$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/2346577EAE5811EFAFE7FF84C4F9AE02.roa File: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (raw, json) Hash identifier: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU= Subject key identifier: 1B:6F:CF:72:4D:50:C1:65:01:16:81:85:D2:4B:91:67:8F:26:88:58 Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Certificate serial: F6 Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/2346577EAE5811EFAFE7FF84C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:13:32 +0000 ROA not before: Wed 17 Dec 2025 06:24:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137047 IP address blocks: 2401:db60::/34 maxlen: 34 2401:db60:4000::/34 maxlen: 34 2401:db60:8000::/34 maxlen: 34 2401:db60:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Validity Not Before: Dec 17 06:24:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4579c-4fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:8a:a2:74:24:04:3e:d7:16:a6:ac:8f:a5: c5:f6:68:4c:ad:5f:a9:0b:62:4c:39:30:6f:4f:65: 89:ac:bc:86:16:22:64:78:14:b1:f2:2f:78:d1:a3: a4:ae:e4:69:d2:a8:d3:cc:bd:bc:c8:de:13:0f:c2: d8:83:2c:bf:7c:0e:3b:9f:f3:56:e9:19:79:48:06: fd:4b:cf:b6:9c:d1:f3:8b:07:ea:d2:82:71:44:e1: e8:b7:93:7a:f7:fd:ea:a8:3c:68:cf:ab:10:87:e8: 39:12:61:4a:cd:94:7e:f8:5b:fb:1b:8b:73:b7:97: 32:4b:a5:06:ed:b7:de:fe:4a:00:cd:72:f5:10:0b: d0:23:3a:2f:5e:11:77:47:f0:ee:e2:69:ea:83:da: ba:a8:9b:8e:f5:81:32:f1:db:e1:04:df:6d:d3:be: 00:5a:4b:12:ab:50:a2:43:30:b1:7a:4d:1c:f0:2d: fa:80:36:9c:3b:58:b8:4d:21:96:d4:93:39:da:6b: 97:eb:25:c3:e6:61:7a:5c:5f:f7:5a:ab:12:b9:36: 12:87:f0:7f:6c:fb:ce:02:53:a7:81:51:1e:fe:30: 11:6b:70:47:b6:46:86:f3:0d:43:d0:db:49:ee:df: a9:c0:95:eb:8c:2f:af:01:03:29:39:f7:3e:4e:0a: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6F:CF:72:4D:50:C1:65:01:16:81:85:D2:4B:91:67:8F:26:88:58 X509v3 Authority Key Identifier: keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/2346577EAE5811EFAFE7FF84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:db60::/32 Signature Algorithm: sha256WithRSAEncryption b6:3a:b0:1c:d0:c4:2f:51:8f:a1:8d:96:80:58:81:ac:f7:5e: 96:23:b8:67:6f:72:74:de:93:5c:d2:6f:eb:94:b3:0e:57:8b: 2d:62:fe:06:a1:2f:c1:ae:42:5f:9a:13:29:f4:23:ec:69:e5: ac:08:e4:6d:2f:15:05:e7:76:89:95:e4:6e:1e:e9:ef:4c:f1: 17:25:24:c0:c8:df:94:ab:b4:88:2d:c0:bd:6e:98:aa:09:6e: bf:19:a6:e6:b4:80:de:67:2f:e6:63:d4:13:a7:be:a8:f2:91: 6c:80:d8:24:c8:dc:07:b5:f9:d8:49:24:9b:4f:ec:5b:ab:6c: 91:61:7b:e7:6f:c4:91:bd:cb:fd:f3:a5:c4:90:ef:79:44:09: 8d:a3:86:37:c3:47:27:71:c9:1b:35:66:9f:eb:67:9e:2b:80: 72:2f:91:a6:1a:26:f6:8a:48:06:7a:80:9a:8f:ff:6e:f2:8d: 4b:67:92:31:93:ae:9c:7f:43:b0:ff:af:b6:71:78:0f:f5:7c: bd:6d:d2:c9:d2:09:58:4a:87:4f:9b:b8:ea:5e:e2:49:a6:e9: ea:90:0e:9b:d0:66:15:b4:f6:6b:9f:a4:7d:09:21:2b:42:63: 70:ac:8e:d2:29:c1:27:0e:8b:83:56:78:81:be:8f:91:04:1a: d6:cb:87:4b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw NjM0MDJERjEwHhcNMjUxMjE3MDYyNDIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTc5Yy00ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNaKonQkBD7XFqasj6XF9mhMrV+pC2JMOTBvT2WJrLyGFiJkeBSx8i940aOk ruRp0qjTzL28yN4TD8LYgyy/fA47n/NW6Rl5SAb9S8+2nNHziwfq0oJxROHot5N6 9/3qqDxoz6sQh+g5EmFKzZR++Fv7G4tzt5cyS6UG7bfe/koAzXL1EAvQIzovXhF3 R/Du4mnqg9q6qJuO9YEy8dvhBN9t074AWksSq1CiQzCxek0c8C36gDacO1i4TSGW 1JM52muX6yXD5mF6XF/3WqsSuTYSh/B/bPvOAlOngVEe/jARa3BHtkaG8w1D0NtJ 7t+pwJXrjC+vAQMpOfc+TgqvRwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFBtvz3JN UMFlARaBhdJLkWePJohYMB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIxMkEvQjlENENGNDJBRTNEMTFFRjk2Qjc2QzZBQzRGOUFFMDIvMjM0NjU3N0VB RTU4MTFFRkFGRTdGRjg0QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAHbYDANBgkqhkiG9w0BAQsFAAOCAQEAtjqwHNDEL1GPoY2WgFiB rPdeliO4Z29ydN6TXNJv65SzDleLLWL+BqEvwa5CX5oTKfQj7GnlrAjkbS8VBed2 iZXkbh7p70zxFyUkwMjflKu0iC3AvW6Yqgluvxmm5rSA3mcv5mPUE6e+qPKRbIDY JMjcB7X52Ekkm0/sW6tskWF752/Ekb3L/fOlxJDveUQJjaOGN8NHJ3HJGzVmn+tn niuAci+Rphom9opIBnqAmo//bvKNS2eSMZOunH9DsP+vtnF4D/V8vW3SydIJWEqH T5u46l7iSabp6pAOm9BmFbT2a5+kfQkhK0JjcKyO0inBJw6Lg1Z4gb6PkQQa1suH Sw== -----END CERTIFICATE-----Generated at Thu Mar 26 09:09:50 2026 by rpki-client