$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/8BAFDC4C691E11EF9AC4F168C4F9AE02.roa File: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (raw, json) Hash identifier: ZwWjIk/1SutU58OYfJ9gLuNsZQWOKirEKNReONQeA54= Subject key identifier: EB:EE:A0:7C:36:E9:D4:70:FB:89:92:AF:09:B0:E2:5A:67:15:F4:7C Certificate issuer: /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Certificate serial: 0121 Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/8BAFDC4C691E11EF9AC4F168C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:56:43 +0000 ROA not before: Wed 01 Oct 2025 07:04:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140244 IP address blocks: 2001:df4:3540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Validity Not Before: Oct 1 07:04:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5890b-68de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:72:46:c1:ac:a4:dd:e3:bd:d6:ee:ab:98: e7:56:8e:d9:6e:a8:d4:63:28:50:00:82:b8:00:22: 67:70:8f:fa:15:27:02:58:e0:24:35:cd:60:fc:c4: dc:e5:58:95:17:fd:93:f0:a2:28:68:72:71:cf:95: 0a:f1:d0:62:f0:79:71:6b:84:6a:11:9e:8d:a2:79: 81:88:37:bd:97:54:06:d9:60:89:1d:bc:a8:bb:72: ac:82:22:7e:5f:71:27:55:9b:29:82:b0:37:6a:34: 8f:1d:2f:c7:96:d0:a4:69:d6:30:9a:61:84:f8:7a: 9c:b1:24:9f:8f:19:a8:01:fe:a0:55:5a:f6:9b:c4: de:14:00:3b:40:83:5d:59:69:74:81:f9:fc:a6:f6: ed:38:43:3c:a0:b8:a1:4e:2c:9d:ce:48:18:42:f9: 98:21:4c:05:73:ae:e4:0d:de:84:51:08:ca:84:7d: f0:c8:f7:4f:b4:1e:6e:eb:47:cc:bd:90:01:ac:86: fd:03:2a:26:70:30:9c:5a:91:cd:6f:ad:0e:8e:3e: 6a:38:ec:34:33:43:42:7a:39:ee:37:d7:a5:88:fe: f3:44:07:1d:5b:a2:7b:29:4a:6a:a9:0e:17:88:88: 05:51:53:40:84:58:5a:89:e9:9b:95:24:53:ea:f0: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EE:A0:7C:36:E9:D4:70:FB:89:92:AF:09:B0:E2:5A:67:15:F4:7C X509v3 Authority Key Identifier: keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/8BAFDC4C691E11EF9AC4F168C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:3540::/48 Signature Algorithm: sha256WithRSAEncryption 63:97:ee:83:7d:f3:cb:6b:cf:88:d3:39:8c:1b:d1:6f:78:a9: 89:dd:d8:bb:cd:de:46:e0:20:6a:65:da:06:fe:3f:99:c0:8a: 1f:6a:94:3a:29:ee:e7:2c:6b:8f:77:d8:95:47:a4:0f:59:ab: be:5f:59:4e:bf:04:8f:5e:3c:be:35:98:7c:e8:0a:b6:ca:aa: a2:7f:93:fd:75:63:c2:98:21:0b:b7:45:7b:4b:97:05:92:ec: 2c:f0:16:a5:d3:1f:9f:92:cc:ad:72:f1:aa:aa:18:eb:5a:f2: a3:1d:22:ce:fc:07:46:94:bd:bf:31:07:3f:5a:93:b3:43:07: d4:93:a1:83:29:88:35:34:56:a2:55:eb:d1:40:54:f6:33:12: 8c:d6:0e:6a:72:e2:64:fb:ff:dd:53:ff:5c:b3:92:b8:d5:a8: 0d:80:c2:7a:02:3a:2f:be:1b:7b:f8:18:6b:eb:f3:69:c3:12: 94:72:1d:b1:58:30:8c:3c:54:da:9d:3a:21:57:e9:81:88:7e: 13:56:9a:b4:02:5a:e0:01:ea:e2:d9:54:03:6f:7e:0b:ff:6e: eb:b6:ee:fd:12:e5:51:da:95:74:5a:b0:57:fb:00:b9:01:0a: 49:f5:a1:dc:82:eb:41:6c:92:dc:0e:61:b4:ec:c4:48:a4:e1: 2e:13:cd:3a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2OTUxMTAvBgNVBAUTKDcxNUQzRERGRDdEMkE3OTkxMzdCMTM5M0Q0QThDRkEy QjFENEQzNjQwHhcNMjUxMDAxMDcwNDQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODkwYi02OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKByRsGspN3jvdbuq5jnVo7ZbqjUYyhQAIK4ACJncI/6FScCWOAkNc1g/MTc 5ViVF/2T8KIoaHJxz5UK8dBi8Hlxa4RqEZ6NonmBiDe9l1QG2WCJHbyou3KsgiJ+ X3EnVZspgrA3ajSPHS/HltCkadYwmmGE+HqcsSSfjxmoAf6gVVr2m8TeFAA7QINd WWl0gfn8pvbtOEM8oLihTiydzkgYQvmYIUwFc67kDd6EUQjKhH3wyPdPtB5u60fM vZABrIb9AyomcDCcWpHNb60Ojj5qOOw0M0NCejnuN9eliP7zRAcdW6J7KUpqqQ4X iIgFUVNAhFhaiemblSRT6vDhNQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOvuoHw2 6dRw+4mSrwmw4lpnFfR8MB8GA1UdIwQYMBaAFHFdPd/X0qeZE3sTk9Soz6Kx1NNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS85NkJERjM0QTY5 MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1a1RleE9UMUtqUG9ySFUw MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWMDkzOWZTcDVrVGV4T1QxS2pQb3JIVTAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEE2OTUvOTZCREYzNEE2OTFEMTFFRkI4RkQxRTY0QzRGOUFFMDIvOEJBRkRDNEM2 OTFFMTFFRjlBQzRGMTY4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9DVAMA0GCSqGSIb3DQEBCwUAA4IBAQBjl+6DffPLa8+I0zmM G9FveKmJ3di7zd5G4CBqZdoG/j+ZwIofapQ6Ke7nLGuPd9iVR6QPWau+X1lOvwSP Xjy+NZh86Aq2yqqif5P9dWPCmCELt0V7S5cFkuws8Bal0x+fksytcvGqqhjrWvKj HSLO/AdGlL2/MQc/WpOzQwfUk6GDKYg1NFaiVevRQFT2MxKM1g5qcuJk+//dU/9c s5K41agNgMJ6Ajovvht7+Bhr6/NpwxKUch2xWDCMPFTanTohV+mBiH4TVpq0Alrg Aeri2VQDb34L/27rtu79EuVR2pV0WrBX+wC5AQpJ9aHcgutBbJLcDmG07MRIpOEu E806 -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:48 2026 by rpki-client