$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/E209029ACE9311F09FB94826C4F9AE02.roa File: E209029ACE9311F09FB94826C4F9AE02.roa (raw, json) Hash identifier: ufH3RqyZs/KCX/MEMIMIi9q3jKuJOCXeHV0hgCUZTCM= Subject key identifier: 10:CB:05:62:32:13:E4:94:EB:FC:46:B0:DD:81:B0:20:F3:21:BC:29 Certificate issuer: /CN=A918E1C4/serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B Certificate serial: 31 Authority key identifier: F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/E209029ACE9311F09FB94826C4F9AE02.roa Signing time: Sun 01 Mar 2026 05:56:17 +0000 ROA not before: Mon 01 Dec 2025 08:58:20 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153432 IP address blocks: 2001:df6:5f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1C4, serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B Validity Not Before: Dec 1 08:58:20 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d501-9e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:c0:df:2c:5f:8f:c3:d7:a3:da:05:d0:97: 72:f2:64:af:eb:45:02:03:08:76:60:ab:d8:ed:49: 5f:4a:38:81:83:e1:c6:d3:38:26:06:cd:02:55:c9: 3e:df:c9:fa:24:51:f4:af:94:da:47:7c:82:4f:a2: 52:b8:3e:62:f6:7b:ec:41:24:3e:37:fe:b7:a2:f3: 83:4f:71:ee:cc:9a:fd:96:f0:96:dc:39:5f:3a:b3: b3:9b:4e:e3:1e:d2:92:5d:f1:fd:5f:b4:ad:a6:57: e4:26:b0:dd:c9:8c:96:ef:05:60:f7:ce:a7:4d:37: 1a:66:7e:b2:66:bb:77:3b:86:fb:6c:fa:c4:85:2a: 29:5c:b9:6c:70:70:ad:02:cf:10:3c:c8:3f:39:72: b0:c6:01:e1:32:cd:10:9d:2a:7c:7d:99:31:26:e4: 09:05:49:09:dc:df:cf:b3:b5:d6:e5:77:ee:f6:f5: a8:4b:54:d4:c1:68:66:ff:db:f8:a5:c5:96:ae:90: c6:c1:92:84:94:3d:f8:4d:83:3f:8b:47:4c:c0:d0: ee:93:90:91:ee:86:b7:39:7b:85:69:19:51:6d:66: 04:94:d8:fe:98:0a:c1:2d:1c:97:8e:9f:fd:52:0f: 3d:4c:8c:4d:32:b3:53:d9:cd:f5:cf:71:b2:49:27: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CB:05:62:32:13:E4:94:EB:FC:46:B0:DD:81:B0:20:F3:21:BC:29 X509v3 Authority Key Identifier: keyid:F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/E209029ACE9311F09FB94826C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:5f40::/48 Signature Algorithm: sha256WithRSAEncryption a8:47:9a:bc:a0:97:21:f4:6d:b8:e6:69:57:11:ee:da:f6:fc: 93:18:c4:fe:15:ca:bc:77:0a:9c:2f:ad:de:fb:1a:3b:3c:49: d9:33:29:9b:e8:d3:a6:09:14:0b:d4:b7:fb:88:96:3c:cf:98: 8c:00:ce:40:24:33:53:da:1b:95:fb:80:bc:5d:0b:2b:db:2b: 2d:b5:e1:8b:e4:1c:2d:9a:d9:dc:5e:d8:59:bf:3f:2d:58:34: 7a:21:c2:df:4e:61:8d:92:a2:cd:91:0a:15:5b:6f:96:bb:f9: 0c:14:a4:46:64:58:bf:90:93:14:9f:98:bb:d4:90:87:14:8c: a4:ba:32:dd:61:77:57:56:ad:f3:33:db:56:cd:31:fd:ab:7d: ca:30:1c:cd:d9:dd:cc:1d:8d:c8:f8:1f:68:43:25:68:30:06: b5:e7:d9:df:5e:6a:20:f1:45:9b:5d:a6:6f:36:dd:29:b4:77: 9a:6c:f5:49:73:8e:66:52:a0:3c:59:79:e6:ef:7f:d8:0d:d9: 62:e2:bc:cd:0f:b2:ba:62:3d:39:10:d9:bf:04:93:db:7a:e1: e9:3b:57:60:3a:83:ec:0d:ad:ba:40:ed:ed:7a:a7:3c:2a:22: 9c:b5:a2:79:31:c4:04:fe:b6:99:46:87:c4:1b:11:0a:7a:fc: 42:fe:c4:ca -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTFDNDExMC8GA1UEBRMoRjA0OTU3MzdGRkE4OEUxOUZGMUUxNTJBNTYwMjFFQzc1 NkQ4NTI5QjAeFw0yNTEyMDEwODU4MjBaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNTAxLTllOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBZ8DfLF+Pw9ej2gXQl3LyZK/rRQIDCHZgq9jtSV9KOIGD4cbTOCYGzQJVyT7f yfokUfSvlNpHfIJPolK4PmL2e+xBJD43/rei84NPce7Mmv2W8JbcOV86s7ObTuMe 0pJd8f1ftK2mV+QmsN3JjJbvBWD3zqdNNxpmfrJmu3c7hvts+sSFKilcuWxwcK0C zxA8yD85crDGAeEyzRCdKnx9mTEm5AkFSQnc38+ztdbld+729ahLVNTBaGb/2/il xZaukMbBkoSUPfhNgz+LR0zA0O6TkJHuhrc5e4VpGVFtZgSU2P6YCsEtHJeOn/1S Dz1MjE0ys1PZzfXPcbJJJ6XfAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUEMsFYjIT 5JTr/Eaw3YGwIPMhvCkwHwYDVR0jBBgwFoAU8ElXN/+ojhn/HhUqVgIex1bYUpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMUM0LzE1Njk1NzYyQ0U5 MzExRjA5NjlFMTUyNEM0RjlBRTAyLzhFbFhOXy1vamhuX0hoVXFWZ0lleDFiWVVw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVsWE5fLW9qaG5fSGhVcVZnSWV4MWJZVXBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTFDNC8xNTY5NTc2MkNFOTMxMUYwOTY5RTE1MjRDNEY5QUUwMi9FMjA5MDI5QUNF OTMxMUYwOUZCOTQ4MjZDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32X0AwDQYJKoZIhvcNAQELBQADggEBAKhHmryglyH0bbjmaVcR 7tr2/JMYxP4Vyrx3Cpwvrd77Gjs8SdkzKZvo06YJFAvUt/uIljzPmIwAzkAkM1Pa G5X7gLxdCyvbKy214YvkHC2a2dxe2Fm/Py1YNHohwt9OYY2Sos2RChVbb5a7+QwU pEZkWL+QkxSfmLvUkIcUjKS6Mt1hd1dWrfMz21bNMf2rfcowHM3Z3cwdjcj4H2hD JWgwBrXn2d9eaiDxRZtdpm823Sm0d5ps9UlzjmZSoDxZeebvf9gN2WLivM0Psrpi PTkQ2b8Ek9t64ek7V2A6g+wNrbpA7e16pzwqIpy1onkxxAT+tplGh8QbEQp6/EL+ xMo= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:20 2026 by rpki-client