$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/A1B61AAC1C3B11F1A9F167973A3D8C67.roa File: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (raw, json) Hash identifier: p3H/WotmZtJh2VCUVKyKjndLevGeDwif8IcNwZKNTmw= Subject key identifier: BD:87:73:19:C1:46:29:D0:5B:1B:C9:96:C8:C4:CB:2C:4F:E7:8D:D9 Certificate issuer: /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1 Certificate serial: 03 Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/A1B61AAC1C3B11F1A9F167973A3D8C67.roa Signing time: Tue 10 Mar 2026 04:43:07 +0000 ROA not before: Tue 10 Mar 2026 04:43:07 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152884 IP address blocks: 2001:df3:d5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1 Validity Not Before: Mar 10 04:43:07 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69afa15b-66aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:53:1c:3b:d8:94:92:e1:ed:2f:0c:78:28: e6:4c:ba:16:8d:cc:5b:dd:e5:0b:f8:da:4f:1a:fe: 40:8f:04:60:ba:23:06:e1:e1:94:a1:63:43:85:e5: 5f:8c:43:f2:0e:94:4f:85:73:66:21:12:1d:8f:52: 50:cb:9e:28:47:f2:ca:c7:14:1e:23:9e:d4:f5:17: 46:af:d3:25:a7:67:b3:68:43:8d:59:e8:a8:b9:bf: 5c:8f:df:f2:33:39:98:de:cc:44:8e:2a:d7:ba:d3: e8:6d:1e:fd:8e:52:6f:2b:bf:c3:4b:8a:45:19:c6: 27:0b:d7:01:4c:fa:a6:b1:30:b3:d2:20:bb:86:1b: 86:1f:ca:32:6f:bd:65:fd:dd:91:de:52:e3:e7:9a: e2:5e:b7:26:da:97:6f:7e:ff:43:4c:79:a7:c2:16: de:91:be:39:bc:ef:b9:f7:ed:92:72:79:00:f0:8e: b8:a9:18:b5:54:53:be:05:17:a4:2f:d6:4c:5d:eb: a4:9e:5b:72:af:42:1f:40:8d:1a:c5:6a:cc:56:8d: bc:89:1f:fa:a4:fc:cd:12:e8:fb:fc:b5:ed:f6:32: 1d:ca:aa:fc:9e:49:16:44:02:4a:ad:d9:20:47:72: 1d:a9:1d:53:c1:50:30:44:fa:ca:01:5d:96:27:2d: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:87:73:19:C1:46:29:D0:5B:1B:C9:96:C8:C4:CB:2C:4F:E7:8D:D9 X509v3 Authority Key Identifier: keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/A1B61AAC1C3B11F1A9F167973A3D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:d5c0::/48 Signature Algorithm: sha256WithRSAEncryption 7c:99:48:a1:8e:ad:b3:71:22:8c:4f:9d:04:a1:c4:e8:bb:21: 00:03:53:d2:2c:ee:14:0a:32:9c:e5:d0:f6:06:fc:d9:b7:c9: 52:7f:62:56:bc:f3:66:b7:49:5d:0c:04:5d:2d:3a:a0:3e:dd: 63:db:1d:dc:ef:30:71:e3:05:1f:da:a6:98:83:f5:4c:c5:39: 1d:b3:77:f3:89:3a:e2:18:18:db:a1:08:1e:76:30:f9:ef:fb: a4:96:37:cf:8c:a4:0b:2d:95:23:fc:dd:ee:f9:59:96:ba:af: 27:62:8b:1e:82:d2:3e:cc:2c:c8:55:ac:bf:f3:9d:0b:44:59: 17:7f:51:70:5d:7d:01:aa:05:46:66:aa:44:00:aa:7c:ac:ec: ec:45:e7:a4:e1:70:26:fe:a5:9f:01:2c:5d:03:d1:ae:8f:f9: 4f:4c:0d:cc:f2:61:5c:70:86:cb:40:fa:ce:92:c9:a9:49:65: 26:82:16:89:32:cf:a5:6a:fc:3a:92:97:28:25:ff:04:8e:03: 89:a1:e0:c1:e0:29:7d:91:4a:ac:b9:57:1a:17:79:63:0d:79: c2:9c:80:4d:c8:f7:69:9e:c5:4d:cf:96:34:55:c1:b2:a7:51: 67:6d:9f:67:6d:a3:fd:b3:ff:12:97:5d:32:af:5b:98:cb:2f: e4:ae:e8:51 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoMTJGMDg5NkUxQTNDQkYyNTAxOTEwMDA5RDk4NzkwNkJB NTNDNkNDMTAeFw0yNjAzMTAwNDQzMDdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YWZhMTViLTY2YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVLVMcO9iUkuHtLwx4KOZMuhaNzFvd5Qv42k8a/kCPBGC6Iwbh4ZShY0OF5V+M Q/IOlE+Fc2YhEh2PUlDLnihH8srHFB4jntT1F0av0yWnZ7NoQ41Z6Ki5v1yP3/Iz OZjezESOKte60+htHv2OUm8rv8NLikUZxicL1wFM+qaxMLPSILuGG4YfyjJvvWX9 3ZHeUuPnmuJetybal29+/0NMeafCFt6Rvjm877n37ZJyeQDwjripGLVUU74FF6Qv 1kxd66SeW3KvQh9AjRrFasxWjbyJH/qk/M0S6Pv8te32Mh3KqvyeSRZEAkqt2SBH ch2pHVPBUDBE+soBXZYnLTm7AgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUvYdzGcFG KdBbG8mWyMTLLE/njdkwHwYDVR0jBBgwFoAUEvCJbho8vyUBkQAJ2YeQa6U8bMEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwLzAxRkEwMDcyMUMz NzExRjE4ODQ3QUIyQjM4M0Q4QzY3L0V2Q0piaG84dnlVQmtRQUoyWWVRYTZVOGJN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXZDSmJobzh2eVVCa1FBSjJZZVFhNlU4Yk1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5MC8wMUZBMDA3MjFDMzcxMUYxODg0N0FCMkIzODNEOEM2Ny9BMUI2MUFBQzFD M0IxMUYxQTlGMTY3OTczQTNEOEM2Ny5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ3z1cAwDQYJKoZIhvcNAQELBQADggEBAHyZSKGOrbNxIoxPnQSh xOi7IQADU9Is7hQKMpzl0PYG/Nm3yVJ/Yla882a3SV0MBF0tOqA+3WPbHdzvMHHj BR/appiD9UzFOR2zd/OJOuIYGNuhCB52MPnv+6SWN8+MpAstlSP83e75WZa6rydi ix6C0j7MLMhVrL/znQtEWRd/UXBdfQGqBUZmqkQAqnys7OxF56ThcCb+pZ8BLF0D 0a6P+U9MDczyYVxwhstA+s6SyalJZSaCFokyz6Vq/DqSlygl/wSOA4mh4MHgKX2R Sqy5VxoXeWMNecKcgE3I92mexU3PljRVwbKnUWdtn2dto/2z/xKXXTKvW5jLL+Su 6FE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:35 2026 by rpki-client