$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa File: FFF8A36A34E311EE877E760DC4F9AE02.roa (raw, json) Hash identifier: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w= Subject key identifier: C9:20:14:BA:06:4E:88:29:9E:F6:0D:EE:00:4E:02:A6:73:C0:02:FC Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0440 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa Signing time: Sat 11 Apr 2026 00:32:10 +0000 ROA not before: Sat 11 Apr 2026 00:32:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60021 IP address blocks: 2400:6520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Apr 11 00:32:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d9968a-2cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:99:de:27:f6:d7:b4:d6:c9:b6:ec:8d:10: 38:46:c3:a8:bf:14:6a:a3:c0:8b:47:d1:1c:7c:e0: 0b:85:84:48:0d:74:f4:28:fe:f6:44:63:5b:61:57: d6:72:04:3c:ee:b6:ae:2d:1a:e7:65:64:b5:a4:4c: b6:09:50:e8:77:a4:05:1b:2e:aa:00:08:86:8c:e4: 94:ed:04:43:c1:4a:4e:f4:45:d3:5e:cb:79:99:20: 14:57:bb:69:25:59:6f:78:5d:93:df:36:f5:94:cb: 57:41:a6:df:69:eb:46:27:ff:3a:d9:2e:8d:5b:7c: c0:1e:15:89:b3:6c:f6:f8:2e:1a:0f:73:1a:bf:9d: 2e:f6:81:e2:0b:ae:23:d6:7d:8e:d0:39:77:b4:ba: 16:c1:be:55:91:0e:11:d0:5d:b9:a5:c9:ed:34:b2: 74:11:5f:e9:04:3b:b7:9c:07:56:9b:f7:01:41:6a: 22:08:05:5c:e0:69:d3:5e:04:df:d3:50:a6:01:8d: ba:a6:84:89:2b:fc:74:b9:ca:43:46:78:92:7e:66: 0e:00:bd:4f:7a:33:0e:f8:9e:e1:6c:6c:79:aa:69: 6b:98:8a:1f:83:5f:08:a9:88:72:1a:56:13:14:56: 2e:1a:2e:28:9c:96:64:a4:fb:16:90:55:ab:bd:7e: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:14:BA:06:4E:88:29:9E:F6:0D:EE:00:4E:02:A6:73:C0:02:FC X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:6520::/32 Signature Algorithm: sha256WithRSAEncryption 10:a0:01:7b:87:79:dc:dd:f4:95:2d:1a:04:2e:08:67:16:de: 2e:b6:f9:d0:80:18:4a:3e:81:27:38:51:16:5b:28:b4:1e:43: 7b:e4:13:92:d9:92:3f:51:a2:ba:c6:6f:7b:c4:08:d5:65:32: 80:67:3b:95:ab:45:ab:1b:49:dd:84:f2:f7:f0:7f:11:13:9d: a3:35:f2:17:31:2f:4a:ea:b8:4a:73:c2:4c:b5:a5:e7:a1:a4: 62:09:38:b6:bf:42:ca:ca:38:4a:94:28:60:17:00:da:66:53: c1:df:bc:ea:3c:61:bb:c1:c7:a0:50:f8:a0:1f:c7:14:7e:17: fe:93:0c:7e:ac:31:81:40:0b:ba:2d:e6:05:d3:6e:4b:f3:69: f5:33:a0:62:fc:40:a1:ab:55:c1:09:bf:99:82:6c:ee:34:c7: 7d:10:85:fc:a0:15:12:01:38:8b:7d:76:ed:4d:01:37:92:82: 16:72:07:a5:47:e6:36:2d:b8:3e:5e:b7:8c:f0:19:fe:a0:62: a4:33:a9:b5:c5:e1:dc:54:b0:6b:01:8c:63:59:fd:b8:2a:1e: e4:c0:6a:66:4a:67:a8:83:9b:51:a4:b9:06:b7:3b:57:ad:aa: 2b:63:ec:70:12:60:cf:f2:c8:58:19:a1:94:e6:cd:3f:38:83: 17:29:c1:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjYwNDExMDAzMjEwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5OTY4YS0yY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohqZ3if217TWybbsjRA4RsOovxRqo8CLR9EcfOALhYRIDXT0KP72RGNbYVfW cgQ87rauLRrnZWS1pEy2CVDod6QFGy6qAAiGjOSU7QRDwUpO9EXTXst5mSAUV7tp JVlveF2T3zb1lMtXQabfaetGJ/862S6NW3zAHhWJs2z2+C4aD3Mav50u9oHiC64j 1n2O0Dl3tLoWwb5VkQ4R0F25pcntNLJ0EV/pBDu3nAdWm/cBQWoiCAVc4GnTXgTf 01CmAY26poSJK/x0ucpDRniSfmYOAL1PejMO+J7hbGx5qmlrmIofg18IqYhyGlYT FFYuGi4onJZkpPsWkFWrvX6U+QIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFMkgFLoG TogpnvYN7gBOAqZzwAL8MB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU0QUUvNkM5RjJERkFBNTAxMTFFQzg5NjQyNzU3QzRGOUFFMDIvRkZGOEEzNkEz NEUzMTFFRTg3N0U3NjBEQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJABlIDANBgkqhkiG9w0BAQsFAAOCAQEAEKABe4d53N30lS0aBC4I ZxbeLrb50IAYSj6BJzhRFlsotB5De+QTktmSP1GiusZve8QI1WUygGc7latFqxtJ 3YTy9/B/EROdozXyFzEvSuq4SnPCTLWl56GkYgk4tr9Cyso4SpQoYBcA2mZTwd+8 6jxhu8HHoFD4oB/HFH4X/pMMfqwxgUALui3mBdNuS/Np9TOgYvxAoatVwQm/mYJs 7jTHfRCF/KAVEgE4i3127U0BN5KCFnIHpUfmNi24Pl63jPAZ/qBipDOptcXh3FSw awGMY1n9uCoe5MBqZkpnqIObUaS5Brc7V62qK2PscBJgz/LIWBmhlObNPziDFynB aA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:13:43 2026 by rpki-client