$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa File: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (raw, json) Hash identifier: CJcOsAsRwI2HXjgfMv8XqLziZucuo7uRUTz3QROpN9g= Subject key identifier: EC:33:44:E0:64:DB:97:1C:16:6B:FE:F8:FC:43:97:C8:F5:5F:47:6A Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192 Certificate serial: 0F15 Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:48:40 +0000 ROA not before: Mon 18 Aug 2025 17:57:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138164 IP address blocks: 240c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3861 (0xf15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192 Validity Not Before: Aug 18 17:57:49 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a5a347-47f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:c7:31:33:c8:df:1e:16:dd:ff:8d:fa:f9: 21:bd:8c:7b:3d:6b:f3:cb:14:26:b8:81:c5:18:6a: 15:80:ed:f0:19:26:3c:65:a9:a8:15:d5:8a:71:a7: 24:9e:07:94:c3:42:43:4e:3b:4c:e8:70:64:01:b0: 8a:cc:3d:78:85:97:03:fa:c8:45:96:71:88:ca:78: 0e:e0:b6:59:8b:e3:2e:66:1b:3b:11:62:ac:2e:b4: 9b:89:35:5c:d4:e7:36:5a:0b:dc:15:e5:e8:a6:d5: 73:5c:a8:f9:c7:41:51:6c:ba:14:7f:c7:2e:36:44: 36:5d:32:cb:c7:09:f6:a9:33:96:d6:07:82:32:11: 21:99:78:bd:7f:06:fb:b6:fc:8d:88:6d:8f:28:b3: 20:76:d2:7a:40:55:26:e3:00:98:be:51:2c:ba:39: eb:c7:4b:26:25:dc:82:1a:f7:d8:84:ce:f5:33:50: a4:c9:5f:ed:6a:3c:2b:06:7c:6a:3c:fe:78:d5:1d: fc:c3:32:2a:a9:2b:d4:c0:61:a8:ff:07:19:00:56: b0:c3:ab:f2:5b:4c:4a:ba:0a:c5:8e:bc:db:61:93: 5c:1e:fd:b6:4e:87:5e:81:eb:f7:16:fe:6d:2b:7c: ec:b0:a4:da:3f:c3:70:ef:91:1b:89:ad:17:04:3d: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:33:44:E0:64:DB:97:1C:16:6B:FE:F8:FC:43:97:C8:F5:5F:47:6A X509v3 Authority Key Identifier: keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 240c::/48 Signature Algorithm: sha256WithRSAEncryption 88:96:dd:96:d1:6e:8e:64:4f:7d:94:7d:c4:25:fe:ef:23:2e: bf:77:94:04:3e:22:04:ad:9d:30:a4:c5:04:16:c8:74:e7:97: 5f:84:e1:49:d9:98:9e:8d:ab:d1:eb:88:fe:fa:13:61:b0:31: ba:27:0a:87:93:7e:55:80:18:e2:1b:70:0b:21:12:b0:1e:00: 80:d6:2e:19:56:e2:55:1b:a9:a5:e2:ad:fb:b1:8f:45:f3:98: 5f:7f:cf:ef:28:35:a6:87:44:fc:4c:24:9c:d3:be:bd:77:0a: cd:19:14:8a:44:9e:ca:f9:7d:5d:98:eb:1c:4a:5b:97:e4:14: 25:5b:a8:09:78:13:d0:ad:14:04:d0:94:7e:7a:f3:7f:92:48: 4b:5f:69:91:4e:04:80:ac:50:48:94:cd:46:e5:4c:2d:40:fc: ca:3f:f4:d5:1a:5f:12:29:1e:23:56:55:5d:d4:de:fc:b7:2c: e6:6b:5f:0b:ae:46:cf:27:8b:90:76:29:1d:da:13:70:9c:19: 75:77:b6:82:79:57:32:05:fc:83:93:3a:19:12:72:22:e2:a1: d9:cf:eb:4a:77:b6:a3:60:bb:e3:85:a7:7e:2b:7d:72:2c:b4: 8d:5e:e8:e9:11:23:e3:a2:15:7c:75:69:8e:1c:34:d4:2a:8b: 9a:23:e9:8c -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICDxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBNkUxMTAvBgNVBAUTKEQwMDY2MTBFQkQ2ODI5Nzg0NTdERjhBREEyOTExMDAx MzM5MTAxOTIwHhcNMjUwODE4MTc1NzQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTM0Ny00N2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtDHMTPI3x4W3f+N+vkhvYx7PWvzyxQmuIHFGGoVgO3wGSY8ZamoFdWKcack ngeUw0JDTjtM6HBkAbCKzD14hZcD+shFlnGIyngO4LZZi+MuZhs7EWKsLrSbiTVc 1Oc2WgvcFeXoptVzXKj5x0FRbLoUf8cuNkQ2XTLLxwn2qTOW1geCMhEhmXi9fwb7 tvyNiG2PKLMgdtJ6QFUm4wCYvlEsujnrx0smJdyCGvfYhM71M1CkyV/tajwrBnxq PP541R38wzIqqSvUwGGo/wcZAFaww6vyW0xKugrFjrzbYZNcHv22Todegev3Fv5t K3zssKTaP8Nw75Ebia0XBD2DywIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOwzROBk 25ccFmv++PxDl8j1X0dqMB8GA1UdIwQYMBaAFNAGYQ69aCl4RX34raKREAEzkQGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0E2RS83OUVDRTgzODk4 QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tYaEZmZml0b3BFUUFUT1JB WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBWmhEcjFvS1hoRmZmaXRvcEVRQVRPUkFaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBNkUvNzlFQ0U4Mzg5OEJEMTFFOUFDOTlFNzRFQzRGOUFFMDIvNDI0MzFGRkM4 RkY3MTFFRUEwRkM5OTBGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAwAAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCIlt2W0W6OZE99lH3E Jf7vIy6/d5QEPiIErZ0wpMUEFsh055dfhOFJ2ZiejavR64j++hNhsDG6JwqHk35V gBjiG3ALIRKwHgCA1i4ZVuJVG6ml4q37sY9F85hff8/vKDWmh0T8TCSc0769dwrN GRSKRJ7K+X1dmOscSluX5BQlW6gJeBPQrRQE0JR+evN/kkhLX2mRTgSArFBIlM1G 5UwtQPzKP/TVGl8SKR4jVlVd1N78tyzma18LrkbPJ4uQdikd2hNwnBl1d7aCeVcy BfyDkzoZEnIi4qHZz+tKd7ajYLvjhad+K31yLLSNXujpESPjohV8dWmOHDTUKoua I+mM -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:00 2026 by rpki-client