$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa File: 118F422C816F11EF9ACB654AC4F9AE02.roa (raw, json) Hash identifier: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo= Subject key identifier: 9B:B8:41:4A:D4:0B:67:8B:5C:E5:BB:A0:42:02:CB:74:95:55:33:AA Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 19B6 Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:44:28 +0000 ROA not before: Thu 02 Oct 2025 16:44:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 20940 IP address blocks: 2400:2000:6::/48 maxlen: 48 2400:2000:7::/48 maxlen: 48 2400:2000:b::/48 maxlen: 48 2400:2000:c::/48 maxlen: 48 2400:2000:f::/48 maxlen: 48 2400:2000:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6582 (0x19b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Oct 2 16:44:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a612cb-0bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:24:c2:86:7e:65:67:e0:95:5a:70:b4:63: 67:a6:68:b1:73:44:53:5e:10:0d:3b:aa:37:f0:1f: af:94:0c:93:f3:d8:0c:3c:9d:f6:6a:c2:6a:56:4a: 3d:0d:97:13:d4:cb:af:69:7b:43:7d:50:a5:ed:0a: 95:5e:b8:b2:0c:82:19:ff:1c:c9:1c:ff:d0:fb:26: 8e:54:87:b9:7c:6b:9f:32:39:2d:bd:2e:dc:91:20: 14:e3:c8:bb:f9:af:50:12:90:fa:16:a2:54:b5:70: 64:70:a9:d8:89:3d:b2:c4:14:d1:ca:8c:54:88:c1: 7b:54:ff:a6:13:a6:a0:25:29:32:14:78:b9:bf:1e: 14:34:b4:57:e7:56:92:1b:8a:7b:3d:ee:18:7f:f8: 0e:37:23:a6:b4:71:86:ca:b4:c0:75:60:98:4b:c1: 2e:00:21:67:4f:eb:16:b2:fd:ac:95:a0:77:02:12: 46:81:3b:6a:f3:27:dd:8a:03:c8:c0:1d:1b:bd:b6: c4:6a:4f:99:39:10:43:26:a3:3d:72:43:be:93:f8: 09:ac:0c:e4:ee:28:2e:09:0e:6b:8e:32:9d:90:8a: d1:a7:ea:c4:86:f5:79:98:b4:45:92:95:18:cc:0c: e8:56:fa:30:f9:4c:de:fb:58:81:9d:a4:0b:da:8d: 34:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B8:41:4A:D4:0B:67:8B:5C:E5:BB:A0:42:02:CB:74:95:55:33:AA X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:2000:6::/47 2400:2000:b::-2400:2000:c:ffff:ffff:ffff:ffff:ffff 2400:2000:f::-2400:2000:10:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 14:ed:1a:66:85:99:2d:b2:8f:8c:5b:62:b7:20:ae:69:73:c1: 10:ff:6a:09:01:1a:82:02:e4:b6:88:ac:a8:fa:f4:80:b0:61: be:4c:34:51:c8:e9:16:7f:05:ff:e3:3c:8b:e3:97:b9:08:fb: ce:cb:65:92:f1:e6:50:f8:af:b6:77:6b:21:98:77:35:76:c8: 83:4c:5f:b6:40:f1:c2:b4:63:f8:00:aa:bc:dc:57:4d:bb:7e: d1:35:a9:dc:87:ea:5e:00:8f:59:63:93:27:d0:7d:11:4d:42: a4:81:93:80:4b:96:f3:11:27:c0:65:5c:4b:86:47:ee:e9:49: 42:c7:f3:1f:9e:08:40:d8:18:f4:12:c1:75:e3:30:98:d9:36: a6:1e:44:7a:64:f0:77:65:cf:8a:e0:cf:2d:d3:16:4a:cc:e9: fa:20:89:3d:5a:7e:81:ea:f8:e6:6d:35:e3:13:49:e5:fa:b3: a7:25:80:18:66:18:1a:57:df:62:f7:22:67:c8:a6:f5:1b:11: 3d:48:92:cd:bd:5c:ac:45:2c:32:c5:01:fe:ca:db:39:35:c3: d9:1a:7a:6c:38:1d:b8:c4:47:c4:b5:1e:d9:3d:47:37:94:49: 17:dd:b0:c6:23:19:27:c9:c5:f4:11:69:22:b9:17:d0:a8:44: 5f:1b:85:b2 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICGbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjUxMDAyMTY0NDU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MTJjYi0wYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLkkwoZ+ZWfglVpwtGNnpmixc0RTXhANO6o38B+vlAyT89gMPJ32asJqVko9 DZcT1MuvaXtDfVCl7QqVXriyDIIZ/xzJHP/Q+yaOVIe5fGufMjktvS7ckSAU48i7 +a9QEpD6FqJUtXBkcKnYiT2yxBTRyoxUiMF7VP+mE6agJSkyFHi5vx4UNLRX51aS G4p7Pe4Yf/gONyOmtHGGyrTAdWCYS8EuACFnT+sWsv2slaB3AhJGgTtq8yfdigPI wB0bvbbEak+ZORBDJqM9ckO+k/gJrAzk7iguCQ5rjjKdkIrRp+rEhvV5mLRFkpUY zAzoVvow+Uze+1iBnaQL2o00NwIDAQABo4ICizCCAocwHQYDVR0OBBYEFJu4QUrU C2eLXOW7oEICy3SVVTOqMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBRTEvNjM4NDNFRDA5NDQwMTFFN0JDOTlDMTFBQzRGOUFFMDIvMTE4RjQyMkM4 MTZGMTFFRjlBQ0I2NTRBQzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTA3 BAIAAjAxAwcBJAAgAAAGMBIDBwAkACAAAAsDBwAkACAAAAwwEgMHACQAIAAADwMH ACQAIAAAEDANBgkqhkiG9w0BAQsFAAOCAQEAFO0aZoWZLbKPjFtityCuaXPBEP9q CQEaggLktoisqPr0gLBhvkw0UcjpFn8F/+M8i+OXuQj7zstlkvHmUPivtndrIZh3 NXbIg0xftkDxwrRj+ACqvNxXTbt+0TWp3IfqXgCPWWOTJ9B9EU1CpIGTgEuW8xEn wGVcS4ZH7ulJQsfzH54IQNgY9BLBdeMwmNk2ph5EemTwd2XPiuDPLdMWSszp+iCJ PVp+ger45m014xNJ5fqzpyWAGGYYGlffYvciZ8im9RsRPUiSzb1crEUsMsUB/srb OTXD2Rp6bDgduMRHxLUe2T1HN5RJF92wxiMZJ8nF9BFpIrkX0KhEXxuFsg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:34 2026 by rpki-client