$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/1CCFF4EAE94411F0858458963C6F56BC.roa File: 1CCFF4EAE94411F0858458963C6F56BC.roa (raw, json) Hash identifier: zSizwmjwC1EUvKxUhWbJHmVerxHzuPrZmy1ydtzt1dI= Subject key identifier: A1:45:4C:68:62:B6:D5:F9:4C:E4:8F:7D:31:2D:DE:D0:BF:57:AE:40 Certificate issuer: /CN=A91918AB/serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35 Certificate serial: 23 Authority key identifier: 47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/1CCFF4EAE94411F0858458963C6F56BC.roa Signing time: Sun 01 Mar 2026 05:48:21 +0000 ROA not before: Sun 04 Jan 2026 08:05:20 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 142168 IP address blocks: 2402:44e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35 Validity Not Before: Jan 4 08:05:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d325-937c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:b6:cf:6b:11:80:c2:f4:e9:41:d2:ef:b8: 37:a2:39:b9:33:4a:11:e9:7b:c9:c6:4c:f2:cd:b5: 38:63:6d:22:fa:bf:7d:fb:b2:db:ec:1f:9a:5d:a8: b9:cd:8b:e4:6b:4e:86:d6:dd:dc:b1:aa:87:6e:fc: 6b:c8:97:cb:a9:b5:b8:d4:0b:4a:30:27:0d:b9:fd: 84:9a:64:db:b7:59:aa:6a:4c:3d:12:eb:e8:e6:c1: 40:66:26:0a:aa:58:56:8e:b1:eb:56:86:cc:19:4f: 28:34:dc:04:35:90:01:74:bf:ee:02:19:48:06:07: 7d:6e:d6:d3:86:94:bf:19:34:96:86:cf:cd:e7:3f: 45:c6:88:ed:6c:f0:12:0c:b3:fe:34:6c:44:0c:5c: 6c:d7:57:13:09:5e:83:86:3b:72:29:cf:cc:c6:52: 7d:b3:c1:37:72:6e:f5:3d:1b:b1:12:53:99:53:01: 47:0a:58:b2:53:e5:3c:1d:44:e8:b4:01:65:ee:93: 39:d0:e9:86:7a:1a:31:02:04:fc:90:fc:af:ff:62: 4c:69:22:ff:be:fd:46:a3:d7:65:a2:dc:93:d5:7a: 38:62:f8:2f:e3:c0:0d:40:e3:41:22:c6:b4:45:ff: 26:7e:2e:c5:a0:6f:46:61:bc:e1:4c:8d:c6:43:6e: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:45:4C:68:62:B6:D5:F9:4C:E4:8F:7D:31:2D:DE:D0:BF:57:AE:40 X509v3 Authority Key Identifier: keyid:47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/1CCFF4EAE94411F0858458963C6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2402:44e0::/32 Signature Algorithm: sha256WithRSAEncryption 53:96:71:ac:bc:db:72:b7:66:15:d5:d2:c0:89:4e:7b:f2:8e: 5f:c1:39:38:ff:f0:d7:e3:b4:fa:e9:c3:80:26:eb:31:04:e9: 8e:56:5d:33:fb:c2:0f:73:84:b0:a3:69:17:35:64:bb:c1:c6: 26:67:f7:b8:ec:9f:ea:e6:50:e5:dc:a8:86:7f:67:db:ae:09: 66:ac:6b:53:85:6a:e4:3f:71:40:1b:89:a9:2d:5b:c7:cc:c7: 17:d6:e4:92:ba:86:8f:c3:d7:d3:34:c1:6b:7a:a1:1e:94:17: 42:17:4a:c1:92:e1:1d:b4:cc:bc:72:c3:85:99:4d:f5:bf:7b: 1b:a9:57:10:0b:60:da:fa:c5:6e:e4:83:a8:0d:d2:d3:7a:a2: 25:23:b3:72:5d:29:9f:04:96:d4:36:82:1d:d2:96:e0:11:b4: 9e:05:3a:23:db:0c:48:00:63:6d:34:ca:4b:b5:2e:b5:59:5c: 28:60:10:7d:1a:af:ee:8f:bc:51:a6:57:a8:ed:44:92:ce:db: 86:f8:7d:32:7c:56:6b:93:11:db:c4:31:ab:57:e0:59:ea:41: 96:0c:92:00:05:89:3a:15:52:96:ff:73:4d:34:7b:9c:67:39: 5b:e6:8a:6b:8c:34:ae:4c:46:e3:56:83:bc:0d:79:b8:f9:e4: 28:94:05:91 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MThBQjExMC8GA1UEBRMoNDc2NDUzQkMwMzZGNDNENUNCOTA2QTQ2OEM1RDhBOTg2 OERGRkQzNTAeFw0yNjAxMDQwODA1MjBaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMzI1LTkzN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTyLbPaxGAwvTpQdLvuDeiObkzShHpe8nGTPLNtThjbSL6v337stvsH5pdqLnN i+RrTobW3dyxqodu/GvIl8uptbjUC0owJw25/YSaZNu3WapqTD0S6+jmwUBmJgqq WFaOsetWhswZTyg03AQ1kAF0v+4CGUgGB31u1tOGlL8ZNJaGz83nP0XGiO1s8BIM s/40bEQMXGzXVxMJXoOGO3Ipz8zGUn2zwTdybvU9G7ESU5lTAUcKWLJT5TwdROi0 AWXukznQ6YZ6GjECBPyQ/K//YkxpIv++/Uaj12Wi3JPVejhi+C/jwA1A40EixrRF /yZ+LsWgb0ZhvOFMjcZDbiyRAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUoUVMaGK2 1flM5I99MS3e0L9XrkAwHwYDVR0jBBgwFoAUR2RTvANvQ9XLkGpGjF2KmGjf/TUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzkyREM1RDcwRTk0 MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1IyUlR2QU52UTlYTGtHcEdqRjJLbUdqZl9U VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjJSVHZBTnZROVhMa0dwR2pGMkttR2pmX1RVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MThBQi85MkRDNUQ3MEU5NDExMUYwQkZENkNFMzMzQzZGNTZCQy8xQ0NGRjRFQUU5 NDQxMUYwODU4NDU4OTYzQzZGNTZCQy5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAkTgMA0GCSqGSIb3DQEBCwUAA4IBAQBTlnGsvNtyt2YV1dLAiU57 8o5fwTk4//DX47T66cOAJusxBOmOVl0z+8IPc4Swo2kXNWS7wcYmZ/e47J/q5lDl 3KiGf2fbrglmrGtThWrkP3FAG4mpLVvHzMcX1uSSuoaPw9fTNMFreqEelBdCF0rB kuEdtMy8csOFmU31v3sbqVcQC2Da+sVu5IOoDdLTeqIlI7NyXSmfBJbUNoId0pbg EbSeBToj2wxIAGNtNMpLtS61WVwoYBB9Gq/uj7xRpleo7USSztuG+H0yfFZrkxHb xDGrV+BZ6kGWDJIABYk6FVKW/3NNNHucZzlb5oprjDSuTEbjVoO8DXm4+eQolAWR -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:21 2026 by rpki-client