$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/FDEA040CE47611F0AE86B87D3F6F56BC.roa File: FDEA040CE47611F0AE86B87D3F6F56BC.roa (raw, json) Hash identifier: VvVN0UkrcyUsgTsRcJDur6SdDhFjjVg3M8oG+eXFEWo= Subject key identifier: F9:E3:01:8F:FF:ED:BE:39:58:32:6B:F6:30:B5:6F:1C:6E:0B:79:00 Certificate issuer: /CN=A9193C07/serialNumber=E71C07F165E7CEAC5967066416E7A5272698EF0E Certificate serial: 2A Authority key identifier: E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/FDEA040CE47611F0AE86B87D3F6F56BC.roa Signing time: Mon 02 Mar 2026 14:24:23 +0000 ROA not before: Mon 29 Dec 2025 05:30:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154462 IP address blocks: 2402:4320::/32 maxlen: 32 2402:4320:1::/48 maxlen: 48 2402:4320:2::/48 maxlen: 48 2402:4320:3::/48 maxlen: 48 2402:4320:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.crl rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C07, serialNumber=E71C07F165E7CEAC5967066416E7A5272698EF0E Validity Not Before: Dec 29 05:30:14 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a59d97-c2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:4a:d3:6b:c7:ef:8a:7d:19:ed:6e:98:90: c9:ee:af:2b:31:23:78:3a:0f:95:25:00:f0:f3:7f: 50:e6:01:27:e3:f8:ff:a9:7f:21:15:9d:f7:f8:43: 04:ca:5b:a6:58:43:6a:e3:50:0a:e2:33:08:30:6f: 5a:4e:69:6e:d0:a8:24:c7:cf:76:33:b0:58:f5:1c: 0e:4e:43:f8:27:9c:12:fc:c0:5c:c7:84:d6:eb:52: bb:18:9c:12:e2:18:45:83:90:62:f2:f2:5e:8c:e4: d2:75:89:64:aa:1b:7a:e4:08:1c:6e:ba:4a:ba:b5: 12:b6:de:ec:5b:aa:d5:42:0b:50:8c:ab:33:16:38: 1d:0f:a6:00:96:d4:12:3a:af:15:40:53:4a:f2:93: 91:3a:be:b1:f2:c3:8c:e7:36:a9:f0:19:4e:99:81: 33:6f:69:91:f4:4f:d2:3d:db:be:83:10:d3:48:0d: 8d:87:7a:3a:ed:b1:ae:72:57:48:7e:c9:c2:d0:0f: ef:f4:d4:35:53:ff:e9:1f:ed:11:3c:50:f0:3e:5c: e0:58:e2:7f:f8:ed:bd:5f:56:3b:6a:a9:54:5c:97: 24:87:5a:38:b5:46:29:41:53:23:33:4e:d5:80:b3: 46:46:10:87:d5:9e:8e:1f:09:c3:20:dc:88:a6:f5: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E3:01:8F:FF:ED:BE:39:58:32:6B:F6:30:B5:6F:1C:6E:0B:79:00 X509v3 Authority Key Identifier: keyid:E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/FDEA040CE47611F0AE86B87D3F6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2402:4320::/32 Signature Algorithm: sha256WithRSAEncryption 79:cc:f1:eb:66:85:53:e8:2b:fc:76:6e:cb:e4:94:ad:e1:71: 49:84:86:94:13:8f:1c:8f:2d:26:e3:66:db:0d:26:3e:0f:91: b1:ca:07:68:6f:d5:d9:74:29:a7:da:b3:3f:6a:b7:b4:5e:5a: e4:75:e9:fc:0b:b4:c2:e4:da:73:07:3e:46:c4:40:d4:0f:a7: ff:26:a7:33:03:b6:6d:4e:63:2c:51:ce:c3:43:27:2e:da:75: e0:46:7d:12:c7:00:6c:82:3b:33:13:65:33:09:8c:3b:76:43: f1:0e:39:f1:b3:43:ff:75:3a:e2:43:e8:85:c3:bb:a0:e0:22: 1f:2f:36:26:9c:aa:61:5b:e3:7a:69:7a:16:7e:48:69:13:06: 9d:f8:7f:24:b4:b8:55:ca:78:c0:09:a6:fa:07:27:37:dd:a7: 17:ca:c5:53:e5:41:61:64:e6:23:b9:bb:76:68:e6:d3:d3:81: 29:14:c7:3a:26:89:2e:76:02:f6:66:c5:c4:c6:51:11:7f:a0: d6:85:2a:e1:34:97:ea:6b:99:5e:3c:e4:6d:18:b3:34:4d:c4: b9:9c:9c:7d:14:67:38:f8:64:b6:dd:7f:af:60:57:70:f3:b8: d8:62:79:54:33:87:ce:4d:82:40:c0:d6:12:72:8a:6f:b1:65: a7:6f:c2:52 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0MwNzExMC8GA1UEBRMoRTcxQzA3RjE2NUU3Q0VBQzU5NjcwNjY0MTZFN0E1Mjcy Njk4RUYwRTAeFw0yNTEyMjkwNTMwMTRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU5ZDk3LWMyYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7JkrTa8fvin0Z7W6YkMnurysxI3g6D5UlAPDzf1DmASfj+P+pfyEVnff4QwTK W6ZYQ2rjUAriMwgwb1pOaW7QqCTHz3YzsFj1HA5OQ/gnnBL8wFzHhNbrUrsYnBLi GEWDkGLy8l6M5NJ1iWSqG3rkCBxuukq6tRK23uxbqtVCC1CMqzMWOB0PpgCW1BI6 rxVAU0ryk5E6vrHyw4znNqnwGU6ZgTNvaZH0T9I9276DENNIDY2Hejrtsa5yV0h+ ycLQD+/01DVT/+kf7RE8UPA+XOBY4n/47b1fVjtqqVRclySHWji1RilBUyMzTtWA s0ZGEIfVno4fCcMg3Iim9eBhAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQU+eMBj//t vjlYMmv2MLVvHG4LeQAwHwYDVR0jBBgwFoAU5xwH8WXnzqxZZwZkFuelJyaY7w4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQzA3L0VBN0EwRkVFRTQ3 NTExRjBCRDYwMDEzNTNGNkY1NkJDLzV4d0g4V1huenF4Wlp3WmtGdWVsSnlhWTd3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXh3SDhXWG56cXhaWndaa0Z1ZWxKeWFZN3c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0MwNy9FQTdBMEZFRUU0NzUxMUYwQkQ2MDAxMzUzRjZGNTZCQy9GREVBMDQwQ0U0 NzYxMUYwQUU4NkI4N0QzRjZGNTZCQy5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAkMgMA0GCSqGSIb3DQEBCwUAA4IBAQB5zPHrZoVT6Cv8dm7L5JSt 4XFJhIaUE48cjy0m42bbDSY+D5Gxygdob9XZdCmn2rM/are0Xlrkden8C7TC5Npz Bz5GxEDUD6f/JqczA7ZtTmMsUc7DQycu2nXgRn0SxwBsgjszE2UzCYw7dkPxDjnx s0P/dTriQ+iFw7ug4CIfLzYmnKphW+N6aXoWfkhpEwad+H8ktLhVynjACab6Byc3 3acXysVT5UFhZOYjubt2aObT04EpFMc6JokudgL2ZsXExlERf6DWhSrhNJfqa5le PORtGLM0TcS5nJx9FGc4+GS23X+vYFdw87jYYnlUM4fOTYJAwNYScopvsWWnb8JS -----END CERTIFICATE-----Generated at Mon Mar 2 19:58:36 2026 by rpki-client