$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/A1E99A4E9C1211EFB233147EC4F9AE02.roa File: A1E99A4E9C1211EFB233147EC4F9AE02.roa (raw, json) Hash identifier: Hu4k/NqzAGOhZjU80rFAqOtaPO4XcnFZGlunYG4Pvw8= Subject key identifier: F4:B9:B5:0D:86:A1:A0:98:E4:13:ED:49:10:37:CC:9C:19:3A:B7:67 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: FB Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/A1E99A4E9C1211EFB233147EC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:29:17 +0000 ROA not before: Wed 03 Dec 2025 04:34:00 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153392 IP address blocks: 2001:df4:8f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Dec 3 04:34:00 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a59ebd-ce09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:9f:49:5e:56:b8:fd:37:30:d0:9d:5c:b4: 0e:e4:75:6f:f6:f4:2d:36:bb:f7:13:56:52:00:28: b5:79:62:ad:f9:f8:0a:fd:98:a4:21:70:46:21:bb: b9:24:8d:48:52:7b:f6:a5:9e:68:1c:4c:af:e9:58: e5:10:22:82:85:b1:41:95:60:2c:ed:c1:8e:bc:60: 30:78:63:d5:c0:e4:46:ff:99:fb:5e:a7:30:cd:de: a6:a7:b1:fa:6d:2c:02:2e:f9:9a:71:8a:f5:2e:49: 86:68:d7:af:a0:78:9f:e5:06:fa:bf:8b:28:7f:ea: 3a:a5:0e:e3:58:41:9e:82:13:9e:34:a0:3b:1e:77: 62:17:b9:02:78:9c:1e:be:59:c6:51:ac:c9:59:c9: 6d:77:ce:5b:a3:32:68:d8:32:4c:c5:9f:f8:e1:c2: ac:97:21:aa:15:7b:67:b3:3b:10:3e:3e:d0:25:c7: 7f:b4:6d:2e:cd:0e:f7:4c:80:0a:bc:05:a1:f1:50: 6a:b6:e2:e2:a0:95:49:77:91:c8:c3:d6:38:89:b2: 29:ff:b3:a7:34:7a:7f:30:ce:05:79:5d:43:87:4f: 4d:cd:a6:ad:86:8b:e1:1a:65:8f:1a:16:ab:8f:6a: aa:0f:07:7f:ac:1e:20:5a:cc:f9:8f:86:16:27:28: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B9:B5:0D:86:A1:A0:98:E4:13:ED:49:10:37:CC:9C:19:3A:B7:67 X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/A1E99A4E9C1211EFB233147EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:8f40::/48 Signature Algorithm: sha256WithRSAEncryption 4f:51:61:bf:2c:5e:30:06:7b:b0:50:a7:a6:45:3b:8e:91:2e: cf:2c:02:16:8a:bc:78:b5:8e:c7:d8:40:47:3b:83:2e:50:6a: 63:b5:5e:f7:06:bd:69:c9:03:8e:85:8d:af:e2:79:cc:7c:cd: 01:97:4c:37:64:f9:f5:2e:09:c0:2a:23:3b:be:3d:79:31:f2: 3c:54:66:03:cc:95:b8:65:e9:22:29:47:66:60:b7:c2:1e:0d: 77:de:95:3f:aa:2d:4e:64:3b:21:b4:b2:69:92:02:f1:49:9a: 71:f1:42:a4:b3:f5:7a:e0:8d:36:bf:f4:ed:30:19:a0:3f:21: 16:1e:dc:9b:8c:a3:c0:63:35:8c:22:1c:15:58:2e:2e:57:b6: 5a:31:75:71:2e:3e:26:de:ff:99:db:33:f1:c9:85:c2:ea:0a: 69:c8:83:d7:81:7a:70:36:34:4b:68:b3:c7:a7:a4:2b:7d:10: f8:e4:1e:7e:09:31:15:a7:5c:1c:bd:37:40:a6:bc:59:42:4e: ff:78:cc:24:04:9c:4a:8f:67:c9:46:4f:2a:f2:95:1b:38:cb: 72:0b:47:0f:40:b9:2e:16:3d:43:d5:57:3a:d0:d9:e2:e3:9f: 3c:22:27:7e:8a:38:d0:71:5e:c1:29:5f:6a:de:d6:df:5e:c0: 59:a6:7f:e1 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy NjhBOERGQjAwHhcNMjUxMjAzMDQzNDAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWViZC1jZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S+fSV5WuP03MNCdXLQO5HVv9vQtNrv3E1ZSACi1eWKt+fgK/ZikIXBGIbu5 JI1IUnv2pZ5oHEyv6VjlECKChbFBlWAs7cGOvGAweGPVwORG/5n7Xqcwzd6mp7H6 bSwCLvmacYr1LkmGaNevoHif5Qb6v4sof+o6pQ7jWEGeghOeNKA7HndiF7kCeJwe vlnGUazJWcltd85bozJo2DJMxZ/44cKslyGqFXtnszsQPj7QJcd/tG0uzQ73TIAK vAWh8VBqtuLioJVJd5HIw9Y4ibIp/7OnNHp/MM4FeV1Dh09NzaathovhGmWPGhar j2qqDwd/rB4gWsz5j4YWJygyxwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPS5tQ2G oaCY5BPtSRA3zJwZOrdnMB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVBNDYvREJEQTJDQzQ5QzExMTFFRjkyRkJBOTdDQzRGOUFFMDIvQTFFOTlBNEU5 QzEyMTFFRkIyMzMxNDdFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9I9AMA0GCSqGSIb3DQEBCwUAA4IBAQBPUWG/LF4wBnuwUKem RTuOkS7PLAIWirx4tY7H2EBHO4MuUGpjtV73Br1pyQOOhY2v4nnMfM0Bl0w3ZPn1 LgnAKiM7vj15MfI8VGYDzJW4ZekiKUdmYLfCHg133pU/qi1OZDshtLJpkgLxSZpx 8UKks/V64I02v/TtMBmgPyEWHtybjKPAYzWMIhwVWC4uV7ZaMXVxLj4m3v+Z2zPx yYXC6gppyIPXgXpwNjRLaLPHp6QrfRD45B5+CTEVp1wcvTdAprxZQk7/eMwkBJxK j2fJRk8q8pUbOMtyC0cPQLkuFj1D1Vc60Nni4588Iid+ijjQcV7BKV9q3tbfXsBZ pn/h -----END CERTIFICATE-----Generated at Mon Mar 2 23:39:35 2026 by rpki-client