$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa File: 339E038C223B11EF8750653DC4F9AE02.roa (raw, json) Hash identifier: WglSFimwBIxRaonVvtON24BGZwGg55rZ2VzaZUYH4UA= Subject key identifier: E6:95:DF:1A:8F:C2:5E:B2:71:A7:9B:FA:78:4E:F4:DD:57:01:C3:E4 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A9E Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:06:39 +0000 ROA not before: Wed 28 Jan 2026 17:15:14 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134995 IP address blocks: 2402:6640::/32 maxlen: 32 2402:6640:5::/48 maxlen: 48 2402:6640:10::/48 maxlen: 48 2402:6640:11::/48 maxlen: 48 2402:6640:17::/48 maxlen: 48 2402:6640:18::/48 maxlen: 48 2402:6640:19::/48 maxlen: 48 2402:6640:20::/48 maxlen: 48 2402:6640:21::/48 maxlen: 48 2402:6640:22::/48 maxlen: 48 2402:6640:23::/48 maxlen: 48 2402:6640:24::/48 maxlen: 48 2402:6640:25::/48 maxlen: 48 2402:6640:26::/48 maxlen: 48 2402:6640:30::/48 maxlen: 48 2402:6640:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Jan 28 17:15:14 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48e3f-d0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:83:22:f7:1b:7d:c8:a4:97:fd:52:de:94: 2e:e2:04:9a:23:49:cb:f6:89:62:40:54:06:32:11: 5f:47:07:93:67:36:93:f0:39:79:56:dc:e6:3d:73: 6f:2b:ba:40:e3:97:f6:1c:90:34:58:01:e0:6d:7c: db:6a:b8:47:5a:24:ab:66:75:e3:66:bc:24:89:0d: 62:10:a5:03:0a:fb:99:51:a1:0e:b4:bb:24:18:56: d7:f8:5d:83:07:5b:5c:8d:c1:05:08:e1:53:40:d1: 74:53:35:ba:be:62:5b:ef:f6:76:8e:dd:9c:ef:1b: 42:f1:6c:e7:30:bf:62:74:26:ba:cc:b7:27:a1:5a: 15:38:4a:43:2f:ac:4f:fb:a3:3c:95:66:52:b1:0c: 78:9d:0f:60:c6:97:e8:d5:d6:b3:12:cc:cb:9e:99: ab:7a:b3:c5:f1:70:df:22:6c:78:50:1b:14:26:d3: ff:48:01:60:7b:e5:5e:04:86:64:b5:a7:dc:07:43: 93:38:28:50:ff:47:6f:0d:35:df:a9:a8:78:cc:f8: 0c:fa:ca:b6:28:a8:31:cd:e0:bf:65:b0:ca:b3:63: fe:28:75:d6:f5:8c:8a:05:09:cb:65:02:f4:24:6a: db:67:3b:bd:1d:cd:8b:4e:69:44:5b:b0:f2:d5:43: a5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:95:DF:1A:8F:C2:5E:B2:71:A7:9B:FA:78:4E:F4:DD:57:01:C3:E4 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:6640::/32 Signature Algorithm: sha256WithRSAEncryption 79:90:bb:ba:30:63:aa:bd:58:8d:90:46:19:6d:17:dd:70:e9: cb:b3:48:f0:e1:81:b4:1b:05:c0:27:36:17:21:7a:d5:d9:41: c1:56:f7:12:65:70:4a:d1:61:94:30:29:3f:03:b2:3f:7a:7b: 9c:7f:fe:ce:0a:ef:5a:9b:76:fb:46:cb:5b:0c:96:13:42:3c: ea:21:fa:63:18:7b:47:1d:74:b6:93:55:5e:07:8d:d8:8f:bf: 99:80:8f:12:c4:ef:1f:bc:53:2f:85:c3:33:33:fd:3f:2d:d7: 45:80:04:e3:3c:0f:53:84:11:84:ac:93:5c:6f:0e:90:82:76: 26:ff:20:44:c8:d7:a0:a7:57:b3:e7:16:0d:17:74:e8:8c:22: bb:00:76:67:e5:fe:a3:d4:89:af:d6:ac:32:d3:53:ea:17:5e: 59:4f:68:86:d8:ce:71:9e:a6:a7:9c:2a:4b:4d:5f:0d:90:a6: fd:5b:e2:a3:35:c0:e5:04:90:06:2b:49:9a:ca:39:1b:13:90: d2:6a:7e:ea:a7:b4:54:06:59:6e:16:e2:09:2a:83:98:07:16: 5c:66:8c:b3:45:20:e1:62:53:34:d2:60:91:59:d5:fc:9e:ee: 4a:61:01:cd:4f:6b:a0:dd:cb:bf:da:17:0d:d0:ef:99:d8:72: 80:77:87:db -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjYwMTI4MTcxNTE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGUzZi1kMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRKDIvcbfcikl/1S3pQu4gSaI0nL9oliQFQGMhFfRweTZzaT8Dl5VtzmPXNv K7pA45f2HJA0WAHgbXzbarhHWiSrZnXjZrwkiQ1iEKUDCvuZUaEOtLskGFbX+F2D B1tcjcEFCOFTQNF0UzW6vmJb7/Z2jt2c7xtC8WznML9idCa6zLcnoVoVOEpDL6xP +6M8lWZSsQx4nQ9gxpfo1dazEszLnpmrerPF8XDfImx4UBsUJtP/SAFge+VeBIZk tafcB0OTOChQ/0dvDTXfqah4zPgM+sq2KKgxzeC/ZbDKs2P+KHXW9YyKBQnLZQL0 JGrbZzu9Hc2LTmlEW7Dy1UOlmwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFOaV3xqP wl6ycaeb+nhO9N1XAcPkMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdGMEMvMEE1OEExOUE3MEFCMTFFOTgzMTdBNTdCQzRGOUFFMDIvMzM5RTAzOEMy MjNCMTFFRjg3NTA2NTNEQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAJmQDANBgkqhkiG9w0BAQsFAAOCAQEAeZC7ujBjqr1YjZBGGW0X 3XDpy7NI8OGBtBsFwCc2FyF61dlBwVb3EmVwStFhlDApPwOyP3p7nH/+zgrvWpt2 +0bLWwyWE0I86iH6Yxh7Rx10tpNVXgeN2I+/mYCPEsTvH7xTL4XDMzP9Py3XRYAE 4zwPU4QRhKyTXG8OkIJ2Jv8gRMjXoKdXs+cWDRd06IwiuwB2Z+X+o9SJr9asMtNT 6hdeWU9ohtjOcZ6mp5wqS01fDZCm/VviozXA5QSQBitJmso5GxOQ0mp+6qe0VAZZ bhbiCSqDmAcWXGaMs0Ug4WJTNNJgkVnV/J7uSmEBzU9roN3Lv9oXDdDvmdhygHeH 2w== -----END CERTIFICATE-----Generated at Mon Mar 2 14:12:18 2026 by rpki-client