$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/1FCE5CE0214F11EFAB245D49C4F9AE02.roa File: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (raw, json) Hash identifier: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ= Subject key identifier: 79:09:57:E7:C7:AA:6F:4F:5B:22:BE:7B:68:AD:00:9D:41:5C:34:53 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: 0157 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/1FCE5CE0214F11EFAB245D49C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:06:21 +0000 ROA not before: Thu 05 Jun 2025 05:15:12 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152894 IP address blocks: 2001:df3:dec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Jun 5 05:15:12 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a41dac-6cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1d:0b:48:91:cb:b1:76:62:74:af:85:80:d2: 72:b9:59:05:7a:49:ed:6e:c0:2c:9d:05:eb:5a:a2: 08:87:e9:dc:df:df:ce:88:99:10:ce:41:9d:60:ce: 15:d0:01:73:53:60:1f:2a:c8:45:aa:a2:0e:ec:89: 46:59:f1:48:43:e3:d6:62:2a:21:80:ec:b6:86:04: ab:16:fd:cf:83:88:a2:13:20:8e:e6:ef:3a:9d:1c: 01:6e:f2:8d:b2:34:d2:91:b6:fb:b8:08:35:20:27: af:23:bf:88:12:90:1b:45:1b:52:69:ce:f0:12:73: 22:e5:16:aa:60:7e:2a:2b:84:53:c3:dd:3f:1d:e2: c3:70:fa:08:f8:01:38:ae:69:c8:27:28:18:69:7b: d3:bf:c3:d0:fb:8a:ad:4f:31:c0:c9:ca:18:e0:f2: c0:31:86:d3:3c:14:00:bd:02:b4:12:2d:7b:5f:53: b6:6d:39:79:08:ba:92:0a:44:8b:e4:55:f1:4c:e8: cb:4e:a6:3b:9c:9a:93:d6:48:2f:5a:76:7a:04:d3: b5:42:9e:ae:99:fd:d4:b9:b0:7a:0e:6b:29:07:5d: 55:55:47:bc:ed:4b:91:cf:83:f1:64:5c:9f:1e:5d: 3a:3f:40:d1:90:1c:2a:a4:38:d4:05:fc:9c:89:bb: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:09:57:E7:C7:AA:6F:4F:5B:22:BE:7B:68:AD:00:9D:41:5C:34:53 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/1FCE5CE0214F11EFAB245D49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:dec0::/48 Signature Algorithm: sha256WithRSAEncryption 40:00:ce:3f:f9:6e:e0:9b:75:cd:ef:02:83:1b:44:d9:1e:59: 2b:33:c0:f1:10:78:3c:a6:c2:26:23:bf:a6:4c:4e:ba:39:40: d0:4a:2a:b3:06:87:d2:98:c9:38:9d:0b:8b:86:30:3a:ea:cb: f4:e0:5a:d4:c1:90:a0:14:58:02:ba:c7:dd:c6:d7:23:69:00: 28:68:a6:ca:71:f6:f9:23:b3:b4:0e:10:39:34:21:38:a5:c7: f7:52:21:bc:c0:ae:35:8f:8e:39:be:07:ae:05:83:64:da:c3: 58:c1:1c:52:25:9b:fc:42:99:e1:50:77:5c:4e:86:60:3b:b4: 8f:4e:b3:41:95:f2:d4:92:86:94:0c:c9:30:e3:af:9b:b1:f5: 8d:dc:c7:38:2b:70:ab:e6:0e:5c:0a:ed:7b:41:84:ef:6a:85: 60:d6:0f:33:38:12:18:ef:86:a5:fe:c8:a0:04:0c:3d:d2:0e: 85:9a:fc:fc:7a:9b:b7:2c:db:5f:93:33:d2:60:75:a2:17:fc: 50:ed:e0:e5:ac:27:54:8f:6e:d8:e5:21:fc:1d:e3:8e:56:fe: 21:de:31:94:f4:0f:c5:75:3c:44:c8:c8:a1:7b:8f:5e:19:1a: 90:1c:95:a9:f6:ed:36:8a:18:73:60:4f:c1:b3:3a:83:39:db: 84:fd:4f:3c -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUwNjA1MDUxNTEyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWRhYy02Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3x0LSJHLsXZidK+FgNJyuVkFekntbsAsnQXrWqIIh+nc39/OiJkQzkGdYM4V 0AFzU2AfKshFqqIO7IlGWfFIQ+PWYiohgOy2hgSrFv3Pg4iiEyCO5u86nRwBbvKN sjTSkbb7uAg1ICevI7+IEpAbRRtSac7wEnMi5RaqYH4qK4RTw90/HeLDcPoI+AE4 rmnIJygYaXvTv8PQ+4qtTzHAycoY4PLAMYbTPBQAvQK0Ei17X1O2bTl5CLqSCkSL 5FXxTOjLTqY7nJqT1kgvWnZ6BNO1Qp6umf3UubB6DmspB11VVUe87UuRz4PxZFyf Hl06P0DRkBwqpDjUBfycibuZHwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHkJV+fH qm9PWyK+e2itAJ1BXDRTMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk4RUMvMjFFNUEzMEExRUUxMTFFRjkzRjk4NTNEQzRGOUFFMDIvMUZDRTVDRTAy MTRGMTFFRkFCMjQ1RDQ5QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN897AMA0GCSqGSIb3DQEBCwUAA4IBAQBAAM4/+W7gm3XN7wKD G0TZHlkrM8DxEHg8psImI7+mTE66OUDQSiqzBofSmMk4nQuLhjA66sv04FrUwZCg FFgCusfdxtcjaQAoaKbKcfb5I7O0DhA5NCE4pcf3UiG8wK41j445vgeuBYNk2sNY wRxSJZv8QpnhUHdcToZgO7SPTrNBlfLUkoaUDMkw46+bsfWN3Mc4K3Cr5g5cCu17 QYTvaoVg1g8zOBIY74al/sigBAw90g6Fmvz8epu3LNtfkzPSYHWiF/xQ7eDlrCdU j27Y5SH8HeOOVv4h3jGU9A/FdTxEyMihe49eGRqQHJWp9u02ihhzYE/BszqDOduE /U88 -----END CERTIFICATE-----Generated at Mon Mar 2 04:08:51 2026 by rpki-client