzBwdQ6ZSLOQiss/oB70Y/jC+g8hCfgrokCt9TJkTQp+zeZQQmm8Iyh8E ovmBM/VMJc+HKgrePWvue6VbAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUgyxJCJWV szO1XLDdcXJBXXb14qswHwYDVR0jBBgwFoAUS5skzTPB9DKZGxqVwJ6iCMvl99sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCRDgyLzZENUNGRTQ4MDlB MjExRjE4NUJGRDlFQTFCM0Q4QzY3L1M1c2t6VFBCOURLWkd4cVZ3SjZpQ012bDk5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzVza3pUUEI5REtaR3hxVndKNmlDTXZsOTlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkQ4Mi82RDVDRkU0ODA5QTIxMUYxODVCRkQ5RUExQjNEOEM2Ny84NUNBRjYxNjBC M0IxMUYxODVBMUZDM0YwNjNEOEM2Ny5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32s0AwDQYJKoZIhvcNAQELBQADggEBAFzl5lq9XBp4+xWPEM4H nYuXj7+F0ivS2QHlal+DnSSNzxLzC4HLmOvn2jgt+R8rwAGF+vZT8KDluqimCYYI wg7ydxrwINZpy9YfS2BrFMuMLMh6mlcHoxk4UdOR23uNDXr1Y4lJAst1zBWkRti0 jz4cTxS4TKbgpHQqWyeUHukGe3snVwSTblfcWzkG9am6vHPTXuEU4cCpkfPMyv2f svrGchk5m1eo59hqEa84I9pgcFK9LU8ARb46AA8KlDFr+3HHJolfe58OfHurCko8 SETynRAcyRF9mh+XUZGht1ANnzkIeXi0eSWbvZS0Ot4tbJMiKTNn8omxIF4Mx8c7 mqw= -----END CERTIFICATE-----Generated at Mon Mar 2 18:31:52 2026 by rpki-client