$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/BAFD2318E01B11F088B1D0FE636F56BC.roa File: BAFD2318E01B11F088B1D0FE636F56BC.roa (raw, json) Hash identifier: nFIjLEFtVNOTTMiweqb0gcEFYFfR+U3yovX2UqgW1o4= Subject key identifier: FF:F3:69:23:6D:16:7C:C8:EA:26:48:34:AC:62:58:84:79:7A:B4:3D Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 0175 Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/BAFD2318E01B11F088B1D0FE636F56BC.roa Signing time: Sun 01 Mar 2026 16:53:52 +0000 ROA not before: Tue 23 Dec 2025 16:23:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152689 IP address blocks: 2001:df3:aa40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Dec 23 16:23:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a46f20-d593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:4e:77:19:18:89:c2:be:ba:de:81:0c:62: ed:19:3f:da:ab:9f:ee:52:17:86:5a:7b:36:2a:0b: 1c:4c:4b:c7:eb:e2:2e:55:91:8e:b4:d9:09:65:72: a7:dd:94:9c:6f:f6:97:30:05:f0:f4:8d:ee:60:a6: e3:9a:ed:d2:53:29:2b:af:4c:52:b7:0b:f0:2b:d7: ce:d9:48:94:31:be:56:4e:23:4d:bc:fc:04:0f:b1: 40:e5:27:34:91:82:50:22:f6:99:93:2a:21:50:c5: 9c:96:73:04:b2:81:34:79:98:22:97:54:0e:09:c8: b2:7f:b2:6a:41:ae:92:b0:98:ff:ec:5e:c7:1f:4b: 66:75:cc:62:71:3d:54:6e:0a:4e:8f:bb:57:85:f6: 53:95:8e:53:dc:6f:d8:90:19:80:fe:33:78:48:99: 5d:90:5c:f3:05:d0:e6:eb:7e:dc:98:a1:09:2e:dc: b9:7f:80:41:0d:d1:11:61:71:f0:65:6f:19:4b:80: 16:a4:8d:61:4b:f5:88:ff:49:da:43:77:f1:2c:b1: 94:b9:78:15:b3:74:cb:82:36:ea:38:cc:0b:53:e8: 6f:cd:bc:0c:f2:fc:50:10:e7:39:44:1f:df:2a:22: 40:a6:8e:af:6c:0a:62:2b:57:f8:dc:b4:45:9e:78: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F3:69:23:6D:16:7C:C8:EA:26:48:34:AC:62:58:84:79:7A:B4:3D X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/BAFD2318E01B11F088B1D0FE636F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:aa40::/48 Signature Algorithm: sha256WithRSAEncryption 3a:85:f7:df:1c:53:01:9d:df:1f:6a:79:a4:b4:88:a5:26:88: 23:d7:23:a2:55:b5:f2:63:06:86:9e:f0:d7:f0:69:b8:94:11: ff:01:a1:c5:d3:35:45:16:54:6d:b9:65:7e:11:6e:40:2a:42: 69:f6:6c:7f:da:7b:fb:25:dc:8d:9b:89:6b:b3:a8:fa:30:1e: 93:06:b5:e7:b1:6a:8c:35:78:ca:82:e1:ed:dc:53:5f:92:c8: e3:ca:70:92:8f:c3:d4:4d:da:1c:77:42:e9:78:c2:a3:b9:d1: ea:d4:e1:db:05:10:6c:af:ed:c1:53:13:ed:ae:53:01:d9:01: ee:b1:62:af:ff:92:90:9e:81:0b:fa:f1:96:cb:a3:76:10:82: 3f:9c:9b:13:ea:5a:3c:f2:9e:16:c6:d3:25:0f:13:74:60:a6: 81:f7:05:30:4e:95:95:01:19:53:de:ff:33:a5:3d:5f:87:6c: a7:f7:1d:af:53:c1:fe:66:7b:58:32:6f:01:c0:2d:67:9e:89: bc:3d:ac:26:29:5e:46:fa:7c:60:54:f6:06:86:95:f9:e6:0a: 61:79:6b:7b:88:27:68:2c:ea:22:c7:5a:6a:d4:44:69:37:9c: 21:22:8f:d6:68:99:8d:7c:cf:33:f9:59:18:0c:85:fc:a6:dc: 59:08:46:0f -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjUxMjIzMTYyMzM1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmYyMC1kNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ulOdxkYicK+ut6BDGLtGT/aq5/uUheGWns2KgscTEvH6+IuVZGOtNkJZXKn 3ZScb/aXMAXw9I3uYKbjmu3SUykrr0xStwvwK9fO2UiUMb5WTiNNvPwED7FA5Sc0 kYJQIvaZkyohUMWclnMEsoE0eZgil1QOCciyf7JqQa6SsJj/7F7HH0tmdcxicT1U bgpOj7tXhfZTlY5T3G/YkBmA/jN4SJldkFzzBdDm637cmKEJLty5f4BBDdERYXHw ZW8ZS4AWpI1hS/WI/0naQ3fxLLGUuXgVs3TLgjbqOMwLU+hvzbwM8vxQEOc5RB/f KiJApo6vbApiK1f43LRFnnhL5QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFP/zaSNt FnzI6iZINKxiWIR5erQ9MB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgyMkYvNTg0MkQzMDRGN0YwMTFFRTk4QzhDOTJCQzRGOUFFMDIvQkFGRDIzMThF MDFCMTFGMDg4QjFEMEZFNjM2RjU2QkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN86pAMA0GCSqGSIb3DQEBCwUAA4IBAQA6hfffHFMBnd8fanmk tIilJogj1yOiVbXyYwaGnvDX8Gm4lBH/AaHF0zVFFlRtuWV+EW5AKkJp9mx/2nv7 JdyNm4lrs6j6MB6TBrXnsWqMNXjKguHt3FNfksjjynCSj8PUTdocd0LpeMKjudHq 1OHbBRBsr+3BUxPtrlMB2QHusWKv/5KQnoEL+vGWy6N2EII/nJsT6lo88p4WxtMl DxN0YKaB9wUwTpWVARlT3v8zpT1fh2yn9x2vU8H+ZntYMm8BwC1nnom8PawmKV5G +nxgVPYGhpX55gpheWt7iCdoLOoix1pq1ERpN5whIo/WaJmNfM8z+VkYDIX8ptxZ CEYP -----END CERTIFICATE-----Generated at Mon Mar 2 05:10:25 2026 by rpki-client