$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/5997A6A624E011EDAEC0E529C4F9AE02.roa File: 5997A6A624E011EDAEC0E529C4F9AE02.roa (raw, json) Hash identifier: kgUDwmWc1IMp1gXUMvhqWSGJV5h+vYuf4OkX4cdGtfg= Subject key identifier: 5A:6C:53:2D:D8:6D:45:9B:39:CF:B6:4D:FA:5F:EF:64:BB:AA:F9:91 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 0511 Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/5997A6A624E011EDAEC0E529C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:24:33 +0000 ROA not before: Sat 31 Jan 2026 00:19:32 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 210542 IP address blocks: 2400:3e20:2000::/36 maxlen: 36 2400:3e20:3000::/36 maxlen: 36 2400:3e20:e000::/36 maxlen: 36 2400:3e20:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Jan 31 00:19:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47650-4ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:02:43:ac:ef:aa:d5:4f:66:41:08:bf:da: fe:c2:24:67:3f:5f:01:84:36:07:31:f5:82:c1:33: 8c:51:00:91:ad:ad:f9:18:fa:13:f6:84:9a:99:fa: a8:ea:51:7b:26:b7:51:ad:21:cb:ba:03:a4:98:6d: 77:88:b5:2f:3c:3b:96:7f:d4:a1:aa:a1:85:5a:c8: e1:b4:f9:50:00:33:cc:dd:6b:d1:db:56:52:b4:f1: 8f:a6:d9:ee:95:b4:d9:b1:d5:2d:25:c7:52:45:17: ee:d3:d4:fb:aa:a1:7c:4b:b2:34:ad:5f:77:0a:19: 7d:2b:8e:4d:99:77:26:06:63:a2:0b:ca:93:48:87: c5:36:f5:24:05:49:17:6c:bf:87:1c:be:ac:ea:3e: 4d:2d:f0:0e:4e:d5:0e:d1:0d:14:eb:1f:7c:0d:9a: 74:be:69:2d:76:b6:86:3a:9c:f3:41:c7:72:eb:bd: 1d:92:10:e0:54:b8:4f:08:9a:e8:26:41:ee:15:58: 1e:da:28:06:e9:0c:cc:2e:b9:48:cf:35:3d:c0:44: 82:22:4a:34:9b:75:6c:43:8f:46:b4:2b:62:e3:be: 5c:0c:78:0a:0a:be:b1:28:9f:24:c1:b0:04:2e:ca: d8:62:e2:39:ba:85:7f:2d:12:75:6a:a7:6c:0a:b7: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:53:2D:D8:6D:45:9B:39:CF:B6:4D:FA:5F:EF:64:BB:AA:F9:91 X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/5997A6A624E011EDAEC0E529C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:3e20:2000::/35 2400:3e20:e000::/35 Signature Algorithm: sha256WithRSAEncryption 45:2e:7b:bb:fa:08:14:c0:a6:d6:dd:78:0a:b7:9b:52:77:e6: 20:a4:f9:2d:e6:2d:4e:d6:08:b4:b2:18:8b:5d:e5:76:1e:72: 0b:a6:d8:ac:79:c7:18:94:8c:8d:2c:f4:9d:d0:37:90:f0:c6: 9f:db:e2:0a:22:5f:e3:03:eb:e3:ff:8d:89:39:db:d3:18:d8: 14:83:57:53:8f:55:4c:2d:a9:ad:47:f8:c2:03:2c:be:44:65: 97:c7:02:0a:8d:01:bc:ba:0e:70:86:ca:6c:a7:0d:0e:ab:9c: 20:f0:48:82:33:7e:de:8e:1f:25:bd:a1:48:c1:95:5a:76:f5: 7b:f5:1a:c6:15:30:5c:3e:d8:e7:1c:56:a1:b9:44:72:db:43: 1e:cd:7f:ff:5a:48:2c:8c:00:9e:62:48:bf:7d:6c:6c:75:c7: ff:2d:ae:14:f2:ed:16:08:02:9c:ad:cf:34:7b:49:21:b1:c2: 66:76:f1:c5:63:36:35:05:02:74:44:80:60:4b:b2:fa:48:e9: aa:93:42:71:2e:04:2c:d3:b0:af:9e:89:5e:4d:7c:d3:5f:db: 75:12:8b:9c:e1:91:67:ca:f1:64:29:c5:df:41:bb:21:90:92: 31:c5:6a:ee:72:79:8a:84:e9:21:a7:63:14:18:5d:1a:8c:ea: c8:80:b1:39 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjYwMTMxMDAxOTMyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzY1MC00Y2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcICQ6zvqtVPZkEIv9r+wiRnP18BhDYHMfWCwTOMUQCRra35GPoT9oSamfqo 6lF7JrdRrSHLugOkmG13iLUvPDuWf9ShqqGFWsjhtPlQADPM3WvR21ZStPGPptnu lbTZsdUtJcdSRRfu09T7qqF8S7I0rV93Chl9K45NmXcmBmOiC8qTSIfFNvUkBUkX bL+HHL6s6j5NLfAOTtUO0Q0U6x98DZp0vmktdraGOpzzQcdy670dkhDgVLhPCJro JkHuFVge2igG6QzMLrlIzzU9wESCIko0m3VsQ49GtCti475cDHgKCr6xKJ8kwbAE LsrYYuI5uoV/LRJ1aqdsCrcQyQIDAQABo4ICajCCAmYwHQYDVR0OBBYEFFpsUy3Y bUWbOc+2Tfpf72S7qvmRMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBFMTEvRDA2MEM5QjI1QkQ2MTFFQ0FEODMzNjUxQzRGOUFFMDIvNTk5N0E2QTYy NEUwMTFFREFFQzBFNTI5QzRGOUFFMDIucm9hMCkGCCsGAQUFBwEHAQH/BBowGDAW BAIAAjAQAwYFJAA+ICADBgUkAD4g4DANBgkqhkiG9w0BAQsFAAOCAQEARS57u/oI FMCm1t14CrebUnfmIKT5LeYtTtYItLIYi13ldh5yC6bYrHnHGJSMjSz0ndA3kPDG n9viCiJf4wPr4/+NiTnb0xjYFINXU49VTC2prUf4wgMsvkRll8cCCo0BvLoOcIbK bKcNDqucIPBIgjN+3o4fJb2hSMGVWnb1e/UaxhUwXD7Y5xxWoblEcttDHs1//1pI LIwAnmJIv31sbHXH/y2uFPLtFggCnK3PNHtJIbHCZnbxxWM2NQUCdESAYEuy+kjp qpNCcS4ELNOwr56JXk1801/bdRKLnOGRZ8rxZCnF30G7IZCSMcVq7nJ5ioTpIadj FBhdGozqyICxOQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:22 2026 by rpki-client