$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/E64DF1C2738811F1BF8D4D716EA30FBC.roa File: E64DF1C2738811F1BF8D4D716EA30FBC.roa (raw, json) Hash identifier: iJrlA/fXRT4W1n2691cfknEtMc2cf/JsdTEFTSHf6bg= Subject key identifier: 86:E5:7D:68:64:07:BD:A9:4E:E5:57:FA:FF:30:49:5F:40:E8:A1:8A Certificate issuer: /CN=A912C2EB/serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C Certificate serial: 2D Authority key identifier: 0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/E64DF1C2738811F1BF8D4D716EA30FBC.roa Signing time: Thu 17 Sep 2026 09:59:42 +0000 ROA not before: Thu 17 Sep 2026 09:59:42 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 142266 IP address blocks: 2401:bfa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2EB, serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C Validity Not Before: Sep 17 09:59:42 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aabba0e-5773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:01:44:61:06:2d:4a:c0:b3:08:9e:f5:3f: c6:bd:2e:ea:ef:a3:ca:8e:86:05:9f:09:25:86:48: 44:e0:4f:fd:4b:f0:9a:94:85:f6:a2:83:d1:92:ab: b7:eb:cd:bb:99:4f:30:f7:af:57:ba:24:4d:22:12: 09:99:cd:b4:6b:90:b6:0a:ed:c7:8b:1a:b0:37:74: 11:e8:f0:1d:b4:ad:2f:20:0f:cf:f5:c5:03:ee:0f: 57:55:33:64:b5:d4:a0:e7:8c:9c:6e:11:a4:dc:d8: b3:90:a8:2b:29:ca:35:7f:ee:9d:57:56:a9:ae:cc: 39:2f:c7:c5:d7:e9:ab:b7:65:f5:3a:8d:a1:1e:d3: 26:60:11:05:40:36:d0:6e:fd:05:0f:87:1c:63:2c: 52:8a:04:e8:12:07:06:6a:6c:bd:7c:7a:30:30:2e: 11:e6:6d:04:be:cc:6c:d4:17:01:28:23:10:35:89: 62:5e:cf:8b:d7:00:97:97:f8:6f:e3:42:b1:38:16: 1a:10:d0:89:ac:cd:ee:34:9a:69:cf:8d:5e:d4:f7: ad:a2:e6:2a:36:88:fe:d2:dc:26:f6:a1:bf:90:02: fa:be:f9:13:18:1a:4a:7a:0f:4c:2b:c4:11:11:5d: 57:f1:23:fa:4a:13:1e:96:1d:87:af:53:5d:ba:ec: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E5:7D:68:64:07:BD:A9:4E:E5:57:FA:FF:30:49:5F:40:E8:A1:8A X509v3 Authority Key Identifier: keyid:0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/E64DF1C2738811F1BF8D4D716EA30FBC.roa sbgp-ipAddrBlock: critical IPv6: 2401:bfa0::/32 Signature Algorithm: sha256WithRSAEncryption 62:58:66:9b:91:8e:8f:c7:30:62:84:f2:ec:b6:a7:d7:05:b5: db:cf:ae:85:3c:63:dc:ba:9a:57:cc:c9:fb:50:fc:11:4a:58: 84:6c:c2:78:54:09:77:74:91:99:a9:f7:8e:18:75:96:10:58: 82:bf:5e:22:db:37:67:5c:75:7f:33:71:b1:31:9d:bb:34:7f: 90:db:df:04:91:02:10:63:0a:ed:1a:f2:37:f1:9b:ca:41:d5: cc:f4:d7:3e:d0:fb:78:e7:14:f0:61:76:9f:14:91:55:aa:dc: dd:af:48:8d:d1:b3:8e:ea:b1:8f:17:6f:8a:a5:c8:ed:52:96: a4:bf:16:88:f8:eb:cd:22:c0:a9:3c:21:7a:7c:00:b0:81:42: 6f:d0:df:bd:72:62:7e:b9:a7:df:5e:72:5c:0e:66:a3:6f:a1: 93:e5:2d:d5:12:87:47:7c:dd:08:90:94:55:7e:30:31:b6:8a: 56:10:c9:d9:b9:aa:08:f2:d7:27:82:ca:03:03:c7:08:5e:28: 4e:ec:7b:43:f6:4a:c0:99:f0:6a:c3:96:d1:33:29:03:55:44: 01:ec:d7:b4:80:56:ac:39:82:6b:a4:82:0f:67:d8:58:a4:f6: fc:49:d0:75:b0:fa:74:92:46:01:f2:19:73:a7:10:ea:28:4f: 3c:f2:8f:d4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzJFQjExMC8GA1UEBRMoMEJEQjVCRTBDRjVGRjg3MjlFNURCMEYxQ0I1MjE5ODY1 RTg5QzM0QzAeFw0yNjA5MTcwOTU5NDJaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYWJiYTBlLTU3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC1wFEYQYtSsCzCJ71P8a9Lurvo8qOhgWfCSWGSETgT/1L8JqUhfaig9GSq7fr zbuZTzD3r1e6JE0iEgmZzbRrkLYK7ceLGrA3dBHo8B20rS8gD8/1xQPuD1dVM2S1 1KDnjJxuEaTc2LOQqCspyjV/7p1XVqmuzDkvx8XX6au3ZfU6jaEe0yZgEQVANtBu /QUPhxxjLFKKBOgSBwZqbL18ejAwLhHmbQS+zGzUFwEoIxA1iWJez4vXAJeX+G/j QrE4FhoQ0Imsze40mmnPjV7U962i5io2iP7S3Cb2ob+QAvq++RMYGkp6D0wrxBER XVfxI/pKEx6WHYevU1267LIpAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUhuV9aGQH valO5Vf6/zBJX0DooYowHwYDVR0jBBgwFoAUC9tb4M9f+HKeXbDxy1IZhl6Jw0ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDMkVCLzEwRTE2RDNFNzM4 ODExRjE5MTE2QUFERDZEQTMwRkJDL0M5dGI0TTlmLUhLZVhiRHh5MUlaaGw2Sncw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzl0YjRNOWYtSEtlWGJEeHkxSVpobDZKdzB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJFQi8xMEUxNkQzRTczODgxMUYxOTExNkFBREQ2REEzMEZCQy9FNjRERjFDMjcz ODgxMUYxQkY4RDRENzE2RUEzMEZCQy5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAb+gMA0GCSqGSIb3DQEBCwUAA4IBAQBiWGabkY6PxzBihPLstqfX BbXbz66FPGPcuppXzMn7UPwRSliEbMJ4VAl3dJGZqfeOGHWWEFiCv14i2zdnXHV/ M3GxMZ27NH+Q298EkQIQYwrtGvI38ZvKQdXM9Nc+0Pt45xTwYXafFJFVqtzdr0iN 0bOO6rGPF2+KpcjtUpakvxaI+OvNIsCpPCF6fACwgUJv0N+9cmJ+uaffXnJcDmaj b6GT5S3VEodHfN0IkJRVfjAxtopWEMnZuaoI8tcngsoDA8cIXihO7HtD9krAmfBq w5bRMykDVUQB7Ne0gFasOYJrpIIPZ9hYpPb8SdB1sPp0kkYB8hlzpxDqKE888o/U -----END CERTIFICATE-----Generated at Sun Sep 27 10:36:37 2026 by rpki-client