$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/B12A39803A2A11F09E37DB48C4F9AE02.roa File: B12A39803A2A11F09E37DB48C4F9AE02.roa (raw, json) Hash identifier: CoN2ChPQA1qn/Xvwh+q1CXaNL7awqOvoz+KnawFyjQE= Subject key identifier: 0D:93:0B:F3:56:FF:FE:2A:92:57:4C:18:AF:7C:6D:EF:40:69:C2:CA Certificate issuer: /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Certificate serial: 96 Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/B12A39803A2A11F09E37DB48C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:19:31 +0000 ROA not before: Thu 01 Jan 2026 06:24:34 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153320 IP address blocks: 2401:d960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Validity Not Before: Jan 1 06:24:34 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a420c3-9970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:39:6d:34:e9:e1:bd:fb:b1:e7:02:39:17:8d: 66:a7:71:66:f2:e6:48:c0:36:2a:57:9a:2a:22:62: 9f:03:28:d4:0e:57:ab:6c:42:a7:86:b4:71:a5:8d: db:a7:71:65:14:b0:34:28:10:d1:1f:dd:7f:98:44: 7c:10:79:8e:85:c3:9c:b3:74:8b:54:9b:8a:f0:24: a1:6e:80:e8:91:ba:c6:01:44:07:a5:ad:b3:64:39: 4b:41:c2:25:2c:c1:d9:c9:b0:df:44:ce:bf:9e:5d: 81:a3:c0:85:ac:61:a7:89:41:e1:bd:61:58:f4:6e: 9b:b8:bb:3e:59:1c:aa:22:25:df:7e:b1:09:22:9d: 78:b2:01:f0:f5:0f:16:64:13:c4:6e:50:55:49:7a: ba:93:e9:07:cd:fe:43:4b:1b:e8:14:d4:81:77:24: c2:de:5e:93:35:db:b9:ce:62:0e:89:65:fe:da:95: 88:b5:36:2d:e7:3a:46:16:8a:ec:ff:93:02:33:2e: 06:15:4a:b0:59:90:79:3c:91:5b:b2:3d:97:81:8b: 60:76:9b:45:49:a0:f0:8c:63:5a:91:58:07:ca:34: 7a:ee:7e:19:5f:6e:18:c0:7e:15:b1:47:17:37:4f: 73:b8:fa:c6:ba:d7:2f:2b:49:29:c2:97:0b:a1:a8: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:0B:F3:56:FF:FE:2A:92:57:4C:18:AF:7C:6D:EF:40:69:C2:CA X509v3 Authority Key Identifier: keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/B12A39803A2A11F09E37DB48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:d960::/32 Signature Algorithm: sha256WithRSAEncryption 9c:34:30:2a:1b:25:e8:a1:eb:3e:89:75:e7:d9:3c:0d:e6:52: f3:58:43:42:e3:30:d5:c9:31:be:9c:18:95:27:02:75:02:6a: d2:49:9a:66:dc:01:6a:3d:41:86:76:92:dd:94:2f:d2:c5:03: 41:08:20:71:74:a0:2a:da:16:c9:99:25:7e:38:65:92:43:60: 8b:eb:39:ba:51:73:07:72:a0:e1:bc:1c:81:f2:9f:39:6e:c0: 18:16:79:41:87:e1:a1:29:7a:7f:6d:cf:f6:26:c1:dc:f9:77: 5d:63:cc:04:f1:28:f3:6b:1b:bc:16:e6:4d:34:42:27:50:85: ea:08:9f:8c:e5:22:c5:41:24:b8:9c:15:e2:c4:a1:52:6d:fb: e8:8f:24:c5:4c:d4:09:a0:40:5c:52:7a:da:0f:90:f2:23:44: 7a:55:29:12:b3:4d:5f:4d:5b:ab:f1:bf:d0:c9:2c:54:cc:b4: bf:37:72:9a:ae:8a:41:0a:66:0c:04:28:21:3b:89:4f:74:5f: d1:2f:7e:e4:c7:ae:ba:1f:6b:36:86:a1:9a:e8:5e:c1:77:6b: 20:d8:28:79:bf:27:77:7d:16:19:4e:1c:30:42:2f:c5:5b:4e: a4:86:e7:9d:68:60:52:fa:e9:a3:b8:f3:65:18:9b:ab:d8:3b: d5:09:f8:ce -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5NzUxMTAvBgNVBAUTKDBDNjg1ODIyOEMzMDE3NDgyQkRDN0YzOTgxRTg5OEI5 NTZEQUEwMjkwHhcNMjYwMTAxMDYyNDM0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjBjMy05OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzltNOnhvfux5wI5F41mp3Fm8uZIwDYqV5oqImKfAyjUDlerbEKnhrRxpY3b p3FlFLA0KBDRH91/mER8EHmOhcOcs3SLVJuK8CShboDokbrGAUQHpa2zZDlLQcIl LMHZybDfRM6/nl2Bo8CFrGGniUHhvWFY9G6buLs+WRyqIiXffrEJIp14sgHw9Q8W ZBPEblBVSXq6k+kHzf5DSxvoFNSBdyTC3l6TNdu5zmIOiWX+2pWItTYt5zpGFors /5MCMy4GFUqwWZB5PJFbsj2XgYtgdptFSaDwjGNakVgHyjR67n4ZX24YwH4VsUcX N09zuPrGutcvK0kpwpcLoagG1QIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFA2TC/NW //4qkldMGK98be9AacLKMB8GA1UdIwQYMBaAFAxoWCKMMBdIK9x/OYHomLlW2qAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk3NS82N0M3QTQyQTNB MjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9ER2hZSW93d0YwZ3IzSDg1Z2VpWXVWYmFv Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RHaFlJb3d3RjBncjNIODVnZWlZdVZiYW9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5NzUvNjdDN0E0MkEzQTI2MTFGMEJDQ0Y1RTFGQzRGOUFFMDIvQjEyQTM5ODAz QTJBMTFGMDlFMzdEQjQ4QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAHZYDANBgkqhkiG9w0BAQsFAAOCAQEAnDQwKhsl6KHrPol159k8 DeZS81hDQuMw1ckxvpwYlScCdQJq0kmaZtwBaj1BhnaS3ZQv0sUDQQggcXSgKtoW yZklfjhlkkNgi+s5ulFzB3Kg4bwcgfKfOW7AGBZ5QYfhoSl6f23P9ibB3Pl3XWPM BPEo82sbvBbmTTRCJ1CF6gifjOUixUEkuJwV4sShUm376I8kxUzUCaBAXFJ62g+Q 8iNEelUpErNNX01bq/G/0MksVMy0vzdymq6KQQpmDAQoITuJT3Rf0S9+5Meuuh9r NoahmuhewXdrINgoeb8nd30WGU4cMEIvxVtOpIbnnWhgUvrpo7jzZRibq9g71Qn4 zg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:18:38 2026 by rpki-client