$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/EB756434EBBD11ECB3DAFE39C4F9AE02.roa File: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (raw, json) Hash identifier: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c= Subject key identifier: A2:01:07:37:41:A8:2B:43:42:F6:FB:88:E6:BE:85:A6:B9:C5:E9:3F Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Certificate serial: 0366 Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/EB756434EBBD11ECB3DAFE39C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:03:35 +0000 ROA not before: Thu 03 Jul 2025 02:06:02 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149867 IP address blocks: 2001:df0:d440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Validity Not Before: Jul 3 02:06:02 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a42b17-a7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:fb:a2:fa:c6:04:1a:9a:50:c3:4c:86:a6: bc:a0:f7:a3:f5:b9:07:21:c7:05:43:d2:d8:f7:74: b3:a3:bc:31:79:03:ed:e1:38:a3:88:e9:02:ae:0a: 71:64:7d:fa:69:af:49:74:dc:88:31:66:2d:24:78: c2:d7:32:a4:cc:5b:e3:9e:40:94:53:b4:51:65:c8: b3:7c:7a:2d:57:de:10:5c:f3:87:6f:c8:86:41:7f: 88:84:2a:d4:34:03:6a:5c:41:51:1e:ad:30:52:25: 35:99:5e:a0:71:95:42:bb:88:9d:ec:ae:38:ff:a8: 3b:77:48:6e:e6:15:3b:3b:02:a9:a8:bb:67:70:82: 4b:11:82:5e:a2:90:72:4b:5f:16:5c:b9:ba:ac:3b: 5f:2b:f3:94:bb:96:df:ff:0d:40:8a:28:f2:f1:85: 47:a5:96:44:09:cd:3e:50:93:ed:5e:df:2e:14:54: 0a:d2:b5:3d:2c:98:75:42:22:b0:a7:43:fd:35:fc: 65:0b:cf:4b:d0:f6:d1:cd:6e:db:29:14:0f:dd:11: 22:4b:29:af:a5:ae:06:1e:07:8b:f7:32:e4:d6:fb: 65:d9:64:76:9b:58:3a:eb:14:d0:ca:d9:9c:fc:cc: 02:a9:56:83:ba:d9:49:af:ea:99:cf:99:01:aa:c1: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:01:07:37:41:A8:2B:43:42:F6:FB:88:E6:BE:85:A6:B9:C5:E9:3F X509v3 Authority Key Identifier: keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/EB756434EBBD11ECB3DAFE39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:d440::/48 Signature Algorithm: sha256WithRSAEncryption 16:4a:ae:a2:f8:78:15:9c:69:1c:dd:3a:96:8e:28:d3:cb:4d: 00:34:c7:85:20:04:8d:b9:5c:85:01:d6:3e:73:fe:c1:86:f9: 4e:87:68:81:8f:ad:3c:2d:8f:24:18:69:c0:b2:86:21:8c:cb: d7:8b:23:dd:fd:bf:09:ec:b3:87:f7:6b:33:e9:75:0f:da:64: 53:c6:19:bf:2c:fc:57:75:08:07:59:55:0e:31:81:5c:f6:74: 5c:24:1e:2d:de:97:01:4f:fb:be:d6:3f:38:8c:46:eb:4e:d2: c8:5c:d4:26:26:ec:70:30:cd:9b:6e:1c:78:0d:8b:02:78:79: 6e:b1:34:7b:af:bd:22:9d:44:1d:f0:0f:56:98:af:59:0b:47: 46:32:82:04:c4:a4:0c:f7:05:d4:5e:8f:cb:ed:77:56:28:67: 5f:e1:db:80:08:9f:77:f5:f0:fa:c1:ae:81:fd:69:1e:13:f2: 12:e7:19:9d:6f:74:19:98:1d:23:e6:fa:2f:46:f2:fa:96:94: 74:97:cf:e3:18:19:b4:ba:27:48:c4:4f:ae:e2:04:b1:2f:74: 88:1c:fd:47:3c:3c:c3:b4:66:2d:89:6e:84:91:ce:9b:91:ae: da:81:7b:2a:79:5d:79:79:f5:d6:cd:e9:da:1c:0f:d7:8c:43: 8a:ec:6d:71 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDOEMxMTAvBgNVBAUTKDU2M0YzMjk0OEVCQzFCMzkwRjMyQTBBQTNGMzYxNDc4 NUFGQ0U3QzIwHhcNMjUwNzAzMDIwNjAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmIxNy1hN2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn/7ovrGBBqaUMNMhqa8oPej9bkHIccFQ9LY93Szo7wxeQPt4TijiOkCrgpx ZH36aa9JdNyIMWYtJHjC1zKkzFvjnkCUU7RRZcizfHotV94QXPOHb8iGQX+IhCrU NANqXEFRHq0wUiU1mV6gcZVCu4id7K44/6g7d0hu5hU7OwKpqLtncIJLEYJeopBy S18WXLm6rDtfK/OUu5bf/w1Aiijy8YVHpZZECc0+UJPtXt8uFFQK0rU9LJh1QiKw p0P9NfxlC89L0PbRzW7bKRQP3REiSymvpa4GHgeL9zLk1vtl2WR2m1g66xTQytmc /MwCqVaDutlJr+qZz5kBqsGFbwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKIBBzdB qCtDQvb7iOa+haa5xek/MB8GA1UdIwQYMBaAFFY/MpSOvBs5DzKgqj82FHha/OfC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUM4Qy84OTk2NkRDQUVC QjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6a1BNcUNxUHpZVWVGcjg1 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqOHlsSTY4R3prUE1xQ3FQellVZUZyODU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FDOEMvODk5NjZEQ0FFQkI5MTFFQzk5RTU2MTBFQzRGOUFFMDIvRUI3NTY0MzRF QkJEMTFFQ0IzREFGRTM5QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8NRAMA0GCSqGSIb3DQEBCwUAA4IBAQAWSq6i+HgVnGkc3TqW jijTy00ANMeFIASNuVyFAdY+c/7BhvlOh2iBj608LY8kGGnAsoYhjMvXiyPd/b8J 7LOH92sz6XUP2mRTxhm/LPxXdQgHWVUOMYFc9nRcJB4t3pcBT/u+1j84jEbrTtLI XNQmJuxwMM2bbhx4DYsCeHlusTR7r70inUQd8A9WmK9ZC0dGMoIExKQM9wXUXo/L 7XdWKGdf4duACJ939fD6wa6B/WkeE/IS5xmdb3QZmB0j5vovRvL6lpR0l8/jGBm0 uidIxE+u4gSxL3SIHP1HPDzDtGYtiW6Ekc6bka7agXsqeV15efXWzenaHA/XjEOK 7G1x -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:59 2026 by rpki-client