$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8D2CC3EE17DC11EE959DE671C4F9AE02.roa File: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA= Subject key identifier: 4E:BB:B8:CC:52:36:85:2D:8E:C2:9E:09:73:DA:22:B0:70:FB:24:C0 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0DC1 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8D2CC3EE17DC11EE959DE671C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:42:16 +0000 ROA not before: Sun 02 Nov 2025 19:08:17 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 65037 IP address blocks: 1.9.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:17 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48888-f2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:4f:8a:09:18:3c:7e:bf:3b:2c:3f:b3:35: 52:c3:6d:e9:d1:f1:a6:fb:66:0b:7e:4f:de:50:b4: 15:83:fe:ab:75:d9:b2:a9:43:49:4f:aa:da:cb:01: 19:1c:2b:7a:ff:e4:33:dc:33:bc:b6:55:57:3e:da: e5:1e:a9:ac:71:cc:c7:b8:f9:4d:ed:90:e4:82:04: 49:64:d2:5a:db:e0:d1:ac:e9:65:2b:0f:80:48:8c: 77:30:60:bd:67:bb:30:f9:2a:22:d6:0b:a2:df:fe: e9:14:38:26:68:37:fd:54:e5:73:0e:37:19:0f:e7: 4f:dc:66:5b:a4:22:01:c5:1d:1d:f4:a8:24:a7:1f: 05:8e:88:27:4a:7d:70:d8:2e:61:76:fd:1c:02:5b: 97:88:87:97:d1:42:63:1e:2b:d4:3d:d2:04:81:ab: 6e:8b:1b:ad:38:13:1d:1e:9c:de:72:8e:9e:78:b5: c6:f5:60:4e:65:d2:14:a7:ec:99:c4:2b:97:70:b5: d5:94:ff:a8:38:40:dc:35:9a:2d:9f:ec:9f:14:a4: 9d:70:2a:92:47:c7:72:36:6d:a8:c0:69:cf:51:25: 01:f4:52:ae:5b:f7:04:a9:0f:48:90:97:9f:9a:18: 53:65:6c:6a:a3:1b:40:28:52:23:93:b4:3e:40:41: 7a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BB:B8:CC:52:36:85:2D:8E:C2:9E:09:73:DA:22:B0:70:FB:24:C0 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8D2CC3EE17DC11EE959DE671C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 1.9.12.0/24 Signature Algorithm: sha256WithRSAEncryption 22:8b:d0:05:d1:44:30:68:4a:93:f7:f5:80:31:0b:d3:2d:f6: fa:66:98:68:8c:dd:f0:4c:1d:d6:8a:dd:df:36:dd:54:2f:08: 41:27:ec:7d:a8:47:83:ad:97:36:05:24:59:62:c9:ee:f9:ba: cc:b5:f2:56:b5:cf:82:d8:8b:ba:e5:a8:42:24:95:08:c9:e3: 09:89:a0:90:f2:16:e5:17:34:a1:c5:5d:71:dc:52:7f:ff:aa: 13:b3:93:da:ca:4e:6c:86:e6:1e:b5:2b:5b:0e:39:79:b5:0b: da:18:d5:68:77:70:c6:22:17:91:e3:b3:c2:2f:a3:61:b9:a2: 95:ee:6f:30:be:24:cd:4a:5a:a2:e4:56:66:c0:9e:9a:13:04: 07:8a:ce:78:7c:12:f1:cc:2f:84:c9:62:69:2a:cc:ed:98:95: 06:4a:05:a4:47:97:67:8c:38:c4:7b:ec:ad:5d:f5:21:c4:8f: 17:c2:f9:97:9c:76:a2:f9:b7:0a:f2:80:5c:d9:3d:e2:c9:3e: 8a:31:73:7f:66:d5:89:05:79:8e:d6:7e:85:aa:d6:44:d2:e0: bf:e0:29:ce:09:a7:58:19:8f:e1:a5:86:d5:02:d6:03:be:b2: 86:08:0c:3e:09:84:5d:14:c1:62:9a:62:76:4a:03:26:3e:b3: 5e:e6:2b:62 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODg4OC1mMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiJPigkYPH6/Oyw/szVSw23p0fGm+2YLfk/eULQVg/6rddmyqUNJT6raywEZ HCt6/+Qz3DO8tlVXPtrlHqmscczHuPlN7ZDkggRJZNJa2+DRrOllKw+ASIx3MGC9 Z7sw+Soi1gui3/7pFDgmaDf9VOVzDjcZD+dP3GZbpCIBxR0d9Kgkpx8FjognSn1w 2C5hdv0cAluXiIeX0UJjHivUPdIEgatuixutOBMdHpzeco6eeLXG9WBOZdIUp+yZ xCuXcLXVlP+oOEDcNZotn+yfFKSdcCqSR8dyNm2owGnPUSUB9FKuW/cEqQ9IkJef mhhTZWxqoxtAKFIjk7Q+QEF6rQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE67uMxS NoUtjsKeCXPaIrBw+yTAMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEQyQ0MzRUUx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAAQkMMA0GCSqGSIb3DQEBCwUAA4IBAQAii9AF0UQwaEqT9/WAMQvT Lfb6ZphojN3wTB3Wit3fNt1ULwhBJ+x9qEeDrZc2BSRZYsnu+brMtfJWtc+C2Iu6 5ahCJJUIyeMJiaCQ8hblFzShxV1x3FJ//6oTs5Payk5shuYetStbDjl5tQvaGNVo d3DGIheR47PCL6NhuaKV7m8wviTNSlqi5FZmwJ6aEwQHis54fBLxzC+EyWJpKszt mJUGSgWkR5dnjDjEe+ytXfUhxI8XwvmXnHai+bcK8oBc2T3iyT6KMXN/ZtWJBXmO 1n6FqtZE0uC/4CnOCadYGY/hpYbVAtYDvrKGCAw+CYRdFMFimmJ2SgMmPrNe5iti -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:28 2026 by rpki-client