$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/346015149FAA11F18A4BD64D4911F970.roa File: 346015149FAA11F18A4BD64D4911F970.roa (raw, json) Hash identifier: xMDQ0XhWAWaoanvZWQtN3I67/HGwd3Ohi7M3HcKd728= Subject key identifier: 79:28:92:F7:4B:52:44:97:0A:70:7F:AD:6A:EB:58:97:A3:4A:53:E1 Certificate issuer: /CN=A9134CD9/serialNumber=08EC026B7201105DF018DAF850B71910BA580306 Certificate serial: 04 Authority key identifier: 08:EC:02:6B:72:01:10:5D:F0:18:DA:F8:50:B7:19:10:BA:58:03:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/346015149FAA11F18A4BD64D4911F970.roa Signing time: Mon 24 Aug 2026 10:54:40 +0000 ROA not before: Mon 24 Aug 2026 10:54:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2401:fe20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.crl rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CD9, serialNumber=08EC026B7201105DF018DAF850B71910BA580306 Validity Not Before: Aug 24 10:54:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a8c22f0-8756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:1d:9f:1a:8d:6b:72:ed:b2:0c:26:ce:a8: 03:68:aa:84:86:91:48:88:95:78:de:24:40:39:0c: c4:58:0c:32:c7:66:73:45:61:2a:be:3c:89:c9:1f: d7:e2:8d:c7:6a:df:ac:ce:52:bc:5f:18:d0:dc:73: 5b:6e:19:00:d3:14:30:ed:bc:ed:d7:66:14:7c:8e: 19:1d:96:2a:f3:30:b3:95:99:00:d1:3b:ad:07:d6: 6f:ad:2e:09:c7:24:da:70:7f:f6:2d:9b:90:e8:41: b7:e5:fb:31:ed:d5:b3:d5:5a:9e:97:04:87:29:87: e9:05:08:9b:5a:3f:dd:67:ab:d9:ec:cc:71:9a:70: 9c:37:55:60:9e:d3:60:78:a7:fb:86:29:a5:2e:bd: 52:3e:67:fe:37:2a:29:36:54:80:0d:e2:f6:3c:5a: bb:0a:7e:7c:81:e2:db:3b:d7:19:08:27:d6:64:1b: d6:52:9a:bd:fc:92:89:07:a7:77:1a:75:75:11:cb: bb:50:55:99:e2:eb:28:0b:a4:b6:de:1f:34:0c:9e: 35:56:5c:f6:61:37:c0:ab:5c:fd:17:d2:36:20:b5: 37:dc:ae:49:91:68:c9:bf:a6:53:6a:d6:bb:2f:47: fe:7c:da:b1:9a:9d:c1:ba:87:64:2f:d8:c7:fe:18: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:28:92:F7:4B:52:44:97:0A:70:7F:AD:6A:EB:58:97:A3:4A:53:E1 X509v3 Authority Key Identifier: keyid:08:EC:02:6B:72:01:10:5D:F0:18:DA:F8:50:B7:19:10:BA:58:03:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/COwCa3IBEF3wGNr4ULcZELpYAwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COwCa3IBEF3wGNr4ULcZELpYAwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CD9/E78495909FA811F186438C194911F970/346015149FAA11F18A4BD64D4911F970.roa sbgp-ipAddrBlock: critical IPv6: 2401:fe20::/32 Signature Algorithm: sha256WithRSAEncryption 2e:a5:cc:28:01:e9:ef:35:7b:d2:d7:3f:3c:9a:7e:f5:82:9e: 18:a4:e4:a0:b3:e6:00:b6:d1:f6:87:0f:c2:d3:7b:35:13:6a: 16:f8:c3:68:a4:ae:d9:36:4a:ef:70:b4:84:86:c7:54:73:4a: e5:57:f1:21:c4:ec:df:a1:2a:d6:10:68:0e:be:27:d9:c5:a7: 60:6d:a4:36:1b:76:23:ab:50:f1:5b:44:dd:69:24:74:62:4f: 2c:9a:10:48:24:42:4c:d3:33:0a:1d:c7:8f:74:7a:d6:63:a7: d4:f0:86:24:e4:9a:da:91:e1:ce:63:af:3e:d3:6b:e1:93:63: db:b7:8f:8a:a2:b0:a0:aa:d9:d4:2f:1b:04:b0:bc:18:8c:51: d2:1c:30:3e:8a:93:e8:44:29:37:bf:e2:75:33:d6:7f:45:e5: e6:13:e9:d8:80:0a:1b:30:66:8e:af:30:d3:fd:ba:88:19:37: 73:c5:56:76:ce:db:0a:0b:aa:dc:9f:f5:21:19:92:44:26:e7: d1:d1:d0:d9:15:b9:a4:95:2e:24:21:8a:81:b4:b7:51:6c:71: a6:5c:c6:d1:ac:2f:fb:21:f2:50:20:49:ee:e8:ac:5e:03:b4: 39:2f:d8:ac:12:be:17:7c:29:72:8c:1b:29:25:0e:65:18:46: e8:6f:cb:86 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NENEOTExMC8GA1UEBRMoMDhFQzAyNkI3MjAxMTA1REYwMThEQUY4NTBCNzE5MTBC QTU4MDMwNjAeFw0yNjA4MjQxMDU0NDBaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOGMyMmYwLTg3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPJx2fGo1rcu2yDCbOqANoqoSGkUiIlXjeJEA5DMRYDDLHZnNFYSq+PInJH9fi jcdq36zOUrxfGNDcc1tuGQDTFDDtvO3XZhR8jhkdlirzMLOVmQDRO60H1m+tLgnH JNpwf/Ytm5DoQbfl+zHt1bPVWp6XBIcph+kFCJtaP91nq9nszHGacJw3VWCe02B4 p/uGKaUuvVI+Z/43Kik2VIAN4vY8WrsKfnyB4ts71xkIJ9ZkG9ZSmr38kokHp3ca dXURy7tQVZni6ygLpLbeHzQMnjVWXPZhN8CrXP0X0jYgtTfcrkmRaMm/plNq1rsv R/582rGancG6h2Qv2Mf+GCNNAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUeSiS90tS RJcKcH+tautYl6NKU+EwHwYDVR0jBBgwFoAUCOwCa3IBEF3wGNr4ULcZELpYAwYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0Q0Q5L0U3ODQ5NTkwOUZB ODExRjE4NjQzOEMxOTQ5MTFGOTcwL0NPd0NhM0lCRUYzd0dOcjRVTGNaRUxwWUF3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ093Q2EzSUJFRjN3R05yNFVMY1pFTHBZQXdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEOS9FNzg0OTU5MDlGQTgxMUYxODY0MzhDMTk0OTExRjk3MC8zNDYwMTUxNDlG QUExMUYxOEE0QkQ2NEQ0OTExRjk3MC5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAf4gMA0GCSqGSIb3DQEBCwUAA4IBAQAupcwoAenvNXvS1z88mn71 gp4YpOSgs+YAttH2hw/C03s1E2oW+MNopK7ZNkrvcLSEhsdUc0rlV/EhxOzfoSrW EGgOvifZxadgbaQ2G3Yjq1DxW0TdaSR0Yk8smhBIJEJM0zMKHcePdHrWY6fU8IYk 5JrakeHOY68+02vhk2Pbt4+KorCgqtnULxsEsLwYjFHSHDA+ipPoRCk3v+J1M9Z/ ReXmE+nYgAobMGaOrzDT/bqIGTdzxVZ2ztsKC6rcn/UhGZJEJufR0dDZFbmklS4k IYqBtLdRbHGmXMbRrC/7IfJQIEnu6KxeA7Q5L9isEr4XfClyjBspJQ5lGEbob8uG -----END CERTIFICATE-----Generated at Fri Sep 25 09:53:58 2026 by rpki-client