$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/2BB9711E5DE111F09B775D76C4F9AE02.roa File: 2BB9711E5DE111F09B775D76C4F9AE02.roa (raw, json) Hash identifier: U9tyCvMDlceVXMLQfDjCprercZZxtbmQBQkbmthwKe4= Subject key identifier: 64:0C:08:16:57:7C:05:79:FB:46:EF:3E:FB:1E:3A:D9:D9:47:C9:BF Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Certificate serial: 79 Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/2BB9711E5DE111F09B775D76C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:10:16 +0000 ROA not before: Thu 10 Jul 2025 22:56:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135310 IP address blocks: 2001:df5:d940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Validity Not Before: Jul 10 22:56:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3e658-2675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fd:cc:c2:64:98:e0:39:48:fd:f5:a3:1a:a5: dc:e2:1e:ef:b0:48:57:66:6e:b4:2f:29:50:ba:4f: 28:bd:4a:90:94:a6:1f:d8:29:85:cb:32:0b:ef:0c: 07:12:05:f7:73:bc:cd:6a:48:e3:74:a5:5e:60:cc: 54:cf:bc:4b:ad:e3:59:55:2f:cc:4e:10:f3:98:8f: 61:43:fd:fb:58:b5:52:0c:ed:16:4c:be:56:d6:ff: 0d:82:fd:ff:dd:51:53:ef:76:54:a8:86:7a:b4:d4: 31:76:b0:76:d0:85:bf:89:ae:2b:16:4b:fa:61:16: c6:c2:d3:0c:b7:63:42:e3:41:91:6b:ee:e1:df:60: 6b:e9:21:07:02:3b:fb:62:7f:47:36:9b:9c:78:bf: 22:2c:8d:20:29:24:8e:a2:c2:43:6d:1a:2f:64:77: bc:44:76:39:1a:ca:17:ba:b2:9a:5b:b0:85:f3:0a: 72:98:23:c6:b5:b4:b4:07:59:52:55:85:3a:d2:99: 03:29:62:b6:0d:8d:e7:35:c2:c9:37:c1:ae:40:0d: 7d:7a:6a:7e:e2:f1:58:d5:4e:c3:b2:f1:87:f0:c6: 92:83:74:e1:fa:30:cb:a4:31:a3:4d:9c:f0:04:d4: 63:f9:3e:29:ec:42:36:a6:67:dd:71:2e:a1:0d:97: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0C:08:16:57:7C:05:79:FB:46:EF:3E:FB:1E:3A:D9:D9:47:C9:BF X509v3 Authority Key Identifier: keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/2BB9711E5DE111F09B775D76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:d940::/48 Signature Algorithm: sha256WithRSAEncryption 1c:1f:a0:a5:56:b8:7a:f1:dd:57:3b:41:53:8f:6d:cb:6a:fc: 79:f7:43:bb:08:dc:7b:d4:ee:5a:56:b7:44:96:4f:f3:77:78: 38:dc:fb:8c:18:45:fb:ec:72:21:e9:2f:ae:76:17:41:b9:3c: dc:41:f5:53:b1:66:21:1b:69:18:26:c1:97:49:eb:87:ee:15: bd:14:d3:0a:72:47:7d:b3:c1:14:0d:c3:ab:be:da:b2:f2:6d: e6:ec:6d:51:33:9b:af:a2:2a:de:f0:9e:b7:93:5c:63:d0:6a: 2e:68:6a:93:0a:a0:2a:ee:d2:7f:2a:cf:74:a3:5a:2c:ee:08: b9:f1:d4:66:c0:da:cd:d7:84:ce:3f:a3:c8:71:60:eb:35:84: f9:be:f8:c6:e7:59:d1:9f:24:55:8a:98:17:86:77:1f:ea:aa: 90:9d:6b:f4:ee:08:7e:a9:58:67:5c:88:62:68:e6:ca:69:1c: 06:44:9a:07:6e:e4:8d:cf:24:c9:a0:6f:4f:ca:4e:b5:55:77: 6c:04:31:3f:e2:8b:05:43:84:7c:bb:eb:4c:98:fc:6b:11:d3: 1f:2e:a2:7e:10:39:ba:42:b0:df:b7:e4:ae:60:4a:3c:ed:3e: 2e:ae:2b:4c:1b:d2:23:41:03:1f:0f:af:e8:ab:fa:26:8c:01: 1d:12:00:5e -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoRkI3QjA1ODc4MzY1MUU5M0ZBMzBERDk2RDYyNjVFNkUy RjM1MjU1NDAeFw0yNTA3MTAyMjU2NTNaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNlNjU4LTI2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm/czCZJjgOUj99aMapdziHu+wSFdmbrQvKVC6Tyi9SpCUph/YKYXLMgvvDAcS BfdzvM1qSON0pV5gzFTPvEut41lVL8xOEPOYj2FD/ftYtVIM7RZMvlbW/w2C/f/d UVPvdlSohnq01DF2sHbQhb+JrisWS/phFsbC0wy3Y0LjQZFr7uHfYGvpIQcCO/ti f0c2m5x4vyIsjSApJI6iwkNtGi9kd7xEdjkayhe6sppbsIXzCnKYI8a1tLQHWVJV hTrSmQMpYrYNjec1wsk3wa5ADX16an7i8VjVTsOy8YfwxpKDdOH6MMukMaNNnPAE 1GP5PinsQjamZ91xLqENl1qjAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUZAwIFld8 BXn7Ru8++x462dlHyb8wHwYDVR0jBBgwFoAU+3sFh4NlHpP6MN2W1iZebi81JVQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0ZFQUUxMkEyNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpW US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTNzRmg0TmxIcFA2TU4yVzFpWmViaTgxSlZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzQ3My9GRUFFMTJBMjVEREYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8yQkI5NzExRTVE RTExMUYwOUI3NzVENzZDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ312UAwDQYJKoZIhvcNAQELBQADggEBABwfoKVWuHrx3Vc7QVOP bctq/Hn3Q7sI3HvU7lpWt0SWT/N3eDjc+4wYRfvsciHpL652F0G5PNxB9VOxZiEb aRgmwZdJ64fuFb0U0wpyR32zwRQNw6u+2rLybebsbVEzm6+iKt7wnreTXGPQai5o apMKoCru0n8qz3SjWizuCLnx1GbA2s3XhM4/o8hxYOs1hPm++MbnWdGfJFWKmBeG dx/qqpCda/TuCH6pWGdciGJo5sppHAZEmgdu5I3PJMmgb0/KTrVVd2wEMT/iiwVD hHy760yY/GsR0x8uon4QObpCsN+35K5gSjztPi6uK0wb0iNBAx8Pr+ir+iaMAR0S AF4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:35:12 2026 by rpki-client