$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa File: 378C18A43D3D11EAA59A8012C4F9AE02.roa (raw, json) Hash identifier: 5u+eTzxsr/xvvxbSFNp3Fi16h/z0i8prEdkb9c/H7aQ= Subject key identifier: 9D:DC:81:2B:D4:BB:1E:AF:2E:5E:2F:28:6E:04:AE:72:8F:0B:FB:04 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0F1B Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:38:27 +0000 ROA not before: Tue 02 Sep 2025 18:37:51 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138990 IP address blocks: 2405:84c0:faaa::/48 maxlen: 48 2405:84c0:faab::/48 maxlen: 48 2405:84c0:fade::/48 maxlen: 48 2405:84c0:fbbb::/48 maxlen: 48 2405:84c0:ff90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3867 (0xf1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 2 18:37:51 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a487a3-6f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a6:0f:b0:ef:32:f5:07:f4:c1:95:44:df:bf: a2:38:1c:eb:5f:fe:20:a3:05:91:74:1a:c2:1c:c3: bd:5f:07:c2:df:b1:38:5b:52:d5:f4:52:cd:8e:30: e7:60:3f:30:6d:ab:9d:25:73:2c:78:ae:3b:d2:56: bd:88:cd:ec:69:c6:2f:6e:ef:f5:19:73:e9:e1:7a: 1a:1a:f5:e0:97:77:e1:ee:01:ae:7b:c0:91:1f:7c: f6:3d:24:82:34:44:f0:02:38:68:d7:bc:7a:e5:07: 8c:40:be:a2:b4:fe:ae:59:34:6f:5f:86:36:2f:6e: a8:99:97:90:93:4b:48:24:3f:1a:be:87:d2:b2:bf: a3:f0:f5:08:3f:c7:cb:63:5e:aa:b5:c9:c5:7d:ac: a4:41:aa:9d:5b:45:6a:f2:71:6f:35:60:f2:f5:9e: 5a:6f:47:92:20:bc:7f:36:f3:7c:a0:81:b3:31:2f: ae:a7:ff:88:cd:95:07:9f:ff:1c:d7:56:c2:df:85: 44:d1:63:be:01:b3:73:bd:c1:8f:d4:de:35:27:d8: ec:99:21:aa:02:47:1e:93:38:51:0c:81:06:75:65: 5d:72:fc:6b:ed:95:d9:4f:73:7a:e3:8e:65:fc:9b: 3c:39:76:2c:a2:52:b6:82:2f:e8:4b:c0:f3:98:f3: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:81:2B:D4:BB:1E:AF:2E:5E:2F:28:6E:04:AE:72:8F:0B:FB:04 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2405:84c0:faaa::/47 2405:84c0:fade::/48 2405:84c0:fbbb::/48 2405:84c0:ff90::/44 Signature Algorithm: sha256WithRSAEncryption bf:9b:5b:bf:3d:09:cf:b0:b1:2e:73:25:b4:e1:51:3a:93:bc: fe:30:0e:9a:75:fa:b7:11:81:df:2f:de:dd:6b:4d:59:71:d3: 35:b9:eb:fb:f6:d2:b5:70:fe:dd:08:21:15:27:86:02:d5:70: 91:83:86:f9:bf:1b:f3:48:68:db:98:16:ab:52:d4:1a:3d:83: ca:e3:73:7d:04:5e:fa:c1:5b:9c:84:80:30:83:0f:32:52:a5: a4:55:06:1f:fb:e1:85:14:30:21:50:52:15:c7:87:92:86:e3: b8:51:55:dd:74:75:68:34:45:52:fc:95:7d:02:b6:fa:71:f4: b4:eb:f6:5c:2c:dd:39:65:0f:68:09:02:be:36:6b:90:6e:d7: 5a:4b:f6:14:1a:61:d8:18:90:fa:f5:a4:e6:26:a4:5b:8f:92: 78:f9:5b:77:65:7f:9c:1f:30:f1:71:dc:0d:64:cf:ce:6a:96: 22:4f:b0:20:ee:5d:05:d9:0a:7f:8b:af:2b:bb:e3:5b:42:18: 4e:b5:0b:b9:6c:d0:17:db:ab:4b:8b:ca:2d:83:4b:69:7f:f8: af:b3:1c:de:8b:f0:63:dd:50:09:aa:55:d8:e9:6d:22:74:2a: a5:99:86:41:45:66:79:4c:35:8e:27:eb:a4:ab:38:e1:91:d4: 7b:ec:0b:33 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICDxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUwOTAyMTgzNzUxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODdhMy02ZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KYPsO8y9Qf0wZVE37+iOBzrX/4gowWRdBrCHMO9XwfC37E4W1LV9FLNjjDn YD8wbaudJXMseK470la9iM3sacYvbu/1GXPp4XoaGvXgl3fh7gGue8CRH3z2PSSC NETwAjho17x65QeMQL6itP6uWTRvX4Y2L26omZeQk0tIJD8avofSsr+j8PUIP8fL Y16qtcnFfaykQaqdW0Vq8nFvNWDy9Z5ab0eSILx/NvN8oIGzMS+up/+IzZUHn/8c 11bC34VE0WO+AbNzvcGP1N41J9jsmSGqAkcekzhRDIEGdWVdcvxr7ZXZT3N6445l /Js8OXYsolK2gi/oS8DzmPMFPQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJ3cgSvU ux6vLl4vKG4ErnKPC/sEMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvMzc4QzE4QTQz RDNEMTFFQUE1OUE4MDEyQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAAjAkAwcBJAWEwPqqAwcAJAWEwPreAwcAJAWEwPu7AwcEJAWEwP+QMA0GCSqG SIb3DQEBCwUAA4IBAQC/m1u/PQnPsLEucyW04VE6k7z+MA6adfq3EYHfL97da01Z cdM1uev79tK1cP7dCCEVJ4YC1XCRg4b5vxvzSGjbmBarUtQaPYPK43N9BF76wVuc hIAwgw8yUqWkVQYf++GFFDAhUFIVx4eShuO4UVXddHVoNEVS/JV9Arb6cfS06/Zc LN05ZQ9oCQK+NmuQbtdaS/YUGmHYGJD69aTmJqRbj5J4+Vt3ZX+cHzDxcdwNZM/O apYiT7Ag7l0F2Qp/i68ru+NbQhhOtQu5bNAX26tLi8otg0tpf/ivsxzei/Bj3VAJ qlXY6W0idCqlmYZBRWZ5TDWOJ+ukqzjhkdR77Asz -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:35 2026 by rpki-client