$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/323030313a6466363a34303a3a2f34382d3438203d3e20313534313535.roa File: 323030313a6466363a34303a3a2f34382d3438203d3e20313534313535.roa (raw, json) Hash identifier: 1EDvMbgTw6EnvKXCa2bvaz7hq+g25XWMa6y21HtIr7k= Subject key identifier: 4A:3D:7D:E3:F3:46:C4:B2:13:DB:1C:83:81:E1:C1:6C:51:4E:03:65 Certificate issuer: /CN=A916FC1D0000/serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368 Certificate serial: 7EB016CBFAA5EDBAB85130E6B18EAE9925FC36C1 Authority key identifier: 76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/323030313a6466363a34303a3a2f34382d3438203d3e20313534313535.roa Signing time: Sun 08 Mar 2026 13:59:34 +0000 ROA not before: Sun 08 Mar 2026 13:54:34 +0000 ROA not after: Sun 07 Mar 2027 13:59:34 +0000 asID: 154155 IP address blocks: 2001:df6:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 17:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b0:16:cb:fa:a5:ed:ba:b8:51:30:e6:b1:8e:ae:99:25:fc:36:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FC1D0000, serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368 Validity Not Before: Mar 8 13:54:34 2026 GMT Not After : Mar 7 13:59:34 2027 GMT Subject: CN=4A3D7DE3F346C4B213DB1C8381E1C16C514E0365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:56:f0:e9:01:a0:5c:d5:71:2a:f9:ca:fa:57: 74:6e:92:b1:69:5c:7d:61:5c:58:7b:64:26:2b:20: 96:f2:a4:3f:0f:bc:a4:71:0c:98:92:98:c1:1f:3c: bf:8a:49:94:b3:f3:9a:4e:2f:bc:e1:c4:8a:89:0b: b9:76:33:88:a5:1d:d9:96:c8:16:fa:44:fe:06:d6: 36:f1:a8:28:44:91:5a:95:4c:3c:5a:1a:e3:a7:5e: be:bb:3e:c0:8d:13:4f:17:15:d6:9f:24:f7:a3:d0: 05:ee:76:2b:a2:86:56:fd:6f:48:4c:76:30:2e:35: bc:89:3e:13:12:fc:79:86:aa:45:d6:99:d7:02:82: 98:8f:17:8a:d2:27:47:e4:be:64:20:65:99:b6:d6: 62:eb:58:61:aa:4b:fd:57:da:a3:57:cf:5e:6f:0c: 8a:3a:4c:f7:d9:35:f2:9b:fa:fb:14:dc:25:72:c5: 68:5d:6e:16:cc:69:b7:cc:80:9d:83:76:26:43:a0: 37:78:eb:9b:b2:07:af:ce:7f:05:47:e9:3d:5a:17: 57:61:00:f1:c7:fc:a0:88:c1:e3:78:05:5b:64:46: 42:a7:a1:dc:d2:48:b8:a5:00:40:de:cc:7e:fe:7e: bb:49:21:6c:5f:ad:bf:61:d7:7d:a7:bf:c1:af:33: 58:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3D:7D:E3:F3:46:C4:B2:13:DB:1C:83:81:E1:C1:6C:51:4E:03:65 X509v3 Authority Key Identifier: keyid:76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/323030313a6466363a34303a3a2f34382d3438203d3e20313534313535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:40::/48 Signature Algorithm: sha256WithRSAEncryption 84:7a:4f:18:6b:aa:c1:a9:eb:78:90:a7:11:20:cf:7c:96:c3: b0:71:12:e7:cb:90:e4:b0:3b:27:e5:ad:b8:32:01:25:ef:da: 68:26:ed:85:54:b5:02:1d:0b:96:3c:91:28:ef:29:24:82:a0: d6:18:5d:40:ea:b4:70:a1:b2:ac:aa:d6:78:88:b5:8e:89:36: 4a:4e:7c:f4:7c:b8:7d:6f:b0:2b:a6:0f:46:f2:18:f9:90:fa: 93:1a:58:af:26:c3:57:8a:bc:fb:00:69:81:48:e1:fa:64:5d: a6:67:dc:d7:65:c4:b8:f3:bc:4c:9c:eb:04:d9:6f:be:9a:41: d9:be:c4:d5:2b:1a:a4:c7:b7:25:15:19:ee:2a:a6:d0:9e:96: f5:2c:69:08:6f:38:1a:b4:70:87:e9:8f:ce:e4:dc:a0:30:72: 49:37:d6:ce:97:c4:2a:d1:32:6c:81:e6:03:7f:c1:a4:04:24: c7:e5:0e:e1:56:85:32:e2:ff:10:dd:93:7c:27:f3:d7:8c:3a: 6d:a0:78:e9:10:a7:1d:35:8c:32:77:9d:03:e5:e2:bd:b2:6e: 85:e4:5f:05:ce:f3:15:f3:24:ed:83:1a:8f:9a:99:3c:ed:f0: 3b:1b:59:19:0b:d5:6b:18:f8:69:f1:ee:54:38:03:35:6e:09: 82:e5:12:f7 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUfrAWy/ql7bq4UTDmsY6umSX8NsEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNkZDMUQwMDAwMTEwLwYDVQQFEyg3Njk5MzE0MERE NUFCMjJFQTMzRUNFN0E5MjkyRkEzQ0I0MjBDMzY4MB4XDTI2MDMwODEzNTQzNFoX DTI3MDMwNzEzNTkzNFowMzExMC8GA1UEAxMoNEEzRDdERTNGMzQ2QzRCMjEzREIx QzgzODFFMUMxNkM1MTRFMDM2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIBW8OkBoFzVcSr5yvpXdG6SsWlcfWFcWHtkJisglvKkPw+8pHEMmJKYwR88 v4pJlLPzmk4vvOHEiokLuXYziKUd2ZbIFvpE/gbWNvGoKESRWpVMPFoa46devrs+ wI0TTxcV1p8k96PQBe52K6KGVv1vSEx2MC41vIk+ExL8eYaqRdaZ1wKCmI8XitIn R+S+ZCBlmbbWYutYYapL/Vfao1fPXm8MijpM99k18pv6+xTcJXLFaF1uFsxpt8yA nYN2JkOgN3jrm7IHr85/BUfpPVoXV2EA8cf8oIjB43gFW2RGQqeh3NJIuKUAQN7M fv5+u0khbF+tv2HXfae/wa8zWFUCAwEAAaOCAhowggIWMB0GA1UdDgQWBBRKPX3j 80bEshPbHIOB4cFsUU4DZTAfBgNVHSMEGDAWgBR2mTFA3VqyLqM+znqSkvo8tCDD aDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2RkMxRDAwMDAvMC83Njk5MzE0 MERENUFCMjJFQTMzRUNFN0E5MjkyRkEzQ0I0MjBDMzY4LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9kcGt4UU4xYXNp NmpQczU2a3BMNlBMUWd3MmcuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2 RkMxRDAwMDAvMC8zMjMwMzAzMTNhNjQ2NjM2M2EzNDMwM2EzYTJmMzQzODJkMzQz ODIwM2QzZTIwMzEzNTM0MzEzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9gBAMA0GCSqGSIb3 DQEBCwUAA4IBAQCEek8Ya6rBqet4kKcRIM98lsOwcRLny5DksDsn5a24MgEl79po Ju2FVLUCHQuWPJEo7ykkgqDWGF1A6rRwobKsqtZ4iLWOiTZKTnz0fLh9b7Arpg9G 8hj5kPqTGlivJsNXirz7AGmBSOH6ZF2mZ9zXZcS487xMnOsE2W++mkHZvsTVKxqk x7clFRnuKqbQnpb1LGkIbzgatHCH6Y/O5NygMHJJN9bOl8Qq0TJsgeYDf8GkBCTH 5Q7hVoUy4v8Q3ZN8J/PXjDptoHjpEKcdNYwyd50D5eK9sm6F5F8FzvMV8yTtgxqP mpk87fA7G1kZC9VrGPhp8e5UOAM1bgmC5RL3 -----END CERTIFICATE-----Generated at Wed Mar 25 21:27:14 2026 by rpki-client