$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/821C9E64DB3611F09027CD7F8DD3641D.roa File: 821C9E64DB3611F09027CD7F8DD3641D.roa (raw, json) Hash identifier: AOfad5a7fSWsHdbLHMDODjYpWnpW4mwlrkvLUN4b9F4= Subject key identifier: 84:D4:2C:FC:23:8F:58:78:EF:D2:9C:07:DD:D6:F9:04:B0:2A:CD:38 Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Certificate serial: 2B Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/821C9E64DB3611F09027CD7F8DD3641D.roa Signing time: Sun 01 Mar 2026 05:53:06 +0000 ROA not before: Wed 17 Dec 2025 10:52:41 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137127 IP address blocks: 2402:4120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Validity Not Before: Dec 17 10:52:41 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d442-0ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:74:45:b7:ee:99:b7:7e:18:f4:5f:c7:5d: 0c:8a:9e:ba:73:50:7c:a6:a4:a4:c5:7b:d4:91:b5: f2:b7:db:27:90:2b:8d:09:68:c9:ff:7f:e1:83:0c: 0f:bd:12:98:e8:03:de:08:46:c7:2a:e9:ce:1b:8c: d2:7a:bc:fc:75:77:cd:50:3e:b3:78:3c:30:e4:18: 09:b0:70:9b:f3:cb:8f:61:84:60:07:7f:1b:84:f6: 34:ec:af:b0:62:9a:1e:4d:51:f0:0a:f1:3b:96:f7: be:4a:8d:93:90:36:19:09:26:04:eb:c1:04:2f:63: 99:b7:2e:10:69:68:e6:44:dd:6e:0f:a6:b4:fd:2d: d9:3b:0a:56:b9:44:2d:91:6e:15:e7:18:52:e9:52: 77:87:56:d3:31:43:6a:a9:d7:3c:cf:03:fb:97:30: 4f:b6:ac:a8:67:6c:9b:e1:60:b6:0b:94:ad:3b:5c: b8:51:fe:6f:da:f4:d1:bd:16:9a:91:07:3a:ba:40: b7:f2:cc:71:f6:6c:0b:88:b9:de:67:1f:0e:5b:39: dc:9b:b8:66:d1:fd:9c:23:41:5b:b1:b3:20:01:ca: 9f:81:9f:80:dd:9b:a5:60:55:7e:75:96:11:51:5b: 76:ee:ee:eb:bb:2f:ab:ec:a4:38:08:03:b0:54:e6: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D4:2C:FC:23:8F:58:78:EF:D2:9C:07:DD:D6:F9:04:B0:2A:CD:38 X509v3 Authority Key Identifier: keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/821C9E64DB3611F09027CD7F8DD3641D.roa sbgp-ipAddrBlock: critical IPv6: 2402:4120::/32 Signature Algorithm: sha256WithRSAEncryption 2a:12:52:54:12:02:14:28:49:a3:89:f5:24:f3:63:df:ca:ae: f9:ee:6e:0e:f5:fa:d0:9a:c6:49:a0:52:3b:9a:48:c9:81:67: 6c:35:0d:58:55:1b:08:83:9e:07:ad:5a:54:04:32:87:fa:1a: ad:1a:d8:73:5a:34:84:b7:3f:09:25:c4:54:0c:24:26:dc:70: 72:90:66:fe:0e:da:65:b9:6c:77:99:3c:96:51:a1:64:5c:40: 40:bb:95:f9:40:03:54:a4:cd:78:02:f1:42:6f:46:0c:af:32: 6a:41:25:0c:96:85:0b:ee:f6:9d:8b:37:bc:14:96:fe:95:24: c9:c5:c1:9e:48:a8:6d:61:f4:46:7b:07:11:33:51:b5:aa:77: ad:91:07:10:fd:28:f3:d2:67:c8:ad:2f:31:0a:fc:24:f5:83: 9c:48:ca:37:88:16:e3:f5:91:8e:7b:fd:d7:5f:ef:9f:61:e1: 09:29:72:4f:ee:01:b1:1c:5b:01:8b:10:b3:cf:ff:ac:cd:a2: 35:34:26:a6:94:5f:8e:a5:f5:6c:d9:66:5e:e1:38:2e:22:bd: ed:93:2a:b3:e5:34:8e:21:cf:c7:e9:9d:9d:f0:38:06:80:b3: 3c:eb:1c:b1:f9:38:65:2e:eb:9b:3d:e6:d3:3d:fd:ee:19:28: bc:22:4f:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjk0NjExMC8GA1UEBRMoOEIwNkRERkNFNkYxOUM0MUJFMzk5RDNCQzdCRTJBRTNF M0JGRDQ1RjAeFw0yNTEyMTcxMDUyNDFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNDQyLTBjYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQJnRFt+6Zt34Y9F/HXQyKnrpzUHympKTFe9SRtfK32yeQK40JaMn/f+GDDA+9 EpjoA94IRscq6c4bjNJ6vPx1d81QPrN4PDDkGAmwcJvzy49hhGAHfxuE9jTsr7Bi mh5NUfAK8TuW975KjZOQNhkJJgTrwQQvY5m3LhBpaOZE3W4PprT9Ldk7Cla5RC2R bhXnGFLpUneHVtMxQ2qp1zzPA/uXME+2rKhnbJvhYLYLlK07XLhR/m/a9NG9FpqR Bzq6QLfyzHH2bAuIud5nHw5bOdybuGbR/ZwjQVuxsyAByp+Bn4Ddm6VgVX51lhFR W3bu7uu7L6vspDgIA7BU5qFDAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUhNQs/COP WHjv0pwH3db5BLAqzTgwHwYDVR0jBBgwFoAUiwbd/ObxnEG+OZ07x74q4+O/1F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0I2NzEwMTMwREIz MzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVHLU9aMDd4NzRxNC1PXzFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXdiZF9PYnhuRUctT1owN3g3NHE0LU9fMUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjk0Ni9CNjcxMDEzMERCMzMxMUYwQTJDRTUzNjg4Q0QzNjQxRC84MjFDOUU2NERC MzYxMUYwOTAyN0NEN0Y4REQzNjQxRC5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAkEgMA0GCSqGSIb3DQEBCwUAA4IBAQAqElJUEgIUKEmjifUk82Pf yq757m4O9frQmsZJoFI7mkjJgWdsNQ1YVRsIg54HrVpUBDKH+hqtGthzWjSEtz8J JcRUDCQm3HBykGb+DtpluWx3mTyWUaFkXEBAu5X5QANUpM14AvFCb0YMrzJqQSUM loUL7vadize8FJb+lSTJxcGeSKhtYfRGewcRM1G1qnetkQcQ/Sjz0mfIrS8xCvwk 9YOcSMo3iBbj9ZGOe/3XX++fYeEJKXJP7gGxHFsBixCzz/+szaI1NCamlF+OpfVs 2WZe4TguIr3tkyqz5TSOIc/H6Z2d8DgGgLM86xyx+ThlLuubPebTPf3uGSi8Ik/Q -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:23 2026 by rpki-client