$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/25342138B11C11F182DE95AD4511F970.roa File: 25342138B11C11F182DE95AD4511F970.roa (raw, json) Hash identifier: JNorVh4J5hD1g3opD5QXvy6/Z2sqrAUvUx2i2WRBflw= Subject key identifier: 89:36:D3:DE:BF:DD:9E:FA:B9:DB:98:F9:56:AF:B9:F2:9F:96:96:5F Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0271 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/25342138B11C11F182DE95AD4511F970.roa Signing time: Tue 15 Sep 2026 15:43:07 +0000 ROA not before: Tue 15 Sep 2026 15:43:07 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 151635 IP address blocks: 2401:1d20:1::/48 maxlen: 48 2401:1d20:2::/48 maxlen: 48 2401:1d20:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Sep 15 15:43:07 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aa9678b-56b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:63:88:ba:30:55:37:85:4c:a6:c9:46:f1: f2:20:71:84:e0:32:e2:5e:88:c7:4f:79:8e:8c:e2: 5e:4f:db:51:03:b8:c5:21:8c:ea:1a:c4:61:75:e4: f7:d2:fc:8b:36:a2:3e:9f:f2:32:c5:c5:e7:3f:31: a6:32:f5:10:c5:01:c9:21:70:28:14:b4:ab:84:88: 88:20:44:ee:f1:6c:fb:4e:95:e2:db:72:23:49:92: 7b:87:f0:bb:ba:71:f3:9f:2a:ab:ef:6a:80:2e:c3: 22:16:75:fc:c8:09:ee:61:1a:e2:e6:e9:22:b0:4d: 24:f5:5f:43:a2:3a:63:b7:4b:b3:6e:76:0a:c3:e3: 66:10:c7:80:a8:47:68:30:95:4a:b0:25:ea:b8:df: ff:92:09:47:c2:20:79:17:3e:b2:4e:3d:dd:34:fc: 08:6a:80:92:44:b5:c3:df:9f:31:af:01:3b:31:cd: 19:a8:13:07:26:0b:6d:41:f4:89:09:dd:6b:74:3e: 53:fc:8d:04:17:58:ba:ad:5f:49:4e:ab:ed:30:4c: 3f:62:a6:3b:7d:96:8e:01:6d:8b:5c:8e:5d:5b:f5: 25:45:95:2c:31:e5:91:3f:1f:a4:71:b0:96:3b:a5: 6a:55:0f:94:24:62:03:2b:59:02:df:e9:17:24:0e: 40:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:36:D3:DE:BF:DD:9E:FA:B9:DB:98:F9:56:AF:B9:F2:9F:96:96:5F X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/25342138B11C11F182DE95AD4511F970.roa sbgp-ipAddrBlock: critical IPv6: 2401:1d20:1::-2401:1d20:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 39:bf:60:39:df:9a:ba:f1:03:d6:25:e4:4d:45:19:7a:24:b0: de:73:0e:ee:a7:72:4b:ab:74:13:77:f4:1d:d4:2e:71:4e:ee: 21:90:8c:68:1b:ae:c5:0a:2d:ba:ae:2b:2c:d4:a4:ca:26:c8: 4b:44:9f:fd:f4:a8:d2:b4:36:7f:04:0b:b1:7a:89:0c:1e:a1: ac:f0:c7:d6:db:75:aa:aa:62:25:c9:a4:ba:fb:7f:e3:b5:ed: 8d:86:41:0f:69:3b:ea:af:6f:25:dc:b9:83:fd:01:16:35:d0: e8:b7:5e:27:49:c2:24:3c:c5:b9:e3:22:24:cc:46:8a:af:1f: a5:ff:c0:e9:6a:65:db:a0:ca:12:d7:e7:70:24:d1:ed:7c:a3: 57:db:69:c8:56:6f:ee:5d:44:a3:30:62:6a:ab:7e:b3:7c:71: c7:5d:44:ce:bc:c3:cf:21:08:4a:1b:ac:d4:0b:14:c7:96:0a: 5a:3a:ce:82:d8:06:ce:7a:fa:5b:ea:0f:4c:dc:4a:46:84:97: 47:01:5d:04:0c:88:31:9c:d0:54:1f:ab:56:52:dc:fd:9a:2f: bc:d0:e2:22:0b:0d:86:b2:62:43:97:8e:e3:ff:60:d4:05:0f: b6:58:c7:31:b9:d8:86:8d:3f:b4:d8:26:04:c4:4d:d2:19:89: 84:3c:de:ef -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjYwOTE1MTU0MzA3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE5Njc4Yi01NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDRjiLowVTeFTKbJRvHyIHGE4DLiXojHT3mOjOJeT9tRA7jFIYzqGsRhdeT3 0vyLNqI+n/IyxcXnPzGmMvUQxQHJIXAoFLSrhIiIIETu8Wz7TpXi23IjSZJ7h/C7 unHznyqr72qALsMiFnX8yAnuYRri5ukisE0k9V9Dojpjt0uzbnYKw+NmEMeAqEdo MJVKsCXquN//kglHwiB5Fz6yTj3dNPwIaoCSRLXD358xrwE7Mc0ZqBMHJgttQfSJ Cd1rdD5T/I0EF1i6rV9JTqvtMEw/YqY7fZaOAW2LXI5dW/UlRZUsMeWRPx+kcbCW O6VqVQ+UJGIDK1kC3+kXJA5AawIDAQABo4ICbjCCAmowHQYDVR0OBBYEFIk2096/ 3Z76uduY+VavufKflpZfMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIwMTcvREU3NUYyMjIyQTEzMTFFRTk1RDU4QTY2QzRGOUFFMDIvMjUzNDIxMzhC MTFDMTFGMTgyREU5NUFENDUxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwAkAR0gAAEDBwIkAR0gAAAwDQYJKoZIhvcNAQELBQADggEBADm/ YDnfmrrxA9Yl5E1FGXoksN5zDu6nckurdBN39B3ULnFO7iGQjGgbrsUKLbquKyzU pMomyEtEn/30qNK0Nn8EC7F6iQweoazwx9bbdaqqYiXJpLr7f+O17Y2GQQ9pO+qv byXcuYP9ARY10Oi3XidJwiQ8xbnjIiTMRoqvH6X/wOlqZdugyhLX53Ak0e18o1fb achWb+5dRKMwYmqrfrN8ccddRM68w88hCEobrNQLFMeWClo6zoLYBs56+lvqD0zc SkaEl0cBXQQMiDGc0FQfq1ZS3P2aL7zQ4iILDYayYkOXjuP/YNQFD7ZYxzG52IaN P7TYJgTETdIZiYQ83u8= -----END CERTIFICATE-----Generated at Thu Oct 8 14:30:39 2026 by rpki-client