$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/8A69BFBAC67011EFAE929D0DC4F9AE02.roa File: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (raw, json) Hash identifier: 8sa62+T7pJg8Z/Ix+b37ZqcmW0JmMLxyohi49hkjzWc= Subject key identifier: F3:9C:74:44:13:E3:28:F5:7B:8A:1D:45:5B:AB:C6:F0:BB:60:BD:0E Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: EB Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/8A69BFBAC67011EFAE929D0DC4F9AE02.roa Signing time: Thu 19 Mar 2026 05:43:37 +0000 ROA not before: Thu 19 Mar 2026 05:43:37 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135609 IP address blocks: 2401:e2a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Mar 19 05:43:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69bb8d09-b8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:72:0b:0f:26:86:5f:4c:26:d5:45:1b:bf: 2e:0c:e6:0f:f8:2b:b4:12:7f:c8:dd:ed:19:ba:2b: 12:9a:c4:ef:42:9a:58:4d:23:2d:1a:1e:7f:f6:e0: 67:fb:57:c1:01:6d:ca:7d:74:89:4f:a9:68:b6:4f: c8:a5:75:dd:96:6a:9b:a6:53:a4:dd:1b:92:27:b2: db:3f:0f:e8:4a:75:1f:12:b6:b1:45:b7:5e:8d:07: 93:58:d9:50:9f:5c:f6:ed:b0:11:54:18:a3:4e:a3: 8d:48:04:ed:39:70:ac:30:2d:0d:3e:b8:a7:5f:c0: 5f:a3:5d:64:7a:22:a8:45:ed:f8:fb:71:27:b8:47: 0b:0c:a1:db:9e:fe:e9:c5:fd:53:c6:f2:b7:e0:a1: f9:3b:b9:28:1b:89:be:2d:b2:15:67:cb:56:52:e1: 0f:95:ff:8d:97:00:b0:88:d7:96:11:59:8c:a1:50: 61:a9:f4:b0:f3:d3:8b:56:65:0c:bd:a6:0f:a7:87: e7:fb:ec:04:c6:39:08:a9:4f:ce:12:ea:0b:78:51: 3d:d1:28:a2:fe:fa:37:3d:e2:ea:12:4b:86:d8:87: 00:41:da:ea:ea:3c:e4:c0:28:19:14:42:af:f1:5c: e9:87:42:f3:e6:07:3f:b0:64:1d:de:24:b2:c2:46: 60:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:74:44:13:E3:28:F5:7B:8A:1D:45:5B:AB:C6:F0:BB:60:BD:0E X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/8A69BFBAC67011EFAE929D0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:e2a0::/32 Signature Algorithm: sha256WithRSAEncryption 50:af:11:bf:e7:c8:9f:db:e5:af:3d:46:29:23:f4:2b:63:e0: d8:22:12:d3:ee:ac:cb:2e:9b:db:6e:92:22:ff:be:f2:d6:ba: 3d:e7:e9:f3:04:2c:8a:b1:36:c8:b5:64:1d:01:9f:e4:75:e3: d3:b2:d8:01:c4:64:19:1e:ae:96:af:0b:8d:fd:f3:db:33:09: a0:41:78:99:5a:8e:eb:46:ce:9b:d9:98:b1:5e:85:c2:ee:a3: 4c:2f:20:24:dc:f0:a8:f2:da:3f:ca:6c:fb:bd:c2:b6:d3:de: 40:3a:c8:22:51:79:d8:4e:04:ab:ed:24:7e:b3:6a:68:ba:7b: cd:87:44:3d:68:32:8a:8b:e7:ba:86:38:79:58:5e:08:57:3d: fe:02:2e:b1:75:92:9b:12:4f:1b:41:da:7a:4e:75:3a:6f:0f: b0:ad:f2:48:31:7f:54:f0:1d:79:53:c3:f3:38:1a:84:b9:a9: af:58:3e:ab:4d:2a:8c:57:6a:91:b6:ea:ce:9c:83:00:c0:9c: fd:8b:b1:bd:85:6f:7a:d5:92:f3:ed:b1:9a:a5:eb:72:44:d7: 6b:04:54:f9:aa:96:b7:ff:25:10:5f:ca:a1:61:03:3c:c4:67: e0:d1:c6:2d:b2:cd:54:0c:c5:43:3a:cc:32:3d:b5:08:af:b0: 92:04:71:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyODExMTAvBgNVBAUTKEMxQjc2NkRBMjlFRDI5M0RERkE1Q0NFQjBBRTQyOTc0 NTQ0NEQ2MTUwHhcNMjYwMzE5MDU0MzM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJiOGQwOS1iOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKpyCw8mhl9MJtVFG78uDOYP+Cu0En/I3e0ZuisSmsTvQppYTSMtGh5/9uBn +1fBAW3KfXSJT6lotk/IpXXdlmqbplOk3RuSJ7LbPw/oSnUfEraxRbdejQeTWNlQ n1z27bARVBijTqONSATtOXCsMC0NPrinX8Bfo11keiKoRe34+3EnuEcLDKHbnv7p xf1TxvK34KH5O7koG4m+LbIVZ8tWUuEPlf+NlwCwiNeWEVmMoVBhqfSw89OLVmUM vaYPp4fn++wExjkIqU/OEuoLeFE90Sii/vo3PeLqEkuG2IcAQdrq6jzkwCgZFEKv 8Vzph0Lz5gc/sGQd3iSywkZg3wIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFPOcdEQT 4yj1e4odRVurxvC7YL0OMB8GA1UdIwQYMBaAFMG3Ztop7Sk936XM6wrkKXRURNYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xQUY3REY2QUM2 NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtUM2ZwY3pyQ3VRcGRGUkUx aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYyODEvMUFGN0RGNkFDNjZFMTFFRkE3ODdGODY1QzRGOUFFMDIvOEE2OUJGQkFD NjcwMTFFRkFFOTI5RDBEQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAHioDANBgkqhkiG9w0BAQsFAAOCAQEAUK8Rv+fIn9vlrz1GKSP0 K2Pg2CIS0+6syy6b226SIv++8ta6Pefp8wQsirE2yLVkHQGf5HXj07LYAcRkGR6u lq8Ljf3z2zMJoEF4mVqO60bOm9mYsV6Fwu6jTC8gJNzwqPLaP8ps+73CttPeQDrI IlF52E4Eq+0kfrNqaLp7zYdEPWgyiovnuoY4eVheCFc9/gIusXWSmxJPG0Haek51 Om8PsK3ySDF/VPAdeVPD8zgahLmpr1g+q00qjFdqkbbqzpyDAMCc/YuxvYVvetWS 8+2xmqXrckTXawRU+aqWt/8lEF/KoWEDPMRn4NHGLbLNVAzFQzrMMj21CK+wkgRx Hg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:55:06 2026 by rpki-client