$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa File: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (raw, json) Hash identifier: i/uGJVQ+1EKkA0/toLp/pPfAWJc/HlK7MkTNEPn6kO4= Subject key identifier: BF:A1:80:82:56:29:13:01:DC:44:3B:EA:FC:41:A1:A1:4E:2E:07:99 Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 269B Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:27:58 +0000 ROA not before: Sun 28 Sep 2025 16:13:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58691 IP address blocks: 2407:1500::/33 maxlen: 36 2407:1500::/48 maxlen: 48 2407:1500:1::/48 maxlen: 48 2407:1500:2::/48 maxlen: 48 2407:1500:3::/48 maxlen: 48 2407:1500:4::/48 maxlen: 48 2407:1500:5::/48 maxlen: 48 2407:1500:6::/48 maxlen: 48 2407:1500:7::/48 maxlen: 48 2407:1500:8::/48 maxlen: 48 2407:1500:9::/48 maxlen: 48 2407:1500:10::/48 maxlen: 48 2407:1500:8000::/33 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9883 (0x269b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Sep 28 16:13:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45afe-ea75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:4b:8e:78:58:8d:e8:87:f9:6c:a9:66:c9: 70:c8:20:c9:d9:c9:8a:b9:1c:a7:c0:b9:09:9d:f1: 41:87:38:c5:25:e1:37:16:4f:63:5e:a7:ea:ef:18: 75:ec:ff:4d:5f:90:0e:70:35:c1:06:7d:ca:3d:f5: 7d:a3:43:c6:6f:96:9a:50:33:66:24:a7:4c:8b:7b: fd:81:fe:f7:fb:ad:f8:2f:84:6a:8a:19:ec:ea:c0: 9d:94:ba:ee:44:5c:08:d2:be:df:e9:0b:7a:c8:63: 40:49:a3:44:21:eb:f5:04:e0:9e:72:36:53:73:62: 1b:6b:d1:c3:e9:f9:a5:bd:47:75:34:a6:e6:67:6f: 62:fa:1a:73:a4:3d:99:4e:90:72:29:f8:c5:0d:fb: b6:b2:41:91:96:1d:12:c4:84:9d:35:b9:9a:74:f0: ab:51:3a:08:e4:06:a4:ad:cb:27:60:c6:ab:8c:8c: 45:52:ff:e7:6c:f7:f9:b7:c1:c1:32:4a:0f:a6:2c: 8b:08:e0:ef:c7:be:8e:a4:92:8f:4b:6f:3b:0a:e6: e4:34:7c:aa:86:8c:6e:45:6b:ab:cd:ea:aa:df:bf: 14:0f:66:b2:18:ee:ff:07:3e:5f:a7:b8:63:1c:d9: 13:de:63:44:43:43:a1:89:2b:13:cc:6e:9d:6a:43: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A1:80:82:56:29:13:01:DC:44:3B:EA:FC:41:A1:A1:4E:2E:07:99 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:1500::/32 Signature Algorithm: sha256WithRSAEncryption 24:22:0a:9e:af:82:73:11:82:13:e4:b1:ac:ea:3a:11:be:59: 59:f5:17:ee:7d:3c:91:fa:cc:cf:40:67:a8:2d:b9:39:f1:7e: 2f:d3:fe:57:30:54:4b:b9:e5:6b:82:8b:0c:66:90:78:c3:38: 5b:ef:32:a9:ef:74:64:75:07:f5:50:4a:f1:08:22:1b:ef:61: 5b:9e:ac:6b:8e:dc:c4:db:c1:b5:b2:cd:b2:18:e3:8a:8a:18: b7:dc:fb:0e:c9:89:20:8b:1e:c3:3d:0c:55:a6:73:0c:d3:52: 26:50:2f:c7:46:18:50:68:04:04:1f:91:c1:11:e2:0f:41:d8: 1d:a0:11:10:9a:0d:63:34:11:1f:8b:3d:77:96:dd:fb:c5:8c: a3:64:43:58:87:d2:8b:e9:04:36:b7:db:ca:f6:98:d4:24:e1: 67:f5:c2:32:55:e7:da:3f:03:0c:34:16:0b:52:49:6f:ed:22: 21:0f:78:d0:14:25:60:ce:30:9d:ad:32:86:9f:48:ad:54:90: 5d:6b:7e:44:cf:e0:45:eb:11:15:a0:48:bd:37:1e:e6:aa:a4: b8:52:b5:f2:22:77:b7:52:61:99:b0:0a:b7:44:aa:75:e6:cb: 85:c5:26:02:58:00:7e:17:b2:0e:5f:eb:48:9b:32:38:a6:94: 75:b1:e8:b8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICJpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUwOTI4MTYxMzI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWFmZS1lYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QVLjnhYjeiH+WypZslwyCDJ2cmKuRynwLkJnfFBhzjFJeE3Fk9jXqfq7xh1 7P9NX5AOcDXBBn3KPfV9o0PGb5aaUDNmJKdMi3v9gf73+634L4Rqihns6sCdlLru RFwI0r7f6Qt6yGNASaNEIev1BOCecjZTc2Iba9HD6fmlvUd1NKbmZ29i+hpzpD2Z TpByKfjFDfu2skGRlh0SxISdNbmadPCrUToI5AakrcsnYMarjIxFUv/nbPf5t8HB MkoPpiyLCODvx76OpJKPS287CubkNHyqhoxuRWurzeqq378UD2ayGO7/Bz5fp7hj HNkT3mNEQ0OhiSsTzG6dakOquQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFL+hgIJW KRMB3EQ76vxBoaFOLgeZMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc1NEYvMkFEMTZGMzAxQTRBMTFFNTkyMDlFRDcyQzRGOUFFMDIvOUVENDZENUM3 MkY2MTFFRTg1N0NDMTNGQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAcVADANBgkqhkiG9w0BAQsFAAOCAQEAJCIKnq+CcxGCE+SxrOo6 Eb5ZWfUX7n08kfrMz0BnqC25OfF+L9P+VzBUS7nla4KLDGaQeMM4W+8yqe90ZHUH 9VBK8QgiG+9hW56sa47cxNvBtbLNshjjiooYt9z7DsmJIIsewz0MVaZzDNNSJlAv x0YYUGgEBB+RwRHiD0HYHaAREJoNYzQRH4s9d5bd+8WMo2RDWIfSi+kENrfbyvaY 1CThZ/XCMlXn2j8DDDQWC1JJb+0iIQ940BQlYM4wna0yhp9IrVSQXWt+RM/gResR FaBIvTce5qqkuFK18iJ3t1JhmbAKt0SqdebLhcUmAlgAfheyDl/rSJsyOKaUdbHo uA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:51:53 2026 by rpki-client