$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/EB2858349B4B11EF86A11C85C4F9AE02.roa File: EB2858349B4B11EF86A11C85C4F9AE02.roa (raw, json) Hash identifier: V6hcLW3DIWJr5GsqXhQQoqs6tXkMxQGHQdAMhmhtdMQ= Subject key identifier: E3:FC:B3:35:A9:CF:D0:BF:C2:9C:36:CF:D2:D9:E4:2B:22:A8:A9:38 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 0104 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/EB2858349B4B11EF86A11C85C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:50:54 +0000 ROA not before: Tue 09 Dec 2025 04:13:07 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153383 IP address blocks: 2001:df4:87c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Dec 9 04:13:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a595be-7d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:7c:8e:b6:7b:43:9d:92:55:ff:0e:3c:53: 81:41:4e:64:e4:94:e4:84:7c:10:16:bd:06:dc:ab: 65:7a:ae:62:47:96:13:b1:47:f8:f8:6f:d5:19:00: 76:23:8c:8a:63:71:79:84:63:1a:ce:e7:88:29:fe: 07:40:4b:06:65:70:bb:03:88:2e:09:b6:65:d2:da: 2f:68:5b:ff:f5:ac:c6:d2:a3:bc:3e:23:b3:cc:ac: c3:49:31:6d:33:33:2a:b8:ef:bf:8c:b3:43:ce:e0: dc:9b:bb:ea:fa:57:3e:16:e1:a4:5e:14:25:cc:a4: 10:42:c2:c6:42:c7:f0:ba:a3:97:a5:ce:b0:ea:47: 9c:48:78:7d:15:8b:7f:3b:24:d7:10:6a:bb:05:0a: 5c:bf:b7:4c:3e:eb:6a:01:c0:e9:c8:df:73:ee:ab: e3:b6:e9:7f:d8:08:88:87:e8:42:dc:ab:b2:68:50: 06:10:63:12:23:1e:b0:8c:2f:92:9c:a2:c0:6e:7a: b2:14:09:f6:49:ac:5b:c5:1c:a7:8d:b1:03:ce:64: 4b:26:67:ef:37:b3:a7:b5:84:85:35:9a:db:75:f9: 01:17:b0:97:95:61:35:dd:0d:9e:64:31:e1:c0:a1: 16:84:f8:b7:ba:8c:e3:b3:7f:0b:bf:7c:8b:b2:0c: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FC:B3:35:A9:CF:D0:BF:C2:9C:36:CF:D2:D9:E4:2B:22:A8:A9:38 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/EB2858349B4B11EF86A11C85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:87c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:ce:68:59:de:ca:b4:6a:82:de:6f:f7:5e:36:22:8d:75:20: b8:78:68:57:75:3c:0d:7e:7b:d1:34:55:c6:0c:40:45:78:52: 65:21:85:d5:d1:dd:39:1f:77:21:9c:bb:2f:eb:ba:77:87:95: 4c:12:3d:e3:03:55:fa:b1:c3:76:a7:4d:59:a8:fc:60:98:53: 3c:70:c5:68:04:c6:e4:c4:41:69:40:56:eb:63:e4:10:a0:76: 30:d9:dd:b4:4e:34:cb:08:9d:f8:01:aa:59:26:e0:ec:45:54: c2:32:5f:23:e2:dc:40:35:62:4b:43:25:66:b9:f3:52:01:07: da:b7:b7:06:01:7f:fe:1a:2e:49:ba:33:5e:a2:d2:86:48:55: 83:00:11:cd:e8:7a:3c:1b:e3:b4:8b:a9:75:5f:56:90:64:f1: a5:48:24:6f:ed:b6:a7:69:5a:51:99:f2:73:de:2c:c6:99:fb: 88:a2:10:19:fa:e0:0b:57:79:21:85:c0:90:cf:20:44:04:08: 1a:4b:4d:d4:9c:9a:84:2d:68:a8:d6:5d:ee:d7:bc:a1:d5:66: 51:22:9d:be:27:43:b0:de:e5:d9:2a:42:c8:bf:68:9d:a9:6a: ef:0b:06:0a:82:93:a5:8c:7d:9a:e2:19:98:4a:9e:46:84:8a: 2b:fc:2e:9b -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKEQ0Njk2NEY5RjM3MzFGMkY2M0U2NzAwOEM5MUU1OUM3 RENDNzg1NTcwHhcNMjUxMjA5MDQxMzA3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTViZS03ZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2t8jrZ7Q52SVf8OPFOBQU5k5JTkhHwQFr0G3Ktleq5iR5YTsUf4+G/VGQB2 I4yKY3F5hGMazueIKf4HQEsGZXC7A4guCbZl0tovaFv/9azG0qO8PiOzzKzDSTFt MzMquO+/jLNDzuDcm7vq+lc+FuGkXhQlzKQQQsLGQsfwuqOXpc6w6kecSHh9FYt/ OyTXEGq7BQpcv7dMPutqAcDpyN9z7qvjtul/2AiIh+hC3KuyaFAGEGMSIx6wjC+S nKLAbnqyFAn2SaxbxRynjbEDzmRLJmfvN7OntYSFNZrbdfkBF7CXlWE13Q2eZDHh wKEWhPi3uozjs38Lv3yLsgxQ/wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOP8szWp z9C/wpw2z9LZ5CsiqKk4MB8GA1UdIwQYMBaAFNRpZPnzcx8vY+ZwCMkeWcfcx4VX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FOTI2RTkxMjlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5OWo1bkFJeVI1Wng5ekho VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBGMTEvRTkyNkU5MTI5QTdDMTFFRjg0OTUwRDMzQzRGOUFFMDIvRUIyODU4MzQ5 QjRCMTFFRjg2QTExQzg1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9IfAMA0GCSqGSIb3DQEBCwUAA4IBAQAwzmhZ3sq0aoLeb/de NiKNdSC4eGhXdTwNfnvRNFXGDEBFeFJlIYXV0d05H3chnLsv67p3h5VMEj3jA1X6 scN2p01ZqPxgmFM8cMVoBMbkxEFpQFbrY+QQoHYw2d20TjTLCJ34AapZJuDsRVTC Ml8j4txANWJLQyVmufNSAQfat7cGAX/+Gi5JujNeotKGSFWDABHN6Ho8G+O0i6l1 X1aQZPGlSCRv7banaVpRmfJz3izGmfuIohAZ+uALV3khhcCQzyBEBAgaS03UnJqE LWio1l3u17yh1WZRIp2+J0Ow3uXZKkLIv2idqWrvCwYKgpOljH2a4hmYSp5GhIor /C6b -----END CERTIFICATE-----Generated at Thu Mar 26 12:04:09 2026 by rpki-client