$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa File: A8949F64D86E11E982BA0712C4F9AE02.roa (raw, json) Hash identifier: 4ErdLc5I6Vjk6uLExe07aYdEJVnOiI+wzbQvVUiYi2A= Subject key identifier: 25:49:F9:FB:59:8C:4D:C4:42:01:7F:B5:38:BC:DD:6F:FE:00:8D:B2 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 146C Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:14:09 +0000 ROA not before: Sat 20 Dec 2025 17:14:35 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139653 IP address blocks: 2403:cfc0:1014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5228 (0x146c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a58d20-6a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:eb:50:ab:dd:eb:45:e7:29:0b:2a:c3:fe: 53:4a:a3:b6:f7:75:ae:64:6f:c0:c6:9e:a1:c0:71: 88:42:b9:07:a5:9a:53:42:f7:d1:af:b7:6f:e9:3a: 14:c1:ef:3f:ac:43:96:13:aa:ee:2c:54:f7:21:42: 34:f6:ef:c4:87:cd:4f:f0:51:1a:2d:dd:78:3f:ff: 66:30:26:bd:30:86:44:51:8d:76:87:4c:3f:c7:65: 4e:b9:da:fd:fc:6f:15:89:34:7d:24:65:66:41:b5: 6b:15:62:f6:d5:62:d8:2f:38:3b:de:e3:c8:06:50: 65:46:b7:2c:71:63:c6:b0:31:b0:d3:39:89:58:06: 1f:74:c4:b3:d7:5b:4c:1b:53:9a:83:53:dd:52:97: e0:d1:b3:26:da:7f:67:5e:21:5e:21:98:5a:a1:ee: 24:a1:b2:00:c3:a3:d9:46:7a:a4:83:11:55:9b:f2: 85:02:38:50:26:1b:fd:83:62:ae:56:88:fb:7b:8c: c1:10:7c:1f:69:66:ab:9d:84:38:cd:c6:d8:f1:eb: 5f:df:5d:1a:e2:f7:03:e5:1e:3a:75:11:0e:30:ff: 19:77:50:5e:c4:3b:26:0f:41:d7:67:d4:7a:e1:48: be:12:64:1d:c5:08:55:47:c5:f2:d5:ad:8c:7b:f6: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:49:F9:FB:59:8C:4D:C4:42:01:7F:B5:38:BC:DD:6F:FE:00:8D:B2 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1014::/48 Signature Algorithm: sha256WithRSAEncryption 81:c1:8b:1d:81:f8:e4:a2:01:8a:14:3e:97:92:91:9c:dd:64: 46:99:54:3d:a6:3f:e4:53:3f:11:7c:26:26:97:c4:39:4e:c8: 18:9d:d3:b0:6b:4c:78:14:81:32:57:0b:a0:74:e1:68:e0:3d: e9:02:04:23:7d:e9:6d:fd:a3:4a:2d:97:31:c5:45:56:a5:f7: 1b:47:bd:45:9a:26:7c:1e:3a:1a:0f:d6:69:1e:94:f1:a1:40: a3:fd:3f:29:cc:c8:eb:ea:0e:94:2d:d2:f6:d0:43:fb:1a:a7: a9:2e:60:c7:03:13:39:13:ce:29:80:a8:bc:91:02:9a:93:4d: 21:fe:a1:3a:a7:8a:7c:e7:69:09:92:71:7b:eb:34:40:d4:4d: e2:db:b4:80:ae:35:e0:27:39:d2:1a:cd:0b:dc:86:5e:a7:89: 85:fd:a3:26:25:fe:af:2d:41:2b:d2:28:a5:94:66:91:98:97: 81:6b:52:4a:a8:0b:c5:ad:9c:85:5c:ed:06:ac:d5:53:87:d8: 6c:e6:26:02:c7:1b:9a:ca:20:5a:92:44:32:1e:16:dd:c3:59: b9:8f:12:1d:9a:96:3f:07:01:be:10:24:0f:f7:22:3c:d5:a8: 25:6d:67:aa:d2:84:d2:8b:e0:fa:42:1c:5a:b6:72:67:e4:82: df:01:31:f1 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICFGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDM1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGQyMC02YTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPLrUKvd60XnKQsqw/5TSqO293WuZG/Axp6hwHGIQrkHpZpTQvfRr7dv6ToU we8/rEOWE6ruLFT3IUI09u/Eh81P8FEaLd14P/9mMCa9MIZEUY12h0w/x2VOudr9 /G8ViTR9JGVmQbVrFWL21WLYLzg73uPIBlBlRrcscWPGsDGw0zmJWAYfdMSz11tM G1Oag1PdUpfg0bMm2n9nXiFeIZhaoe4kobIAw6PZRnqkgxFVm/KFAjhQJhv9g2Ku Voj7e4zBEHwfaWarnYQ4zcbY8etf310a4vcD5R46dREOMP8Zd1BexDsmD0HXZ9R6 4Ui+EmQdxQhVR8Xy1a2Me/Z1lQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFCVJ+ftZ jE3EQgF/tTi83W/+AI2yMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvQTg5NDlGNjRE ODZFMTFFOTgyQkEwNzEyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAPPwBAUMA0GCSqGSIb3DQEBCwUAA4IBAQCBwYsdgfjkogGKFD6X kpGc3WRGmVQ9pj/kUz8RfCYml8Q5TsgYndOwa0x4FIEyVwugdOFo4D3pAgQjfelt /aNKLZcxxUVWpfcbR71FmiZ8HjoaD9ZpHpTxoUCj/T8pzMjr6g6ULdL20EP7Gqep LmDHAxM5E84pgKi8kQKak00h/qE6p4p852kJknF76zRA1E3i27SArjXgJznSGs0L 3IZep4mF/aMmJf6vLUEr0iillGaRmJeBa1JKqAvFrZyFXO0GrNVTh9hs5iYCxxua yiBakkQyHhbdw1m5jxIdmpY/BwG+ECQP9yI81aglbWeq0oTSi+D6QhxatnJn5ILf ATHx -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:08 2026 by rpki-client