$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/D17A895C0C5D11EAB1A29D67C4F9AE02.roa File: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (raw, json) Hash identifier: l903aSPwgwjNFISltHvDzbBe3lskGyn6Jq+nK8GBx8o= Subject key identifier: 7E:89:F1:C8:DF:B8:22:8E:34:3F:B4:8B:94:0B:D9:5A:0A:0C:C1:B2 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0F1D Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/D17A895C0C5D11EAB1A29D67C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:38:29 +0000 ROA not before: Tue 02 Sep 2025 18:37:53 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139782 IP address blocks: 2405:84c0::/48 maxlen: 48 2405:84c0:2000::/36 maxlen: 40 2405:84c0:9c00::/40 maxlen: 40 2405:84c0:ff30::/44 maxlen: 44 2405:84c0:ff30::/48 maxlen: 48 2405:84c0:ff31::/48 maxlen: 48 2405:84c0:ff32::/48 maxlen: 48 2405:84c0:ff33::/48 maxlen: 48 2405:84c0:ff34::/48 maxlen: 48 2405:84c0:ff35::/48 maxlen: 48 2405:84c0:ff36::/48 maxlen: 48 2405:84c0:ff37::/48 maxlen: 48 2405:84c0:ff38::/48 maxlen: 48 2405:84c0:ff39::/48 maxlen: 48 2405:84c0:ff3a::/48 maxlen: 48 2405:84c0:ff3b::/48 maxlen: 48 2405:84c0:ff3c::/48 maxlen: 48 2405:84c0:ff3d::/48 maxlen: 48 2405:84c0:ff3e::/48 maxlen: 48 2405:84c0:ff3f::/48 maxlen: 48 2405:84c0:ff50::/44 maxlen: 48 2405:84c0:ff60::/44 maxlen: 44 2405:84c0:fff0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3869 (0xf1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 2 18:37:53 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a487a5-3e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:1c:1f:e2:f9:27:6a:e0:1c:96:75:46:ac: 9f:be:cd:19:ef:64:8a:3b:09:6e:5c:f3:0a:1d:4d: c2:e5:65:1c:e0:e6:90:93:9a:34:4a:2d:26:f9:05: ac:08:cf:6f:d9:0a:33:42:00:5e:09:96:96:82:77: ff:7b:5a:69:62:d8:92:83:d9:6a:2c:cf:2a:05:8a: e1:f4:98:52:9f:79:30:62:88:9a:85:62:26:e1:c4: 5e:ad:9f:09:79:bc:22:67:a0:1f:a0:52:cc:7d:8e: 91:8b:f5:44:75:5d:13:1a:84:d7:70:1e:6e:a1:70: b3:9f:c0:ab:a3:f9:6c:5c:6b:ff:7e:8d:1b:7e:ef: cb:e5:5a:99:6d:5f:9f:e9:17:c3:03:39:03:ad:f5: 6d:62:c6:67:a8:a8:d6:0d:dc:9e:02:6a:6f:e2:19: 33:60:e7:85:41:4c:38:28:57:b5:e6:55:9b:2b:fc: ec:7e:48:2f:c5:90:c2:d5:18:86:fc:c6:e5:36:34: cb:5c:44:b0:de:f7:0e:97:35:6b:31:4c:22:54:1b: 2b:5c:84:0e:b5:c3:66:48:00:a6:d0:b6:65:8d:d0: 31:ec:50:c8:b7:c2:96:7c:db:87:29:33:4b:86:12: 16:f2:fb:85:2a:b5:a1:ea:b7:bc:5a:ac:70:f1:e9: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:F1:C8:DF:B8:22:8E:34:3F:B4:8B:94:0B:D9:5A:0A:0C:C1:B2 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/D17A895C0C5D11EAB1A29D67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2405:84c0::/48 2405:84c0:2000::/36 2405:84c0:9c00::/40 2405:84c0:ff30::/44 2405:84c0:ff50::-2405:84c0:ff6f:ffff:ffff:ffff:ffff:ffff 2405:84c0:fff0::/48 Signature Algorithm: sha256WithRSAEncryption 76:b4:1b:03:3d:ed:b0:34:c9:34:dd:81:e3:0a:85:79:b5:b2: dd:e7:8e:f5:10:9e:c5:86:ff:11:6c:01:e7:ab:e8:66:a3:aa: 2f:99:df:ce:93:a6:e7:c0:fe:65:03:10:62:9a:9f:47:35:c4: 08:2b:3d:9f:f4:0c:e4:ff:08:b9:f3:79:8c:f5:b0:88:27:4b: 8e:8a:4a:41:ac:93:a1:82:fb:6e:70:50:3c:f3:be:c0:44:e3: f2:e3:be:d1:d8:d3:61:87:42:0d:fa:41:f0:92:10:1a:b2:c6: 25:b5:6b:62:72:e0:d5:55:30:4c:56:95:00:be:01:2f:90:88: 4f:e7:e9:71:e5:30:7a:c1:8e:fd:c8:78:61:b2:e4:9e:eb:1b: 32:84:1b:4a:dc:63:ac:68:19:47:df:15:77:a4:d1:f1:85:9d: 0d:b3:4b:0c:02:64:e2:65:45:4f:22:02:23:c0:00:f3:a9:e5: 0a:8b:89:d2:5d:db:c1:13:05:c0:4e:36:ce:b4:30:8d:25:37: d6:1a:2a:fc:62:c4:c7:3b:5a:78:4a:0d:57:70:ee:80:e3:bb: d3:d9:26:27:50:b3:be:49:ec:b4:c5:d6:45:ae:74:76:19:31: 2f:f1:67:2d:7c:22:c1:b0:41:8a:59:b3:03:9b:98:82:ed:d5: e3:c8:d2:d3 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICDx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUwOTAyMTgzNzUzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODdhNS0zZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulAcH+L5J2rgHJZ1Rqyfvs0Z72SKOwluXPMKHU3C5WUc4OaQk5o0Si0m+QWs CM9v2QozQgBeCZaWgnf/e1ppYtiSg9lqLM8qBYrh9JhSn3kwYoiahWIm4cRerZ8J ebwiZ6AfoFLMfY6Ri/VEdV0TGoTXcB5uoXCzn8Cro/lsXGv/fo0bfu/L5VqZbV+f 6RfDAzkDrfVtYsZnqKjWDdyeAmpv4hkzYOeFQUw4KFe15lWbK/zsfkgvxZDC1RiG /MblNjTLXESw3vcOlzVrMUwiVBsrXIQOtcNmSACm0LZljdAx7FDIt8KWfNuHKTNL hhIW8vuFKrWh6re8Wqxw8em2TwIDAQABo4ICmTCCApUwHQYDVR0OBBYEFH6J8cjf uCKOND+0i5QL2VoKDMGyMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvRDE3QTg5NUMw QzVEMTFFQUIxQTI5RDY3QzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzBF BAIAAjA/AwcAJAWEwAAAAwYEJAWEwCADBgAkBYTAnAMHBCQFhMD/MDASAwcEJAWE wP9QAwcEJAWEwP9gAwcAJAWEwP/wMA0GCSqGSIb3DQEBCwUAA4IBAQB2tBsDPe2w NMk03YHjCoV5tbLd5471EJ7Fhv8RbAHnq+hmo6ovmd/Ok6bnwP5lAxBimp9HNcQI Kz2f9Azk/wi583mM9bCIJ0uOikpBrJOhgvtucFA8877AROPy477R2NNhh0IN+kHw khAassYltWticuDVVTBMVpUAvgEvkIhP5+lx5TB6wY79yHhhsuSe6xsyhBtK3GOs aBlH3xV3pNHxhZ0Ns0sMAmTiZUVPIgIjwADzqeUKi4nSXdvBEwXATjbOtDCNJTfW Gir8YsTHO1p4Sg1XcO6A47vT2SYnULO+Sey0xdZFrnR2GTEv8WctfCLBsEGKWbMD m5iC7dXjyNLT -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:50 2026 by rpki-client