$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa File: 0D041790A28611EFBD5A8C11C4F9AE02.roa (raw, json) Hash identifier: T1zCfhDV1GULebI1Zrd7vcq1PSLqbmhv8BwiI/PVCOs= Subject key identifier: 49:61:E6:8B:89:A1:C8:D9:94:1A:25:EB:90:15:66:A9:0C:10:27:6B Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78 Certificate serial: F8 Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:11:43 +0000 ROA not before: Sun 11 Jan 2026 05:23:57 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153455 IP address blocks: 2401:d760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78 Validity Not Before: Jan 11 05:23:57 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41eef-6e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:69:7e:b7:b4:29:54:fe:8c:00:19:fd:46: 14:1a:0a:8a:bb:87:22:92:26:9f:b4:ed:00:cb:0b: 7f:2e:f7:a5:23:d6:be:a5:a9:f8:53:93:e7:dc:4e: 05:bd:b2:27:8e:8b:49:e5:e1:9e:93:4f:7d:35:82: d4:66:bd:d3:ae:e0:39:c7:f3:fc:41:41:95:aa:85: 10:ec:a8:9d:94:16:15:32:23:13:1d:57:fc:56:16: 20:7e:97:07:55:80:16:dc:fb:1c:4c:55:89:f9:41: 0b:88:c4:3a:20:07:4d:61:44:50:cf:94:1a:31:bb: 05:4e:4c:5f:c1:08:cb:0b:a2:48:36:0b:ca:bc:ff: 24:8c:50:c5:d3:fe:89:fd:fd:c4:1a:6f:08:a9:22: fc:9b:c0:9e:df:47:dc:de:b2:f4:0b:02:9f:3a:e7: 44:c7:f8:a0:7c:99:a1:56:73:6c:e8:bd:6b:7f:1d: 3e:38:a7:43:88:3e:7d:78:ac:ee:d4:dd:38:fb:90: d1:38:30:c4:65:04:16:1c:fe:bb:c3:64:3b:7e:f7: ed:6a:67:5b:f9:da:f4:a9:61:bf:39:9b:37:79:33: 06:e1:b7:60:2a:5e:c8:44:7e:a4:57:57:89:d1:db: 6d:e2:2f:12:d9:76:ed:bc:27:16:00:5e:5a:e6:42: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:61:E6:8B:89:A1:C8:D9:94:1A:25:EB:90:15:66:A9:0C:10:27:6B X509v3 Authority Key Identifier: keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:d760::/32 Signature Algorithm: sha256WithRSAEncryption 0f:e4:68:0d:b9:91:c2:61:1b:eb:df:88:ef:e5:f1:71:0b:0b: df:ae:eb:d3:69:ce:41:be:85:92:de:3d:60:9a:87:0a:af:a1: f0:9a:41:33:2c:75:62:c6:85:37:ff:53:ec:18:1d:78:f5:a5: a1:dd:94:ac:a9:4e:61:22:1e:53:54:ab:d4:c3:f7:f4:ab:97: f6:1b:55:d3:d9:38:60:e9:08:9d:59:0e:fb:c1:fc:03:8e:6a: a6:7c:4a:dd:3c:a6:54:8c:e2:9b:5e:06:53:6c:0c:5c:25:1f: 2d:a3:95:b3:fe:f2:63:31:a5:bb:a1:5c:cd:8f:b3:70:ac:8f: 70:49:2c:d9:69:de:a9:a1:2f:55:2f:de:1c:f8:4d:d0:91:8b: 63:cb:52:a3:75:3f:b0:1c:eb:82:9c:8c:b9:c9:5f:d1:a1:f3: fc:7b:4a:fa:e1:da:46:5b:5f:62:0d:72:8a:b7:be:b3:91:83: 29:85:63:07:f8:93:ca:d6:ef:f6:4a:72:4c:73:0c:fb:8b:4c: a5:af:e7:e7:a0:04:a3:98:d9:b0:09:38:10:cb:f2:9c:95:f3: 48:a3:15:4b:fa:32:51:1d:52:83:a0:7f:41:ad:8d:c4:35:2f: 65:60:0b:06:ce:37:ab:74:52:4a:36:4e:48:94:1b:80:e3:aa: 75:0f:09:e0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1RDkxMTAvBgNVBAUTKEYyNkE4MTAxOTE2OTUyRkIyMEJFMDFFOEZDN0M5MEVE QzlFRTlGNzgwHhcNMjYwMTExMDUyMzU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWVlZi02ZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71Bpfre0KVT+jAAZ/UYUGgqKu4cikiaftO0Aywt/LvelI9a+pan4U5Pn3E4F vbInjotJ5eGek099NYLUZr3TruA5x/P8QUGVqoUQ7KidlBYVMiMTHVf8VhYgfpcH VYAW3PscTFWJ+UELiMQ6IAdNYURQz5QaMbsFTkxfwQjLC6JINgvKvP8kjFDF0/6J /f3EGm8IqSL8m8Ce30fc3rL0CwKfOudEx/igfJmhVnNs6L1rfx0+OKdDiD59eKzu 1N04+5DRODDEZQQWHP67w2Q7fvftamdb+dr0qWG/OZs3eTMG4bdgKl7IRH6kV1eJ 0dtt4i8S2XbtvCcWAF5a5kLwEwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFElh5ouJ ocjZlBol65AVZqkMECdrMB8GA1UdIwQYMBaAFPJqgQGRaVL7IL4B6Px8kO3J7p94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVEOS9DRDU0RDczOEEy ODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2c2d2Z0hvX0h5UTdjbnVu M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtcUJBWkZwVXZzZ3ZnSG9fSHlRN2NudW4zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU1RDkvQ0Q1NEQ3MzhBMjg1MTFFRkI2NkIxODExQzRGOUFFMDIvMEQwNDE3OTBB Mjg2MTFFRkJENUE4QzExQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAHXYDANBgkqhkiG9w0BAQsFAAOCAQEAD+RoDbmRwmEb69+I7+Xx cQsL367r02nOQb6Fkt49YJqHCq+h8JpBMyx1YsaFN/9T7BgdePWlod2UrKlOYSIe U1Sr1MP39KuX9htV09k4YOkInVkO+8H8A45qpnxK3TymVIzim14GU2wMXCUfLaOV s/7yYzGlu6FczY+zcKyPcEks2WneqaEvVS/eHPhN0JGLY8tSo3U/sBzrgpyMuclf 0aHz/HtK+uHaRltfYg1yire+s5GDKYVjB/iTytbv9kpyTHMM+4tMpa/n56AEo5jZ sAk4EMvynJXzSKMVS/oyUR1Sg6B/Qa2NxDUvZWALBs43q3RSSjZOSJQbgOOqdQ8J 4A== -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:57 2026 by rpki-client