$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa File: A24902C8623B11F0BEB49510C4F9AE02.roa (raw, json) Hash identifier: 1rdsiyPcI00KSV/hreF4AXkXOxk2hHL3dZ7PhIJoG0c= Subject key identifier: C9:BB:A3:98:45:69:8C:BA:25:48:5F:63:27:D8:B0:E2:9D:AC:95:71 Certificate issuer: /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Certificate serial: 77 Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:11:28 +0000 ROA not before: Wed 16 Jul 2025 11:54:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45773 IP address blocks: 2001:df5:d2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB Validity Not Before: Jul 16 11:54:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3e6a0-4487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:df:6a:69:a4:47:3e:95:8b:bb:f0:22:b4: 95:98:e0:b2:3f:eb:06:2a:85:04:b6:76:af:b9:d5: a1:49:45:34:ea:6f:3f:ca:d3:8d:92:ec:ed:72:af: fe:32:5c:f8:c1:81:67:05:3a:20:f2:18:ea:b8:b2: b2:ba:b4:29:d7:2b:d0:6e:d7:ee:c1:7f:d0:28:1e: 94:c0:7f:30:32:e7:68:14:41:b2:d7:04:5e:a6:87: 55:34:78:ab:0f:d6:bb:d1:66:6f:67:f0:e8:91:13: 99:a4:c9:0e:4c:5f:98:a3:62:92:df:3b:99:c9:45: 87:9b:f8:48:72:14:67:b0:95:b6:8e:b2:43:e4:c6: 8e:f4:96:f6:ea:0c:44:81:d3:65:36:d5:5e:d7:e1: 3a:4f:e7:82:e2:13:87:32:ac:35:52:55:c5:0a:af: ef:ab:93:a1:9e:c9:eb:09:ea:66:c9:c9:4d:c9:e0: e9:1b:c6:96:0c:e2:98:99:86:98:67:ad:ec:f9:66: dd:bb:c6:56:bf:6d:ed:fc:58:02:d1:58:15:d7:09: ac:e4:38:58:3c:9a:18:a4:62:60:ff:9b:91:7e:84: a2:32:69:de:f3:a3:c7:ac:69:a8:ed:de:79:ea:fd: d0:e7:c7:99:c9:82:ea:25:c6:3c:7b:8f:b3:d9:32: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BB:A3:98:45:69:8C:BA:25:48:5F:63:27:D8:B0:E2:9D:AC:95:71 X509v3 Authority Key Identifier: keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:d2c0::/48 Signature Algorithm: sha256WithRSAEncryption 67:7e:e3:cf:4c:32:0e:b7:5c:01:df:01:76:7b:3e:a3:48:9a: ae:97:94:dd:40:fa:c6:62:f9:32:23:7b:22:fe:3c:cf:e7:cf: 1f:e6:34:d7:f0:86:21:da:21:e7:a9:c4:f4:98:67:ec:9a:31: bc:cb:ce:37:ba:d2:bc:c7:be:4f:62:21:e4:a3:ba:d1:b2:2f: 8c:b3:ac:da:1e:cd:de:23:b7:c1:1b:db:c5:2e:da:e2:8e:eb: 3b:b8:b1:25:bb:74:6a:dc:01:d3:d1:37:76:47:78:18:0a:9e: 60:58:d2:d0:0c:13:0e:d3:1d:1e:34:cb:45:90:ee:e3:d9:1b: 13:95:a6:cb:42:ac:0d:ae:89:9a:f7:35:df:e0:dc:b0:ec:37: 1b:d8:7f:28:6d:fc:fd:ce:b1:b3:28:7b:c0:f4:45:85:55:18: 26:76:04:21:5d:10:31:a3:cb:38:c4:4a:97:c4:8c:f8:43:3f: ce:33:26:18:39:90:21:2a:50:24:55:b7:c4:63:04:05:49:81: 02:61:82:4c:65:b7:81:73:22:7d:b7:7e:54:63:25:fc:30:c4: 6f:60:f4:c9:0f:d8:f6:81:78:9e:92:65:08:18:f8:74:1b:f2: da:0e:aa:7a:0b:fb:34:ac:9e:88:2d:03:13:67:c4:0d:fe:d9: 20:7e:64:e7 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoNEQ4RjU4MEM4RjU3NTk0NjdEQjhFQTBGMDhDMzExQTk2 RDNCM0ZCQjAeFw0yNTA3MTYxMTU0MzFaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNlNmEwLTQ0ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChdN9qaaRHPpWLu/AitJWY4LI/6wYqhQS2dq+51aFJRTTqbz/K042S7O1yr/4y XPjBgWcFOiDyGOq4srK6tCnXK9Bu1+7Bf9AoHpTAfzAy52gUQbLXBF6mh1U0eKsP 1rvRZm9n8OiRE5mkyQ5MX5ijYpLfO5nJRYeb+EhyFGewlbaOskPkxo70lvbqDESB 02U21V7X4TpP54LiE4cyrDVSVcUKr++rk6GeyesJ6mbJyU3J4OkbxpYM4piZhphn rez5Zt27xla/be38WALRWBXXCazkOFg8mhikYmD/m5F+hKIyad7zo8esaajt3nnq /dDnx5nJguolxjx7j7PZMr65AgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUybujmEVp jLolSF9jJ9iw4p2slXEwHwYDVR0jBBgwFoAUTY9YDI9XWUZ9uOoPCMMRqW07P7sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzVCQjA3NDNDNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL1RZOVlESTlYV1VaOXVPb1BDTU1ScVcwN1A3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFk5WURJOVhXVVo5dU9vUENNTVJxVzA3UDdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTk1MS81QkIwNzQzQzYyM0ExMUYwQTdFMjc2MEJDNEY5QUUwMi9BMjQ5MDJDODYy M0IxMUYwQkVCNDk1MTBDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ310sAwDQYJKoZIhvcNAQELBQADggEBAGd+489MMg63XAHfAXZ7 PqNImq6XlN1A+sZi+TIjeyL+PM/nzx/mNNfwhiHaIeepxPSYZ+yaMbzLzje60rzH vk9iIeSjutGyL4yzrNoezd4jt8Eb28Uu2uKO6zu4sSW7dGrcAdPRN3ZHeBgKnmBY 0tAMEw7THR40y0WQ7uPZGxOVpstCrA2uiZr3Nd/g3LDsNxvYfyht/P3OsbMoe8D0 RYVVGCZ2BCFdEDGjyzjESpfEjPhDP84zJhg5kCEqUCRVt8RjBAVJgQJhgkxlt4Fz In23flRjJfwwxG9g9MkP2PaBeJ6SZQgY+HQb8toOqnoL+zSsnogtAxNnxA3+2SB+ ZOc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:59 2026 by rpki-client