$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/BFE98870D00911F08B3BE011C4F9AE02.roa File: BFE98870D00911F08B3BE011C4F9AE02.roa (raw, json) Hash identifier: iWJLrvzKgxNbc1JW1lDrYQAh5nQktcAJb+hfOL0uYqs= Subject key identifier: B1:D9:39:EE:D5:2E:AA:79:F9:9D:4C:3E:B3:1B:5E:78:49:A9:2C:06 Certificate issuer: /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701 Certificate serial: 30 Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/BFE98870D00911F08B3BE011C4F9AE02.roa Signing time: Sun 01 Mar 2026 05:55:46 +0000 ROA not before: Wed 03 Dec 2025 05:34:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132103 IP address blocks: 2001:df6:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701 Validity Not Before: Dec 3 05:34:35 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d4e2-d922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:1e:42:bd:46:83:ec:ad:9f:2b:48:85:88: 0c:b2:a2:51:c5:e9:c6:aa:2e:8b:46:ba:92:b1:d1: 7e:29:59:50:18:db:d6:15:6e:d1:e2:2e:c1:52:46: 30:23:4a:88:9d:c1:1e:09:4d:1f:26:d7:37:4b:03: 03:f1:79:aa:4f:53:95:73:32:30:a5:f2:ea:50:06: 03:6d:1c:f4:7e:cb:28:d7:66:dc:0e:00:3b:94:17: 2a:3d:50:01:66:17:f0:e8:3a:9d:41:0c:55:4e:d2: 2b:95:1a:62:4b:7a:5d:30:c7:3e:3e:e8:4c:bf:9a: 23:05:1c:80:8b:bb:8a:8a:8d:0f:82:5a:25:07:43: e8:78:b7:a5:c2:16:03:c5:11:23:62:89:66:b8:93: d2:91:64:e0:87:1b:44:4c:a4:f5:8a:c0:94:22:65: 3c:1a:a0:7d:6c:be:a6:5c:fa:72:37:74:5b:41:51: 6f:c0:61:3b:99:3c:1b:c2:8e:ba:69:66:69:df:0b: 97:9c:b1:31:a7:6c:e9:c6:1b:a2:8f:c7:76:46:04: c1:2c:70:d9:39:10:9e:87:75:f4:4a:d5:aa:31:5b: 1b:9b:0a:fc:94:3e:55:81:de:3e:68:05:65:17:46: a1:cd:6b:26:a9:c3:09:80:6d:d2:ab:fe:30:d8:61: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:39:EE:D5:2E:AA:79:F9:9D:4C:3E:B3:1B:5E:78:49:A9:2C:06 X509v3 Authority Key Identifier: keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/BFE98870D00911F08B3BE011C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:6040::/48 Signature Algorithm: sha256WithRSAEncryption a1:02:a6:59:52:87:eb:6e:83:ff:5e:e2:fa:08:ff:1d:9b:c7: 9d:30:50:cf:42:8f:5a:a0:47:c1:ba:fc:ca:02:55:78:3c:bd: f7:b1:d7:b6:d6:8d:2b:60:da:7b:b4:44:58:49:ff:3c:77:a5: ee:6a:70:be:0a:9d:df:c1:95:6a:ac:d1:98:0f:f7:dd:7f:d7: 7e:6d:48:81:58:25:40:eb:4e:af:40:ee:81:ba:69:00:77:91: 80:31:77:08:0a:48:5b:26:cb:e0:d5:bb:22:f8:82:10:0a:0a: b7:2f:f0:7c:d0:66:95:f3:eb:38:46:5c:25:79:dd:7f:50:a2: 37:d4:38:aa:9c:76:99:d8:bb:54:af:aa:6e:fd:d8:45:4c:bc: 39:53:65:06:fe:3c:1d:64:a8:80:bb:a1:d7:80:43:2d:eb:78: 4b:d2:f5:d2:13:ac:5b:2d:24:f3:73:74:c0:30:1f:66:03:88: ae:ab:16:46:74:4e:f3:15:60:66:37:7b:6b:95:cd:0d:59:38: 54:b8:8c:93:05:3b:68:e0:f5:2b:d6:03:de:25:0d:0d:01:99: fa:44:a4:d6:d8:46:58:e9:fb:85:f4:99:f0:d0:e7:10:4d:ce: 76:2a:ef:db:6d:70:87:95:a3:d0:3b:51:c7:27:86:2f:93:6a: f7:e3:a1:41 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoNDUzNUNGMUQxMjIxQjcxNDA3QzE0MUNFNkJCNTczQThC NkJFODcwMTAeFw0yNTEyMDMwNTM0MzVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNGUyLWQ5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+qR5CvUaD7K2fK0iFiAyyolHF6caqLotGupKx0X4pWVAY29YVbtHiLsFSRjAj SoidwR4JTR8m1zdLAwPxeapPU5VzMjCl8upQBgNtHPR+yyjXZtwOADuUFyo9UAFm F/DoOp1BDFVO0iuVGmJLel0wxz4+6Ey/miMFHICLu4qKjQ+CWiUHQ+h4t6XCFgPF ESNiiWa4k9KRZOCHG0RMpPWKwJQiZTwaoH1svqZc+nI3dFtBUW/AYTuZPBvCjrpp ZmnfC5ecsTGnbOnGG6KPx3ZGBMEscNk5EJ6HdfRK1aoxWxubCvyUPlWB3j5oBWUX RqHNayapwwmAbdKr/jDYYRqnAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUsdk57tUu qnn5nUw+sxteeEmpLAYwHwYDVR0jBBgwFoAURTXPHRIhtxQHwUHOa7VzqLa+hwEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzJFODEyNzlFRDAw OTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhRSHdVSE9hN1Z6cUxhLWh3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlRYUEhSSWh0eFFId1VIT2E3VnpxTGEtaHdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVERi8yRTgxMjc5RUQwMDkxMUYwODM3MDBFNkJDNEY5QUUwMi9CRkU5ODg3MEQw MDkxMUYwOEIzQkUwMTFDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32YEAwDQYJKoZIhvcNAQELBQADggEBAKECpllSh+tug/9e4voI /x2bx50wUM9Cj1qgR8G6/MoCVXg8vfex17bWjStg2nu0RFhJ/zx3pe5qcL4Knd/B lWqs0ZgP991/135tSIFYJUDrTq9A7oG6aQB3kYAxdwgKSFsmy+DVuyL4ghAKCrcv 8HzQZpXz6zhGXCV53X9QojfUOKqcdpnYu1Svqm792EVMvDlTZQb+PB1kqIC7odeA Qy3reEvS9dITrFstJPNzdMAwH2YDiK6rFkZ0TvMVYGY3e2uVzQ1ZOFS4jJMFO2jg 9SvWA94lDQ0BmfpEpNbYRljp+4X0mfDQ5xBNznYq79ttcIeVo9A7Uccnhi+Tavfj oUE= -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:12 2026 by rpki-client