$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa File: FFF8A36A34E311EE877E760DC4F9AE02.roa (raw, json) Hash identifier: ZhvQJvrJhz5hPHtUfFRkmrF3mN5JAQ6j3AqMP+9IiGw= Subject key identifier: BE:0F:A3:29:B9:11:1F:D3:BE:BE:A7:03:6E:A6:8B:4C:4F:2D:2D:AE Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0425 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:00:06 +0000 ROA not before: Sat 05 Apr 2025 01:06:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60021 IP address blocks: 2400:6520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Apr 5 01:06:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42a46-4a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:27:aa:1f:9d:9d:f4:71:a8:4c:22:b3:d6: 7b:9b:8f:a4:f8:78:9d:36:69:56:2a:d5:a0:84:6d: 23:c8:7e:fa:67:bd:7a:f7:1c:20:58:47:0e:c8:5f: 38:b1:33:ce:63:9a:f5:8d:d0:f1:a5:e9:8b:29:6e: 8e:54:9e:21:9d:99:c5:4a:2c:e1:e6:2e:4b:45:83: 63:52:a2:19:dc:c1:f0:2c:6c:22:71:9c:94:19:0d: a2:34:c8:96:f9:02:f3:57:6f:8c:74:ce:2b:55:e2: 1d:b0:77:c3:4f:72:db:7c:37:7c:88:be:51:6b:54: 9a:fa:e0:37:f7:76:dd:ed:3f:7f:ad:31:bf:c3:1a: 02:59:1c:0d:cd:fa:41:98:e0:c6:e4:25:75:d1:b7: 89:47:b7:f1:d6:88:10:bb:d9:df:f7:ee:78:de:1d: ac:aa:c4:1c:9f:44:d6:3e:52:b8:68:94:9f:31:dd: 48:eb:12:65:25:fa:b0:7f:fa:1d:e3:cb:96:9e:44: 66:70:10:b6:ec:78:bc:92:01:37:88:0b:f7:b0:eb: c9:e8:41:ac:4a:92:3a:e3:53:10:13:7f:77:3d:f7: 0b:f4:4e:14:1c:a0:8a:20:40:3e:6e:ef:a0:93:43: a5:75:c7:0b:67:1f:ab:47:1a:55:b0:8f:a8:dc:a9: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0F:A3:29:B9:11:1F:D3:BE:BE:A7:03:6E:A6:8B:4C:4F:2D:2D:AE X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/FFF8A36A34E311EE877E760DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:6520::/32 Signature Algorithm: sha256WithRSAEncryption 6a:fb:09:2b:43:0b:c0:59:26:70:34:af:b8:31:75:27:d8:1f: 95:31:15:dc:67:e7:fb:e8:e4:21:a8:fb:43:67:70:f1:aa:21: 6e:ff:2c:b7:b7:5d:84:de:5f:9f:db:80:70:ee:e5:28:33:cc: d8:f5:aa:fc:bc:4b:0a:86:16:07:24:ed:b6:c3:69:45:b2:45: cb:13:d6:6d:3b:40:a8:09:9c:ba:7f:2a:16:1e:54:9d:66:bf: 13:41:b8:b5:2c:90:19:75:16:24:ae:bf:c7:ba:97:fe:eb:3c: 30:a7:02:81:ef:64:ce:a1:5f:c7:00:2d:d9:29:af:2e:26:3f: 97:65:b0:90:16:ae:89:6d:4b:8e:83:02:4d:df:df:34:bd:f2: 14:ca:72:b9:64:3a:98:52:dc:5d:23:ce:0c:e8:e9:dc:46:98: 66:96:09:4e:95:83:c3:c3:20:e8:8c:2f:e7:bc:33:3f:16:e4: 47:0f:56:bd:5b:59:7b:66:df:aa:e4:95:53:22:1b:b6:e5:e8: 8a:ab:a3:db:92:bc:b9:f6:0b:2e:e8:76:07:78:7a:32:69:c6: 98:b9:4f:c6:5b:5d:1a:54:1f:3a:d6:ab:40:fd:1e:9e:79:52: c0:46:49:3a:c8:b2:ab:c7:03:4c:75:b5:b5:1e:8c:9f:ea:98: 61:d3:23:22 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUwNDA1MDEwNjQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmE0Ni00YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Conqh+dnfRxqEwis9Z7m4+k+HidNmlWKtWghG0jyH76Z7169xwgWEcOyF84 sTPOY5r1jdDxpemLKW6OVJ4hnZnFSizh5i5LRYNjUqIZ3MHwLGwicZyUGQ2iNMiW +QLzV2+MdM4rVeIdsHfDT3LbfDd8iL5Ra1Sa+uA393bd7T9/rTG/wxoCWRwNzfpB mODG5CV10beJR7fx1ogQu9nf9+543h2sqsQcn0TWPlK4aJSfMd1I6xJlJfqwf/od 48uWnkRmcBC27Hi8kgE3iAv3sOvJ6EGsSpI641MQE393PfcL9E4UHKCKIEA+bu+g k0OldccLZx+rRxpVsI+o3KnMMwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFL4Poym5 ER/Tvr6nA26mi0xPLS2uMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU0QUUvNkM5RjJERkFBNTAxMTFFQzg5NjQyNzU3QzRGOUFFMDIvRkZGOEEzNkEz NEUzMTFFRTg3N0U3NjBEQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJABlIDANBgkqhkiG9w0BAQsFAAOCAQEAavsJK0MLwFkmcDSvuDF1 J9gflTEV3Gfn++jkIaj7Q2dw8aohbv8st7ddhN5fn9uAcO7lKDPM2PWq/LxLCoYW ByTttsNpRbJFyxPWbTtAqAmcun8qFh5UnWa/E0G4tSyQGXUWJK6/x7qX/us8MKcC ge9kzqFfxwAt2SmvLiY/l2WwkBauiW1LjoMCTd/fNL3yFMpyuWQ6mFLcXSPODOjp 3EaYZpYJTpWDw8Mg6Iwv57wzPxbkRw9WvVtZe2bfquSVUyIbtuXoiquj25K8ufYL Luh2B3h6MmnGmLlPxltdGlQfOtarQP0ennlSwEZJOsiyq8cDTHW1tR6Mn+qYYdMj Ig== -----END CERTIFICATE-----Generated at Mon Mar 2 10:38:11 2026 by rpki-client