$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa File: F99E9E78571B11F093AD0C10C4F9AE02.roa (raw, json) Hash identifier: GVEpvnEFQk1r8mTWmBDvESje+/1MN9Uk5AtUa2pXkUI= Subject key identifier: 07:7F:B7:E5:77:B9:F8:92:3E:02:C9:E4:95:38:59:76:47:25:D8:72 Certificate issuer: /CN=A9170DA5/serialNumber=3EC7B1A6DA21A1A775815D1CBFE72314B8A95DD9 Certificate serial: 7F Authority key identifier: 3E:C7:B1:A6:DA:21:A1:A7:75:81:5D:1C:BF:E7:23:14:B8:A9:5D:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:11:21 +0000 ROA not before: Wed 02 Jul 2025 08:10:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154002 IP address blocks: 2001:df5:ce40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.crl rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DA5, serialNumber=3EC7B1A6DA21A1A775815D1CBFE72314B8A95DD9 Validity Not Before: Jul 2 08:10:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3f4a9-70e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:00:c8:6d:88:be:bb:c8:96:30:10:5a:71: 2e:f1:fe:33:28:96:fa:9c:16:3a:92:85:b2:c2:11: b8:44:cb:34:c8:da:a1:f0:2c:2b:8b:50:bb:f1:4d: 75:22:f9:dd:a5:7f:b6:31:45:51:18:ff:78:a0:1a: e3:4a:3c:65:84:0e:df:ca:b4:2c:60:ed:4d:f9:35: a0:a9:7e:89:f7:d0:e1:f1:f6:94:dc:42:d6:52:3f: 8b:ce:4d:53:37:02:c7:40:62:6e:79:56:e9:87:92: 2c:87:b8:62:1f:e5:b5:3f:6e:fb:31:57:98:62:5b: 44:20:38:ae:47:04:73:b4:b1:aa:9f:4e:32:a8:00: e4:87:6c:fb:bf:82:a5:e5:5f:95:e9:5a:81:5c:dd: 43:8d:8b:c2:e9:ea:76:34:39:2c:11:f4:82:3b:24: e8:8a:bc:ae:57:6b:d3:ab:db:33:a0:18:b4:f9:18: 06:31:5e:b6:81:95:e6:19:6b:67:4c:47:4f:c0:2d: 99:cf:70:a8:de:45:7d:c9:4c:b9:cd:f1:d3:8a:ed: 1f:dd:b1:60:44:1b:dc:ce:7d:71:ed:68:51:53:14: 3a:4a:eb:07:82:f1:de:fa:58:a7:72:8c:17:db:df: 3e:5d:d1:81:46:41:81:68:76:7f:c0:f6:95:ff:9d: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7F:B7:E5:77:B9:F8:92:3E:02:C9:E4:95:38:59:76:47:25:D8:72 X509v3 Authority Key Identifier: keyid:3E:C7:B1:A6:DA:21:A1:A7:75:81:5D:1C:BF:E7:23:14:B8:A9:5D:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:ce40::/48 Signature Algorithm: sha256WithRSAEncryption 72:90:25:75:67:46:0e:25:c1:c8:20:04:04:fa:8d:72:a5:a4: 8f:0a:86:c3:dd:aa:5a:8e:25:ef:b1:36:46:4a:08:f5:1d:44: 5a:af:62:f1:75:b6:73:f0:f6:dd:a7:10:88:69:62:c6:99:a4: 4b:a4:85:17:56:51:b5:55:d6:39:25:d3:42:40:61:f9:4a:1a: 05:8d:61:38:0a:43:c5:31:2b:bc:46:6c:24:be:f3:9c:8e:83: 7c:07:62:20:6c:0e:2a:87:ad:ca:43:66:2c:ae:f3:31:ad:19: 10:c2:f2:db:b2:aa:0f:f5:9b:dd:d4:89:d2:71:1f:5a:90:6a: 38:dc:9e:d8:17:55:2f:d6:fd:cf:f2:80:fd:c8:46:09:d8:5d: 02:a1:6f:fa:5a:8d:66:06:d0:c6:81:83:22:f4:e4:70:b2:9f: d3:a9:6d:11:47:e4:e3:70:73:20:32:66:59:82:4b:83:41:5c: 7e:0e:3b:b5:f8:c2:b7:8f:b4:8a:b5:8a:fe:99:5e:b9:e8:57: 2a:a2:76:2a:df:01:1f:1a:f6:c9:51:dc:b8:e8:5f:b9:13:86: e8:37:d5:9e:16:84:7b:38:20:ed:7e:48:7a:98:00:98:1d:af: 06:0c:72:62:9f:d0:4b:cc:6f:62:25:92:d0:48:fc:60:69:af: 4c:db:9d:5e -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MERBNTExMC8GA1UEBRMoM0VDN0IxQTZEQTIxQTFBNzc1ODE1RDFDQkZFNzIzMTRC OEE5NUREOTAeFw0yNTA3MDIwODEwMTFaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNmNGE5LTcwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuwgDIbYi+u8iWMBBacS7x/jMolvqcFjqShbLCEbhEyzTI2qHwLCuLULvxTXUi +d2lf7YxRVEY/3igGuNKPGWEDt/KtCxg7U35NaCpfon30OHx9pTcQtZSP4vOTVM3 AsdAYm55VumHkiyHuGIf5bU/bvsxV5hiW0QgOK5HBHO0saqfTjKoAOSHbPu/gqXl X5XpWoFc3UONi8Lp6nY0OSwR9II7JOiKvK5Xa9Or2zOgGLT5GAYxXraBleYZa2dM R0/ALZnPcKjeRX3JTLnN8dOK7R/dsWBEG9zOfXHtaFFTFDpK6weC8d76WKdyjBfb 3z5d0YFGQYFodn/A9pX/nekhAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUB3+35Xe5 +JI+AsnklThZdkcl2HIwHwYDVR0jBBgwFoAUPsexptohoad1gV0cv+cjFLipXdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwREE1L0NFMEVEQTI2NTcx QTExRjBCODUwNzM0MUM0RjlBRTAyL1BzZXhwdG9ob2FkMWdWMGN2LWNqRkxpcFhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHNleHB0b2hvYWQxZ1YwY3YtY2pGTGlwWGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MERBNS9DRTBFREEyNjU3MUExMUYwQjg1MDczNDFDNEY5QUUwMi9GOTlFOUU3ODU3 MUIxMUYwOTNBRDBDMTBDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ31zkAwDQYJKoZIhvcNAQELBQADggEBAHKQJXVnRg4lwcggBAT6 jXKlpI8KhsPdqlqOJe+xNkZKCPUdRFqvYvF1tnPw9t2nEIhpYsaZpEukhRdWUbVV 1jkl00JAYflKGgWNYTgKQ8UxK7xGbCS+85yOg3wHYiBsDiqHrcpDZiyu8zGtGRDC 8tuyqg/1m93UidJxH1qQajjcntgXVS/W/c/ygP3IRgnYXQKhb/pajWYG0MaBgyL0 5HCyn9OpbRFH5ONwcyAyZlmCS4NBXH4OO7X4wrePtIq1iv6ZXrnoVyqidirfAR8a 9slR3LjoX7kThug31Z4WhHs4IO1+SHqYAJgdrwYMcmKf0EvMb2IlktBI/GBpr0zb nV4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:26:20 2026 by rpki-client