$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa File: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (raw, json) Hash identifier: bmZDBP315oKogWRN77TB7S1FyMQuLeHvXamkt99dOkw= Subject key identifier: 0A:E2:B6:D1:3E:45:43:10:20:5A:2B:6A:A8:54:FD:1B:64:63:BF:00 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0B1F Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa Signing time: Tue 10 Mar 2026 19:25:27 +0000 ROA not before: Tue 10 Mar 2026 19:25:27 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 56111 IP address blocks: 2001:df3:f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2847 (0xb1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Mar 10 19:25:27 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b07027-06a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:5b:51:0f:e6:12:f8:33:08:ad:c6:68:59: bf:6f:a2:1c:56:a7:ac:79:e3:2b:d7:77:19:fe:da: 9d:c0:fc:fa:cf:1b:fc:03:94:00:50:dd:80:0c:55: 4e:26:26:cf:12:f7:bc:08:13:0c:9d:38:40:9a:c6: 8a:d9:77:fe:b2:c5:66:74:9d:6f:53:ad:8f:fd:3e: f4:5d:72:e5:aa:67:59:8f:c7:48:57:91:08:a4:26: 46:79:3d:24:96:5f:cf:94:31:22:81:47:ba:9a:df: be:86:fc:a4:99:27:1c:7e:84:ef:75:d8:fc:60:17: 76:36:81:30:48:d1:8c:79:af:3e:64:8a:88:ac:2d: c5:b5:d7:37:b7:c3:4a:9e:5a:6d:64:aa:10:f6:88: c2:45:35:23:a8:26:64:6c:73:61:af:d0:99:c0:7c: 34:80:42:5d:47:e3:a3:39:57:66:cd:a0:50:1f:f5: 22:d4:8f:51:a1:4d:8b:21:88:47:b7:14:66:71:33: e7:7e:a8:46:09:70:2d:dc:46:f5:7e:91:9b:4f:ee: 27:9a:df:a2:f9:69:4f:56:d3:1c:63:1d:55:57:cc: 20:5d:c0:2f:3f:4b:db:a0:f6:ca:04:40:18:91:0d: 43:05:20:03:4f:3a:e8:9b:07:66:47:7d:05:46:1f: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E2:B6:D1:3E:45:43:10:20:5A:2B:6A:A8:54:FD:1B:64:63:BF:00 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:f80::/48 Signature Algorithm: sha256WithRSAEncryption 63:fc:8e:39:bd:38:5d:81:a9:f9:de:3e:33:4a:f5:43:76:69: 6d:2c:1c:15:97:f0:b2:33:2a:9b:aa:26:a5:51:8e:44:f4:87: bc:0d:21:80:41:20:d1:8b:f3:56:70:ec:da:d0:6e:b0:31:06: 2d:72:02:48:54:81:7a:a8:31:de:17:52:fa:d8:7f:a4:69:82: 7a:7f:b4:4e:7c:21:f8:2b:10:80:3c:fc:f3:32:b4:6e:69:b9: bf:7e:66:76:87:ff:62:e2:4e:72:69:57:8e:af:76:9f:68:03: 6a:4f:a3:0b:bf:bb:51:b1:81:c2:f4:b9:64:8d:63:3b:43:6b: c7:af:65:f8:4a:d2:6e:77:0b:74:7b:37:54:c4:32:84:18:af: bb:14:34:1a:95:6e:27:6e:fb:92:c7:45:9a:e8:ad:67:ea:02: 52:10:ad:01:24:d7:98:8e:b8:8c:6f:69:7a:bd:b4:b1:ed:fb: b0:9c:b2:c8:61:4e:91:7c:2b:56:9e:15:4e:b6:8a:10:ee:51: c4:db:fe:f5:26:93:f8:5b:38:e9:20:fe:82:7b:a2:b0:4b:17: 2b:8a:3b:8f:f0:83:a8:92:3d:e6:70:3c:bb:98:d3:69:5d:33: d9:ae:16:d7:45:dd:c4:4c:d3:e3:1b:ac:2c:8e:f8:b6:92:b6: c8:dd:1b:09 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjYwMzEwMTkyNTI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIwNzAyNy0wNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiu5bUQ/mEvgzCK3GaFm/b6IcVqeseeMr13cZ/tqdwPz6zxv8A5QAUN2ADFVO JibPEve8CBMMnThAmsaK2Xf+ssVmdJ1vU62P/T70XXLlqmdZj8dIV5EIpCZGeT0k ll/PlDEigUe6mt++hvykmSccfoTvddj8YBd2NoEwSNGMea8+ZIqIrC3Ftdc3t8NK nlptZKoQ9ojCRTUjqCZkbHNhr9CZwHw0gEJdR+OjOVdmzaBQH/Ui1I9RoU2LIYhH txRmcTPnfqhGCXAt3Eb1fpGbT+4nmt+i+WlPVtMcYx1VV8wgXcAvP0vboPbKBEAY kQ1DBSADTzromwdmR30FRh/7CQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFArittE+ RUMQIForaqhU/RtkY78AMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM0NUIvMjhEODJDODI1RjZFMTFFQTkyNEI5QjgwQzRGOUFFMDIvODg1REFFMzgz QjFDMTFFRUE2REYxMTdBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8w+AMA0GCSqGSIb3DQEBCwUAA4IBAQBj/I45vThdgan53j4z SvVDdmltLBwVl/CyMyqbqialUY5E9Ie8DSGAQSDRi/NWcOza0G6wMQYtcgJIVIF6 qDHeF1L62H+kaYJ6f7ROfCH4KxCAPPzzMrRuabm/fmZ2h/9i4k5yaVeOr3afaANq T6MLv7tRsYHC9LlkjWM7Q2vHr2X4StJudwt0ezdUxDKEGK+7FDQalW4nbvuSx0Wa 6K1n6gJSEK0BJNeYjriMb2l6vbSx7fuwnLLIYU6RfCtWnhVOtooQ7lHE2/71JpP4 WzjpIP6Ce6KwSxcrijuP8IOokj3mcDy7mNNpXTPZrhbXRd3ETNPjG6wsjvi2krbI 3RsJ -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:50 2026 by rpki-client