$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/DF325558E6EE11F09FA64894636F56BC.roa File: DF325558E6EE11F09FA64894636F56BC.roa (raw, json) Hash identifier: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc= Subject key identifier: 28:B7:1B:38:20:43:42:E3:25:A6:41:97:38:77:AE:99:07:2B:91:1B Certificate issuer: /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86 Certificate serial: 22 Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/DF325558E6EE11F09FA64894636F56BC.roa Signing time: Sun 01 Mar 2026 05:47:37 +0000 ROA not before: Thu 01 Jan 2026 08:50:07 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 141218 IP address blocks: 2001:df6:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86 Validity Not Before: Jan 1 08:50:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d2f9-ac52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:71:b7:5a:d3:3c:8d:22:f0:e8:8a:cb:5c: 34:c8:49:03:f7:54:2b:dd:1e:bb:35:db:b3:4c:69: 6d:33:de:ae:b9:df:46:a0:dc:2c:ff:f5:95:50:ba: 74:25:24:5b:e9:dc:e4:34:76:83:8a:20:ce:6c:83: b5:c5:24:7c:db:72:08:05:b4:9c:06:1e:ef:6d:8b: b5:7b:15:6b:45:fe:e1:22:89:de:46:33:0f:26:53: 2c:cd:87:02:32:a7:9e:21:e7:28:fb:e6:0f:75:59: b2:34:0e:31:a1:86:a4:ff:92:77:2d:16:33:dc:cc: b3:62:05:65:d2:fe:6e:13:16:14:b8:a9:46:53:71: b3:32:5d:20:09:f5:fa:81:b6:82:da:31:0e:84:9e: e4:27:89:98:fd:60:5d:13:3f:75:e0:96:00:e7:06: 90:a3:dd:9d:91:39:df:9d:68:0e:64:2c:f7:0b:34: 26:fd:73:67:db:2f:d9:d2:9e:22:6f:d8:39:69:12: 04:32:f2:a5:9f:22:d5:19:b6:32:8c:68:cb:ca:88: 23:dd:cd:c3:1a:48:f8:a8:5b:79:8e:c8:d9:d8:39: 84:48:b8:ac:c4:0b:67:3a:25:51:17:f3:08:39:f7: f6:df:4d:67:03:93:8a:d9:a5:fc:68:b9:43:5b:09: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B7:1B:38:20:43:42:E3:25:A6:41:97:38:77:AE:99:07:2B:91:1B X509v3 Authority Key Identifier: keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/DF325558E6EE11F09FA64894636F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:8840::/48 Signature Algorithm: sha256WithRSAEncryption 48:62:22:09:e9:cf:c6:56:48:e0:89:81:4c:b7:30:5b:d0:51: f7:33:1d:59:62:4e:7d:d2:58:69:3f:be:6b:93:d5:02:4c:77: fe:a4:bd:c1:e4:b8:4a:2d:5c:86:bf:5a:cd:88:1e:bf:03:21: 05:c8:4e:97:f7:73:26:bc:bf:62:eb:7a:fb:5f:4c:d9:88:45: 00:11:50:50:c2:0d:12:fa:4e:d5:36:46:7e:17:87:89:f0:de: 70:39:1c:c7:e0:09:04:b6:e6:4b:f7:2d:5c:18:50:83:77:40: 03:56:e3:a7:69:b3:8d:10:90:31:f5:e4:7c:e5:59:01:4e:53: 6c:e0:fe:1d:05:ab:20:e1:81:11:8e:3d:5b:1f:c8:86:52:bc: 66:40:01:2b:b1:fc:5d:b2:73:f6:2a:cb:4d:3d:08:58:7f:41: 51:c1:35:0e:54:23:24:5e:98:c8:d2:fa:4a:d9:76:c7:05:72: f7:13:a0:14:bd:bf:8e:4a:20:5f:da:54:ae:2a:2f:8e:62:4b: df:22:9f:b9:47:7e:83:b6:5b:19:a7:66:1d:2b:5d:ee:9c:62: 6c:d6:ca:8a:f8:80:f2:e7:c0:d1:a2:64:be:87:e9:0f:ba:3f: b7:93:41:f7:c4:0b:e0:bf:6f:67:e6:4f:f6:6d:86:31:7d:62: 7a:b5:8a:b6 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzZGNTExMC8GA1UEBRMoQjMzMTdDNjdERDE1QjI4QUZBMzk4MDA0QzE5RDFENzhC MUJGREU4NjAeFw0yNjAxMDEwODUwMDdaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMmY5LWFjNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZGHG3WtM8jSLw6IrLXDTISQP3VCvdHrs127NMaW0z3q6530ag3Cz/9ZVQunQl JFvp3OQ0doOKIM5sg7XFJHzbcggFtJwGHu9ti7V7FWtF/uEiid5GMw8mUyzNhwIy p54h5yj75g91WbI0DjGhhqT/knctFjPczLNiBWXS/m4TFhS4qUZTcbMyXSAJ9fqB toLaMQ6EnuQniZj9YF0TP3XglgDnBpCj3Z2ROd+daA5kLPcLNCb9c2fbL9nSniJv 2DlpEgQy8qWfItUZtjKMaMvKiCPdzcMaSPioW3mOyNnYOYRIuKzEC2c6JVEX8wg5 9/bfTWcDk4rZpfxouUNbCdSnAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUKLcbOCBD QuMlpkGXOHeumQcrkRswHwYDVR0jBBgwFoAUszF8Z90Vsor6OYAEwZ0deLG/3oYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczNkY1LzJBNTBCNjQ4RTZF RTExRjBBRDA5NTc5MjYzNkY1NkJDL3N6RjhaOTBWc29yNk9ZQUV3WjBkZUxHXzNv WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3pGOFo5MFZzb3I2T1lBRXdaMGRlTEdfM29ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzZGNS8yQTUwQjY0OEU2RUUxMUYwQUQwOTU3OTI2MzZGNTZCQy9ERjMyNTU1OEU2 RUUxMUYwOUZBNjQ4OTQ2MzZGNTZCQy5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32iEAwDQYJKoZIhvcNAQELBQADggEBAEhiIgnpz8ZWSOCJgUy3 MFvQUfczHVliTn3SWGk/vmuT1QJMd/6kvcHkuEotXIa/Ws2IHr8DIQXITpf3cya8 v2LrevtfTNmIRQARUFDCDRL6TtU2Rn4Xh4nw3nA5HMfgCQS25kv3LVwYUIN3QANW 46dps40QkDH15HzlWQFOU2zg/h0FqyDhgRGOPVsfyIZSvGZAASux/F2yc/Yqy009 CFh/QVHBNQ5UIyRemMjS+krZdscFcvcToBS9v45KIF/aVK4qL45iS98in7lHfoO2 WxmnZh0rXe6cYmzWyor4gPLnwNGiZL6H6Q+6P7eTQffEC+C/b2fmT/ZthjF9Ynq1 irY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:49:06 2026 by rpki-client