$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/8672C378CCCB11EAAAE49011C4F9AE02.roa File: 8672C378CCCB11EAAAE49011C4F9AE02.roa (raw, json) Hash identifier: FeLVMuZX2eN+VtB+jCxOI2vvyTyfStxEs0+aHzgGUlc= Subject key identifier: 9E:55:59:9C:18:62:34:3A:CA:3D:CD:F8:FC:F3:38:7E:90:34:54:9F Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2A3E Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/8672C378CCCB11EAAAE49011C4F9AE02.roa Signing time: Sun 06 Sep 2026 16:24:43 +0000 ROA not before: Sun 06 Sep 2026 16:24:43 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 29802 IP address blocks: 2402:9e80:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10814 (0x2a3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Sep 6 16:24:43 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a9d93cb-465d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:d1:49:25:5c:e6:42:2b:06:6c:93:a8:4b: a0:21:46:76:27:67:85:10:5e:b6:fb:58:46:7a:ff: c0:a7:b6:d3:a4:e8:ee:89:dd:78:b3:2d:a1:7a:66: 12:de:45:9e:ce:9f:ac:c1:09:3a:45:7f:f8:29:a2: 73:af:ff:6c:ce:ce:1c:c8:8d:92:2a:c3:64:0b:53: 02:87:29:5f:43:d9:0a:b7:31:6d:ea:ed:3e:8c:de: 67:47:3b:5a:0a:85:d9:72:40:0d:05:55:47:a0:95: 2b:31:2c:1d:22:72:4f:fc:95:c1:ca:81:89:78:14: 3e:ec:24:84:6c:3c:50:68:9b:fa:2c:80:48:42:39: 54:59:d0:7f:2a:8b:0e:d2:65:c5:63:04:53:cd:c7: 43:2f:4f:3c:97:3a:03:81:3b:79:45:81:b8:37:ee: 55:f0:43:f1:c9:88:2d:c9:71:b4:0b:5a:70:67:ad: 1e:50:6e:4f:b9:c8:b5:1a:8d:4d:cf:c3:60:f5:98: 58:bd:91:cb:96:62:4b:8f:d8:e5:73:bc:41:76:0e: 29:3a:cc:48:39:dd:80:70:2d:ef:88:ed:18:9e:6c: d9:f6:65:ab:bd:1f:04:e8:14:76:84:65:cd:04:28: df:1f:68:31:24:a3:75:a8:40:84:5a:92:2e:2a:93: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:55:59:9C:18:62:34:3A:CA:3D:CD:F8:FC:F3:38:7E:90:34:54:9F X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/8672C378CCCB11EAAAE49011C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:9e80:8::/48 Signature Algorithm: sha256WithRSAEncryption 55:e6:fa:01:28:ee:26:d1:5d:be:4d:d2:c9:9a:03:95:01:0d: 3d:5d:09:64:3d:85:e8:c9:c4:26:5b:49:8f:05:4f:20:f9:b8: 71:34:95:46:28:3f:92:0d:0a:e9:1a:db:4b:8e:3a:c3:80:ce: 1f:5e:0c:b9:f9:78:49:8a:fe:88:fc:f0:d9:13:2a:8f:da:8e: aa:a4:e9:f2:b4:fe:6f:f7:66:8b:d4:52:85:61:40:be:49:d2: 3e:4d:a5:0e:b0:2f:e0:2c:4a:f4:5a:91:5a:71:36:e6:32:17: fc:ca:81:83:49:91:a7:aa:bd:6f:cf:8c:73:a0:ba:43:c1:64: b1:b4:a1:f7:e5:79:59:38:70:7d:f5:e9:ae:e5:1a:cf:dd:fe: 0a:30:d7:3a:73:ce:f8:32:49:07:cb:f8:df:5a:ee:52:61:5b: 43:79:b5:cf:4f:ba:e5:f9:e8:c9:c5:f0:59:3d:c9:19:35:b8: 9f:0b:99:b4:c0:87:d4:98:ec:53:83:8c:b3:d3:fb:2e:17:8b: d3:14:4a:27:33:b7:dd:e6:0e:4e:d2:c2:80:40:66:a5:a0:f7: fb:09:4a:6d:5e:d8:81:03:b6:e4:be:0e:58:0b:d1:12:07:e2: a8:2b:e7:23:11:65:d0:af:15:b6:f0:8d:17:32:7a:8c:12:82: 8f:63:63:c7 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICKj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjYwOTA2MTYyNDQzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlkOTNjYi00NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoHRSSVc5kIrBmyTqEugIUZ2J2eFEF62+1hGev/Ap7bTpOjuid14sy2hemYS 3kWezp+swQk6RX/4KaJzr/9szs4cyI2SKsNkC1MChylfQ9kKtzFt6u0+jN5nRzta CoXZckANBVVHoJUrMSwdInJP/JXByoGJeBQ+7CSEbDxQaJv6LIBIQjlUWdB/KosO 0mXFYwRTzcdDL088lzoDgTt5RYG4N+5V8EPxyYgtyXG0C1pwZ60eUG5Puci1Go1N z8Ng9ZhYvZHLlmJLj9jlc7xBdg4pOsxIOd2AcC3viO0YnmzZ9mWrvR8E6BR2hGXN BCjfH2gxJKN1qECEWpIuKpPaawIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJ5VWZwY YjQ6yj3N+PzzOH6QNFSfMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvODY3MkMzNzhD Q0NCMTFFQUFBRTQ5MDExQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAKegAAIMA0GCSqGSIb3DQEBCwUAA4IBAQBV5voBKO4m0V2+TdLJ mgOVAQ09XQlkPYXoycQmW0mPBU8g+bhxNJVGKD+SDQrpGttLjjrDgM4fXgy5+XhJ iv6I/PDZEyqP2o6qpOnytP5v92aL1FKFYUC+SdI+TaUOsC/gLEr0WpFacTbmMhf8 yoGDSZGnqr1vz4xzoLpDwWSxtKH35XlZOHB99emu5RrP3f4KMNc6c874MkkHy/jf Wu5SYVtDebXPT7rl+ejJxfBZPckZNbifC5m0wIfUmOxTg4yz0/suF4vTFEonM7fd 5g5O0sKAQGaloPf7CUptXtiBA7bkvg5YC9ESB+KoK+cjEWXQrxW28I0XMnqMEoKP Y2PH -----END CERTIFICATE-----Generated at Thu Sep 24 09:10:30 2026 by rpki-client