$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/84064494E48F11EF8386EA50C4F9AE02.roa File: 84064494E48F11EF8386EA50C4F9AE02.roa (raw, json) Hash identifier: e2z23i28QBdo2imUKS15DY31HQcf+q8FZJ7ZqEZMi64= Subject key identifier: 58:72:80:D4:B0:A1:75:19:5B:C5:EB:B0:73:2A:A8:C9:F0:2F:43:8D Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1DE6 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/84064494E48F11EF8386EA50C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:06:21 +0000 ROA not before: Wed 24 Sep 2025 16:34:39 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 149844 IP address blocks: 2406:d00:ccc4::/48 maxlen: 48 2406:d00:ccc5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7654 (0x1de6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 24 16:34:39 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4801d-36c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:8a:0b:7d:f4:a3:d1:d3:19:d6:17:2e:17: 83:63:9a:a6:ad:6f:fa:a8:29:80:fd:e7:61:f7:9a: 1e:0f:71:d4:45:ff:f4:20:f0:4b:e8:a3:00:b9:32: 3f:21:56:b0:9c:6d:57:fa:d7:d9:f7:b2:d8:32:81: 3f:5b:ac:6b:59:9a:4f:ee:d9:39:06:b7:03:c0:ae: ba:15:c7:36:c6:8a:45:c5:35:5b:17:44:b9:68:7c: 1c:d8:a0:f7:5b:77:53:eb:58:2f:a8:34:53:18:a5: 33:1b:54:b3:e8:a9:b0:4f:85:7d:3a:35:83:65:f5: 2f:9b:9c:8d:98:87:34:9c:5d:db:d2:db:90:61:87: a1:cd:aa:4c:87:71:c1:a3:43:12:21:50:90:91:70: 4e:bb:16:03:f4:84:e5:69:f8:c6:56:0e:fb:7f:dd: 86:fb:05:dd:49:c3:89:f9:fa:45:8c:0b:d0:56:92: 33:26:a9:9f:7d:69:16:f6:80:5c:b1:f0:32:8e:61: b1:36:41:68:c5:0a:bf:cf:83:6c:01:30:fa:51:ba: fa:40:f0:c6:52:e9:65:af:95:3e:f8:23:22:9e:c7: 9c:62:a6:99:6e:97:22:5d:ba:6e:88:c9:fe:13:2d: e5:5e:53:ac:39:a0:59:3a:d9:ba:9f:ba:de:ef:6f: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:72:80:D4:B0:A1:75:19:5B:C5:EB:B0:73:2A:A8:C9:F0:2F:43:8D X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/84064494E48F11EF8386EA50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:d00:ccc4::/47 Signature Algorithm: sha256WithRSAEncryption 5a:0a:16:b2:7f:24:90:6b:00:69:94:9d:3f:09:c0:8d:c3:eb: 40:14:d2:14:3b:1d:30:01:be:8d:8a:e6:4a:53:b9:5b:eb:85: 3e:a6:ec:28:9e:be:24:ea:33:10:57:78:80:21:69:bd:f0:be: e1:a1:16:bf:71:e6:30:ff:2e:1d:72:8d:42:fd:6d:57:65:d0: 54:fa:74:45:6d:6a:c0:77:4a:bf:26:97:bb:9a:7d:e0:29:fa: 7e:4c:06:45:0c:44:9a:6a:07:95:07:c9:5b:88:26:f5:99:70: cb:cf:d3:8b:1b:65:19:74:c7:2e:cd:a6:4b:12:46:43:e0:0d: 0f:01:88:57:16:a6:8a:d9:57:db:90:ef:c3:81:dd:33:d6:c2: 74:cb:34:f0:78:56:3f:14:02:fb:51:a3:69:94:22:c9:86:35: 77:e1:21:df:f1:2c:11:b6:fa:84:38:0d:b7:3e:f8:bc:5f:89: 97:9c:a4:7c:d1:51:69:56:53:73:13:7f:04:01:c9:4f:af:3b: 29:e5:2f:95:78:7e:b3:1c:a6:c2:ed:75:52:46:21:37:f7:a1: 20:0d:01:4f:54:a1:dc:4f:c5:91:28:a4:4e:76:d7:d0:dd:b4: c3:56:e9:ef:b0:03:ec:14:76:6c:f5:29:9a:12:97:38:c4:27: 23:f0:f3:d1 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICHeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjUwOTI0MTYzNDM5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODAxZC0zNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYaKC330o9HTGdYXLheDY5qmrW/6qCmA/edh95oeD3HURf/0IPBL6KMAuTI/ IVawnG1X+tfZ97LYMoE/W6xrWZpP7tk5BrcDwK66Fcc2xopFxTVbF0S5aHwc2KD3 W3dT61gvqDRTGKUzG1Sz6KmwT4V9OjWDZfUvm5yNmIc0nF3b0tuQYYehzapMh3HB o0MSIVCQkXBOuxYD9ITlafjGVg77f92G+wXdScOJ+fpFjAvQVpIzJqmffWkW9oBc sfAyjmGxNkFoxQq/z4NsATD6Ubr6QPDGUullr5U++CMinsecYqaZbpciXbpuiMn+ Ey3lXlOsOaBZOtm6n7re729WTwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFhygNSw oXUZW8XrsHMqqMnwL0ONMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvODQwNjQ0OTRF NDhGMTFFRjgzODZFQTUwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcBJAYNAMzEMA0GCSqGSIb3DQEBCwUAA4IBAQBaChayfySQawBplJ0/ CcCNw+tAFNIUOx0wAb6NiuZKU7lb64U+puwonr4k6jMQV3iAIWm98L7hoRa/ceYw /y4dco1C/W1XZdBU+nRFbWrAd0q/Jpe7mn3gKfp+TAZFDESaageVB8lbiCb1mXDL z9OLG2UZdMcuzaZLEkZD4A0PAYhXFqaK2VfbkO/Dgd0z1sJ0yzTweFY/FAL7UaNp lCLJhjV34SHf8SwRtvqEOA23Pvi8X4mXnKR80VFpVlNzE38EAclPrzsp5S+VeH6z HKbC7XVSRiE396EgDQFPVKHcT8WRKKROdtfQ3bTDVunvsAPsFHZs9SmaEpc4xCcj 8PPR -----END CERTIFICATE-----Generated at Mon Mar 2 14:30:45 2026 by rpki-client