$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/05939A1C554611F09F737331C4F9AE02.roa File: 05939A1C554611F09F737331C4F9AE02.roa (raw, json) Hash identifier: Clnr+6xHUPwytcBM6eO/TUPMVIT7s9w+w77rdDAuRPs= Subject key identifier: 86:CB:2E:69:AA:5A:17:89:FF:24:76:DA:83:C7:92:2F:60:DD:9A:ED Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Certificate serial: 85 Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/05939A1C554611F09F737331C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:20:07 +0000 ROA not before: Thu 19 Feb 2026 06:30:07 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 151496 IP address blocks: 2001:df5:db80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Validity Not Before: Feb 19 06:30:07 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a420e7-c7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:27:a6:38:40:91:93:ab:3a:27:f2:e3:40: 15:64:89:aa:d2:c6:9c:20:9b:02:c7:1f:fc:13:96: 4a:db:eb:6f:0c:44:0a:56:87:63:08:a8:7a:7b:3d: fb:c1:0a:db:6f:c6:55:a9:2f:39:6a:b6:01:2f:b5: f9:f9:5a:72:26:1d:0a:1d:e1:17:9e:b3:d7:78:aa: 48:fb:37:3d:5a:75:91:50:26:0f:41:7e:c2:c0:54: 8c:42:5b:9a:de:f7:17:a0:e2:44:eb:29:82:82:6d: 24:f3:e6:e0:aa:fb:42:2b:4f:45:10:d6:14:f6:2d: 5f:34:19:e9:27:6b:82:c7:19:b3:ea:8b:3d:fe:29: 32:dc:ed:00:25:c7:b2:6c:a3:83:d2:b7:75:fc:e5: 2b:5d:a2:d9:51:01:1a:ac:a6:cf:b2:69:81:81:48: 3b:ea:f8:f5:6e:bc:d7:11:ec:4d:a5:5b:7a:ba:e8: 8d:f2:a7:42:b4:36:97:35:86:6c:e2:4f:82:e6:7d: 27:3e:e2:51:03:ce:cf:9e:a3:99:2a:74:15:ea:4a: c4:95:e5:fc:fa:35:f6:24:4c:68:2f:7c:0c:9c:7e: 64:7f:06:d6:49:c1:b4:ae:cd:65:95:b5:e4:59:d6: c3:1b:9f:90:f9:61:53:55:bb:06:4e:4c:f5:1f:4f: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CB:2E:69:AA:5A:17:89:FF:24:76:DA:83:C7:92:2F:60:DD:9A:ED X509v3 Authority Key Identifier: keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/05939A1C554611F09F737331C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:db80::/48 Signature Algorithm: sha256WithRSAEncryption 8c:8f:a3:39:1e:d8:b4:bf:31:0a:ec:7d:93:fe:31:98:2a:a7: cc:b8:49:72:52:74:5e:27:55:93:55:24:41:39:4e:b6:c4:ec: b7:3f:8e:cb:a9:29:5f:2f:ac:ca:f0:7f:d3:2c:4d:86:ec:18: e6:34:48:86:7c:a7:94:26:26:b9:a9:ad:b7:c1:f3:68:a7:3b: 27:7f:f2:9e:b9:56:00:a5:ed:6a:1e:74:47:28:6a:ce:54:da: d7:31:af:e1:d8:69:c1:e8:a4:0f:e3:82:08:eb:cf:0f:dd:a0: c4:ed:db:45:7d:0e:91:13:8b:8c:53:f5:e9:38:88:aa:fd:9a: 04:1d:7d:38:2b:b8:94:63:4d:3b:6e:53:bc:57:17:6d:74:01: 67:7f:19:fc:0d:4d:84:d7:4a:17:aa:7f:3b:3f:73:75:4f:c9: 1a:cd:1f:24:01:7e:25:6e:cd:8b:3d:09:a4:50:6d:d1:d8:b4: 35:ee:84:a3:bd:da:d2:23:34:ba:0c:b7:c8:58:89:53:d5:48: 38:59:0a:ac:fc:76:33:9d:17:93:5c:e0:57:11:f0:de:e4:b6: e0:f5:79:f3:b5:9f:72:a4:23:ca:e1:ee:ed:5c:3a:e3:f7:26: 24:15:46:24:5b:ca:f3:20:11:c4:a3:f7:3a:63:ed:26:b8:40: f4:bf:b0:af -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc5OUMxMTAvBgNVBAUTKDYwMDI1MEY2MzgzNkZCNEMyRjIzRjQ4N0Q3MTRCRjMy Rjc1OUE1QjUwHhcNMjYwMjE5MDYzMDA3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjBlNy1jN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfQnpjhAkZOrOify40AVZImq0sacIJsCxx/8E5ZK2+tvDEQKVodjCKh6ez37 wQrbb8ZVqS85arYBL7X5+VpyJh0KHeEXnrPXeKpI+zc9WnWRUCYPQX7CwFSMQlua 3vcXoOJE6ymCgm0k8+bgqvtCK09FENYU9i1fNBnpJ2uCxxmz6os9/iky3O0AJcey bKOD0rd1/OUrXaLZUQEarKbPsmmBgUg76vj1brzXEexNpVt6uuiN8qdCtDaXNYZs 4k+C5n0nPuJRA87PnqOZKnQV6krEleX8+jX2JExoL3wMnH5kfwbWScG0rs1llbXk WdbDG5+Q+WFTVbsGTkz1H09oFQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFIbLLmmq WheJ/yR22oPHki9g3ZrtMB8GA1UdIwQYMBaAFGACUPY4NvtMLyP0h9cUvzL3WaW1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzk5Qy8zNUVCRDhFODU1 NDQxMUYwOTM0MkFDMENDNEY5QUUwMi9ZQUpROWpnMi0wd3ZJX1NIMXhTX012ZFpw YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lBSlE5amcyLTB3dklfU0gxeFNfTXZkWnBiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc5OUMvMzVFQkQ4RTg1NTQ0MTFGMDkzNDJBQzBDQzRGOUFFMDIvMDU5MzlBMUM1 NTQ2MTFGMDlGNzM3MzMxQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9duAMA0GCSqGSIb3DQEBCwUAA4IBAQCMj6M5Hti0vzEK7H2T /jGYKqfMuElyUnReJ1WTVSRBOU62xOy3P47LqSlfL6zK8H/TLE2G7BjmNEiGfKeU Jia5qa23wfNopzsnf/KeuVYApe1qHnRHKGrOVNrXMa/h2GnB6KQP44II688P3aDE 7dtFfQ6RE4uMU/XpOIiq/ZoEHX04K7iUY007blO8VxdtdAFnfxn8DU2E10oXqn87 P3N1T8kazR8kAX4lbs2LPQmkUG3R2LQ17oSjvdrSIzS6DLfIWIlT1Ug4WQqs/HYz nReTXOBXEfDe5Lbg9XnztZ9ypCPK4e7tXDrj9yYkFUYkW8rzIBHEo/c6Y+0muED0 v7Cv -----END CERTIFICATE-----Generated at Mon Mar 2 08:13:23 2026 by rpki-client