$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/BDBEED967C0011EFB63C7076C4F9AE02.roa File: BDBEED967C0011EFB63C7076C4F9AE02.roa (raw, json) Hash identifier: BOLBqg6HB+WZgDmASuick5DSh+pZdhSvC9fPbTzN5P4= Subject key identifier: E1:8E:40:4E:54:1A:11:2F:8F:02:75:61:E6:32:32:E9:11:37:CF:FE Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Certificate serial: 0115 Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/BDBEED967C0011EFB63C7076C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:25:28 +0000 ROA not before: Thu 11 Sep 2025 06:46:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 153334 IP address blocks: 2001:df4:4b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Validity Not Before: Sep 11 06:46:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a59dd8-8d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:cf:58:e9:72:f5:17:80:42:79:3b:0a:75: 3c:e1:c7:0e:0b:b3:58:f9:cc:ed:43:be:ea:2c:ea: 08:fd:66:31:2a:ca:79:ca:d0:40:ac:7b:18:bd:26: 93:4e:5c:1f:ed:d8:bf:c7:4e:97:c6:3d:3f:35:fb: 93:5f:f3:a8:2c:d0:5d:51:bd:69:64:5a:95:ea:09: 64:38:2f:f1:51:23:8e:b0:38:9e:92:2e:1d:86:df: 74:c5:f5:cc:25:b6:30:9d:c0:d3:5c:36:63:bc:7c: ef:a3:84:7a:58:68:46:48:ff:ec:5a:7a:80:dd:fc: 64:53:1c:1a:30:b2:17:06:f4:ae:24:86:38:54:93: 7e:a4:e9:c4:47:3c:10:e2:e8:bc:4f:c6:5e:b8:13: 08:29:de:b0:a3:0f:81:61:31:39:ab:c9:35:fb:63: a6:30:4e:01:c2:23:43:a7:8b:eb:b9:cc:bf:8a:da: fb:ab:cd:98:a6:03:d4:37:91:ba:c8:cc:d0:8c:48: fe:d4:a5:d3:e3:9d:6f:b3:59:99:d4:aa:da:f4:98: 78:1c:08:68:53:0e:99:19:85:7c:cd:bc:82:3a:1d: cc:99:1d:c3:e8:8b:8a:26:7e:5b:10:cc:77:14:65: d6:4d:de:3c:6d:e7:59:f3:52:21:f9:fc:5d:bc:91: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8E:40:4E:54:1A:11:2F:8F:02:75:61:E6:32:32:E9:11:37:CF:FE X509v3 Authority Key Identifier: keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/BDBEED967C0011EFB63C7076C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:4b40::/48 Signature Algorithm: sha256WithRSAEncryption d8:da:f0:24:79:94:9e:6e:33:59:e1:6a:f7:c0:fc:f3:64:0d: 38:5e:9e:12:bf:2b:fb:bd:21:d9:6d:f9:50:54:5b:24:df:7f: 9b:2b:82:de:8d:5a:b1:09:56:92:4f:e8:a9:8c:3c:83:5a:89: 4e:90:e0:fa:fa:e1:1c:b0:a7:7c:d7:0f:3e:2f:f5:16:70:5b: e4:16:93:a4:60:e8:0e:91:22:89:f2:60:ec:bc:4c:06:6f:cf: 7a:2e:e5:fc:b9:c0:3e:39:5d:36:aa:b6:21:ca:f2:58:16:97: c3:f3:fc:e6:b7:9b:d9:c3:67:00:c9:48:f6:16:9a:f6:48:38: 5a:2b:fc:96:49:80:6b:97:f3:04:9b:3b:70:f2:77:6f:f2:2f: 44:70:89:19:82:df:88:fb:51:9e:b9:8b:8b:18:e3:5d:fd:77: 1a:e3:d3:8b:8c:20:94:86:0e:a7:e5:2a:8b:fb:37:3b:db:f0: c0:a7:8a:65:5b:7d:2a:fb:07:c5:be:5f:02:04:39:0d:2f:66: 0a:21:60:da:a3:89:b0:23:bd:08:ce:a7:88:95:aa:96:06:c9: 6c:75:6a:5c:ba:b1:a7:ea:5b:7a:24:3d:8c:e8:c9:e7:19:49: 0d:fe:e6:5e:cf:d9:92:a4:dd:07:24:4e:2d:71:75:5b:63:c4: 51:ec:43:25 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKDJEMTgwNkJCNzlGN0VDNkE2OTdDQjBBNjVBMjFFNUNC MTIyRkRFNzYwHhcNMjUwOTExMDY0NjAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWRkOC04ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lLPWOly9ReAQnk7CnU84ccOC7NY+cztQ77qLOoI/WYxKsp5ytBArHsYvSaT Tlwf7di/x06Xxj0/NfuTX/OoLNBdUb1pZFqV6glkOC/xUSOOsDieki4dht90xfXM JbYwncDTXDZjvHzvo4R6WGhGSP/sWnqA3fxkUxwaMLIXBvSuJIY4VJN+pOnERzwQ 4ui8T8ZeuBMIKd6wow+BYTE5q8k1+2OmME4BwiNDp4vrucy/itr7q82YpgPUN5G6 yMzQjEj+1KXT451vs1mZ1Kra9Jh4HAhoUw6ZGYV8zbyCOh3MmR3D6IuKJn5bEMx3 FGXWTd48bedZ81Ih+fxdvJH4lwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOGOQE5U GhEvjwJ1YeYyMukRN8/+MB8GA1UdIwQYMBaAFC0YBrt59+xqaXywploh5csSL952 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ERjY5NEJBNjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdHcHBmTENtV2lIbHl4SXYz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSZ0d1M24zN0dwcGZMQ21XaUhseXhJdjNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVBNTgvREY2OTRCQTY3QkZEMTFFRkE3QjhFQjVDQzRGOUFFMDIvQkRCRUVEOTY3 QzAwMTFFRkI2M0M3MDc2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9EtAMA0GCSqGSIb3DQEBCwUAA4IBAQDY2vAkeZSebjNZ4Wr3 wPzzZA04Xp4Svyv7vSHZbflQVFsk33+bK4LejVqxCVaST+ipjDyDWolOkOD6+uEc sKd81w8+L/UWcFvkFpOkYOgOkSKJ8mDsvEwGb896LuX8ucA+OV02qrYhyvJYFpfD 8/zmt5vZw2cAyUj2Fpr2SDhaK/yWSYBrl/MEmztw8ndv8i9EcIkZgt+I+1GeuYuL GONd/Xca49OLjCCUhg6n5SqL+zc72/DAp4plW30q+wfFvl8CBDkNL2YKIWDao4mw I70IzqeIlaqWBslsdWpcurGn6lt6JD2M6MnnGUkN/uZez9mSpN0HJE4tcXVbY8RR 7EMl -----END CERTIFICATE-----Generated at Thu Mar 26 15:41:32 2026 by rpki-client