$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa File: B1532E06F5FC11F08D6378D9536F56BC.roa (raw, json) Hash identifier: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888= Subject key identifier: CF:50:8F:91:F7:3B:C4:AB:8E:3C:F1:F8:6D:AC:AD:F6:DE:3B:D8:85 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: E9 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa Signing time: Sun 01 Mar 2026 16:18:56 +0000 ROA not before: Sat 07 Feb 2026 06:24:45 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 58062 IP address blocks: 2001:df4:e140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Feb 7 06:24:45 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a466f0-a1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:bb:19:2e:f7:e6:06:77:0f:50:34:24:ad: 22:22:14:5f:3e:db:50:83:c6:cf:3c:34:93:ea:9d: 81:60:00:bd:02:77:b5:be:e2:c7:26:2d:4e:7e:2d: 58:b6:2e:1b:6d:f8:2c:5c:5c:f0:13:3a:00:3e:c3: 9e:7d:9e:ee:71:95:3e:82:97:8a:08:dd:58:e0:e1: 6e:73:18:d9:b8:4f:07:a4:18:24:0f:cf:56:fa:0f: 07:42:97:64:c8:8e:f8:b5:2c:64:3b:df:ce:8f:ca: 36:4e:55:ac:03:f6:5b:ad:05:ef:62:9a:e5:25:fb: 3c:ce:13:f0:96:19:53:6a:f5:d4:cd:6a:53:1d:f0: bd:a4:a4:28:12:4e:d8:89:cb:f9:87:7b:04:a9:65: 18:03:c0:5e:5b:f0:83:d4:62:4f:44:62:16:c3:41: 2a:e9:02:af:ba:ea:5a:a5:80:c7:f4:01:4f:88:b1: ae:54:ca:ad:8b:6f:2d:0b:b6:b3:e6:aa:c4:a5:db: 9d:3a:b9:5d:f1:81:dc:29:41:de:09:8b:4f:a7:94: 46:43:88:89:97:53:c9:ba:19:a3:14:43:e8:84:d8: 3c:cf:2a:cf:ca:e9:9f:df:32:6e:e7:01:be:de:9b: 5f:4e:fb:00:a2:74:80:4e:9d:d7:9d:85:60:07:5d: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:50:8F:91:F7:3B:C4:AB:8E:3C:F1:F8:6D:AC:AD:F6:DE:3B:D8:85 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/B1532E06F5FC11F08D6378D9536F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:e140::/48 Signature Algorithm: sha256WithRSAEncryption 04:3c:91:bb:b7:0c:09:f2:f1:02:4b:3a:81:88:b8:81:f5:17: e7:98:fa:00:e4:ae:ea:f1:16:18:9d:65:6f:f8:05:9b:a9:fa: 1b:b9:73:2b:6b:86:d0:3a:c6:9b:3d:db:22:8e:28:b1:f6:37: fb:c4:bf:6c:41:b4:11:49:84:26:6c:90:87:98:b2:09:e9:8b: 17:ed:b1:9a:8f:b3:aa:69:3d:48:95:4b:d6:84:40:ae:61:16: 85:84:7f:e0:85:7f:50:74:27:de:1b:b6:f7:ce:a1:31:d4:19: 14:e1:0e:27:fe:b7:b0:93:58:cc:d7:bc:92:2f:5d:39:9f:8d: 2d:19:a0:9f:21:8b:a6:3e:51:db:d5:7f:27:97:02:53:81:62: 94:08:c3:e8:d7:fb:e3:e7:47:bc:cc:7e:60:de:5a:e0:c5:00: 60:a3:09:d3:de:4e:56:84:0c:1e:05:29:e2:30:a5:ab:0a:ec: ca:08:9f:73:71:5e:5b:9d:90:1a:1f:cb:d4:06:23:6c:7f:3e: 8d:84:77:87:76:88:f3:e4:7b:b5:a0:57:e8:90:d3:c0:0f:1d: 14:39:93:3c:ef:52:4d:d4:7e:21:c0:26:13:8a:d1:7a:0f:7f: c2:b4:bc:9d:67:6f:39:69:b6:db:0f:8c:9b:f7:07:8f:76:db: 50:dd:83:7d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwMjA3MDYyNDQ1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjZmMC1hMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjlW7GS735gZ3D1A0JK0iIhRfPttQg8bPPDST6p2BYAC9Ane1vuLHJi1Ofi1Y ti4bbfgsXFzwEzoAPsOefZ7ucZU+gpeKCN1Y4OFucxjZuE8HpBgkD89W+g8HQpdk yI74tSxkO9/Oj8o2TlWsA/ZbrQXvYprlJfs8zhPwlhlTavXUzWpTHfC9pKQoEk7Y icv5h3sEqWUYA8BeW/CD1GJPRGIWw0Eq6QKvuupapYDH9AFPiLGuVMqti28tC7az 5qrEpdudOrld8YHcKUHeCYtPp5RGQ4iJl1PJuhmjFEPohNg8zyrPyumf3zJu5wG+ 3ptfTvsAonSATp3XnYVgB10uhQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFM9Qj5H3 O8Srjjzx+G2srfbeO9iFMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdCQUMvQzZBRDNFMEFEMDJDMTFFRkI1NTg0OTE1QzRGOUFFMDIvQjE1MzJFMDZG NUZDMTFGMDhENjM3OEQ5NTM2RjU2QkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9OFAMA0GCSqGSIb3DQEBCwUAA4IBAQAEPJG7twwJ8vECSzqB iLiB9RfnmPoA5K7q8RYYnWVv+AWbqfobuXMra4bQOsabPdsijiix9jf7xL9sQbQR SYQmbJCHmLIJ6YsX7bGaj7OqaT1IlUvWhECuYRaFhH/ghX9QdCfeG7b3zqEx1BkU 4Q4n/rewk1jM17ySL105n40tGaCfIYumPlHb1X8nlwJTgWKUCMPo1/vj50e8zH5g 3lrgxQBgownT3k5WhAweBSniMKWrCuzKCJ9zcV5bnZAaH8vUBiNsfz6NhHeHdojz 5Hu1oFfokNPADx0UOZM871JN1H4hwCYTitF6D3/CtLydZ285abbbD4yb9wePdttQ 3YN9 -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:09 2026 by rpki-client