$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa File: 9DD5C0CA3CF111EF9B00241AC4F9AE02.roa (raw, json) Hash identifier: wuU/vVORb0TQws7YzvHLbybmjyNh85+ZZb5P4WF1U78= Subject key identifier: 51:67:75:85:02:D9:45:47:B9:EA:00:DE:09:69:DE:7A:6F:0C:C2:28 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D825 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:53:37 +0000 ROA not before: Thu 08 May 2025 16:28:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152539 IP address blocks: 2001:df3:fdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55333 (0xd825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:28:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c371-1a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:e0:a0:fe:61:78:50:23:a1:24:86:b0:13: 33:d7:2b:75:bb:f1:01:c4:65:ea:d2:5f:ed:ae:85: 3a:00:41:a9:ed:5a:ff:b7:cf:b4:76:2f:e3:f1:c6: 6d:3a:87:d1:f8:e0:7c:ad:3c:2c:b1:7c:e5:dd:c7: 39:06:4c:57:67:08:5b:fc:2a:15:39:31:f0:29:94: 01:b4:4b:46:8e:63:d2:b1:87:dc:e6:cf:85:87:84: 4a:97:bf:6c:3a:b3:4e:6d:a5:b8:1a:52:9b:13:90: 87:db:a3:a3:6f:79:42:fb:24:03:77:3b:d3:4a:10: b5:a2:91:08:b3:eb:67:8d:3e:5b:80:07:81:7d:d9: d5:82:66:b7:24:4a:ca:fd:ac:f9:b1:47:3d:1c:41: 10:31:37:ac:13:6a:2a:55:10:bf:a9:df:ff:b1:f4: fd:46:3a:b4:17:34:68:c5:57:15:c3:e0:07:8e:e1: 33:11:95:83:f1:11:82:aa:ae:55:ea:b3:d5:07:28: ac:b7:47:9d:43:ce:95:c4:34:a4:d4:34:2b:8e:2f: 0c:6c:d0:4e:eb:2d:72:e7:52:9b:14:90:12:c8:c6: 12:4d:01:4f:e5:6a:23:38:47:d7:25:e2:89:8d:74: e8:b7:c0:11:c7:11:30:48:bf:c6:1e:7e:59:57:51: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:67:75:85:02:D9:45:47:B9:EA:00:DE:09:69:DE:7A:6F:0C:C2:28 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:fdc0::/48 Signature Algorithm: sha256WithRSAEncryption 83:47:92:30:26:6c:f0:4e:d6:4a:f7:e7:09:aa:5e:8b:29:db: 3c:4a:9b:58:23:87:40:6e:9a:8a:ca:4f:cb:50:96:e7:1a:08: 6f:88:38:6d:73:88:e3:d4:1e:5b:2a:4f:13:2c:3f:05:15:ea: 59:94:0b:56:df:91:cd:d3:9b:96:20:d0:0f:6b:84:16:5a:15: 57:22:97:68:34:a7:20:af:69:43:6a:d1:58:8a:b0:62:cd:c3: 1e:a2:1f:08:ba:11:bd:6e:9e:c2:d5:63:b8:ca:48:59:29:37: 09:b3:8b:88:17:38:18:cb:41:91:54:ee:4a:7b:55:d1:06:8a: 0a:e0:02:09:5a:a7:87:dc:a2:93:5a:b3:1b:7d:92:80:83:98: 1e:b4:b0:e8:17:3c:e1:c3:22:ec:d0:28:5c:79:2e:04:c5:2d: 70:58:37:8d:1b:e7:11:93:72:32:14:81:ab:13:31:7a:0f:dc: d9:ee:ca:b5:f9:d0:7e:d3:2e:55:c6:fb:57:8e:7a:92:31:cb: 1d:7e:1f:3f:c2:e7:07:32:a3:18:40:0c:6f:a6:59:e2:c0:18: 40:a1:e8:21:a9:32:14:aa:1d:b5:a8:08:15:25:e1:43:9f:72: f0:47:1a:f8:2f:33:44:2b:a5:bd:c2:7d:49:47:6f:1a:6a:e7: 3a:70:76:91 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDANglMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjgzOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMzNzEtMWE3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCC4KD+YXhQI6EkhrATM9crdbvxAcRl6tJf7a6FOgBBqe1a/7fPtHYv4/HG bTqH0fjgfK08LLF85d3HOQZMV2cIW/wqFTkx8CmUAbRLRo5j0rGH3ObPhYeESpe/ bDqzTm2luBpSmxOQh9ujo295QvskA3c700oQtaKRCLPrZ40+W4AHgX3Z1YJmtyRK yv2s+bFHPRxBEDE3rBNqKlUQv6nf/7H0/UY6tBc0aMVXFcPgB47hMxGVg/ERgqqu Veqz1QcorLdHnUPOlcQ0pNQ0K44vDGzQTustcudSmxSQEsjGEk0BT+VqIzhH1yXi iY106LfAEccRMEi/xh5+WVdRmPUCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBRRZ3WF AtlFR7nqAN4Jad56bwzCKDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlERDVDMENB M0NGMTExRUY5QjAwMjQxQUM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfP9wDANBgkqhkiG9w0BAQsFAAOCAQEAg0eSMCZs8E7WSvfn CapeiynbPEqbWCOHQG6aispPy1CW5xoIb4g4bXOI49QeWypPEyw/BRXqWZQLVt+R zdObliDQD2uEFloVVyKXaDSnIK9pQ2rRWIqwYs3DHqIfCLoRvW6ewtVjuMpIWSk3 CbOLiBc4GMtBkVTuSntV0QaKCuACCVqnh9yik1qzG32SgIOYHrSw6Bc84cMi7NAo XHkuBMUtcFg3jRvnEZNyMhSBqxMxeg/c2e7KtfnQftMuVcb7V456kjHLHX4fP8Ln BzKjGEAMb6ZZ4sAYQKHoIakyFKodtagIFSXhQ59y8Eca+C8zRCulvcJ9SUdvGmrn OnB2kQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:15 2026 by rpki-client