$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8AAF803A1C8A11EABAA73A62C4F9AE02.roa File: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (raw, json) Hash identifier: OyMpzW+KeT1/VlF8h4v55nU9WTVj14mDgJ/Hy/mEDTE= Subject key identifier: 8E:1C:BB:5F:0F:14:70:47:25:C5:36:08:09:CE:7E:1D:75:54:E9:82 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0C65 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8AAF803A1C8A11EABAA73A62C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:55:34 +0000 ROA not before: Thu 28 Aug 2025 19:10:14 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131270 IP address blocks: 2403:4e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Aug 28 19:10:14 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44555-b3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:65:31:9b:ed:02:8c:86:65:2b:14:69:64: ea:6f:5e:d2:94:3e:1c:b5:c9:55:60:92:0b:73:1a: 9a:c2:05:dc:74:e7:1d:41:ee:82:a7:f5:a9:f7:e1: 46:36:3b:e4:47:e1:fe:46:11:f8:21:3a:9b:f3:59: ae:3c:c6:42:36:24:27:6e:62:78:cb:85:08:ab:9a: d5:cc:ea:64:58:77:db:cc:3b:4c:84:bd:ef:e1:75: bc:0b:3e:4e:d6:24:cf:7d:60:54:91:03:f0:a0:d3: 1e:7b:0e:ca:85:b7:c3:c1:70:a9:1c:2e:a2:ff:1a: 59:3f:d4:3e:70:75:12:ac:95:51:94:7b:c3:18:d5: 95:d5:e4:38:2b:1d:cc:9e:b5:73:db:6e:6a:3c:71: 2a:37:54:a9:86:b3:07:23:56:35:69:f1:0e:5b:df: 3f:ba:70:da:f5:e5:d9:08:f5:98:3c:d9:19:be:75: d0:1d:90:89:df:c1:00:14:a0:ae:10:86:0f:c7:c7: 2d:95:a0:a7:45:d6:53:53:e7:47:cb:14:93:1c:4c: 06:77:95:c4:45:42:0a:0b:20:a6:05:d1:45:b8:00: 0e:ca:b4:d9:37:50:1c:0f:55:5c:5d:34:06:27:d0: 00:5e:09:96:b3:15:65:a5:de:e3:ce:0e:2a:d5:65: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:BB:5F:0F:14:70:47:25:C5:36:08:09:CE:7E:1D:75:54:E9:82 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8AAF803A1C8A11EABAA73A62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2403:4e80::/32 Signature Algorithm: sha256WithRSAEncryption 31:6f:4a:eb:c6:cb:ca:66:cd:51:d4:c0:6b:e8:02:68:57:52: 8b:aa:f2:ec:f0:18:9f:d0:47:d5:eb:21:f2:ff:68:f7:9a:ff: fa:66:5a:6f:ff:0e:50:ab:f5:e3:ed:16:de:64:1a:11:7d:a4: 64:5e:fd:ef:32:f9:43:42:da:a2:4b:70:1e:d7:41:06:ca:c4: e0:7c:7a:69:63:bc:d8:dc:c9:86:2f:6b:26:68:c8:05:41:64: bb:da:a5:b7:5a:ff:09:85:87:25:3f:80:86:1b:e0:04:5a:1f: ac:92:1a:9b:0d:1a:1c:25:33:ae:92:1d:23:48:6f:33:43:23: 72:a3:42:7e:4c:d6:96:39:3c:9a:09:4a:72:86:64:09:fc:98: 6d:d7:1e:90:45:80:45:f9:b0:71:00:15:86:c4:25:85:71:f4: 9e:76:a9:f6:db:6f:fb:ac:61:47:68:a8:35:85:08:9d:a4:06: 5c:c5:7e:2f:29:20:7c:f5:bf:9f:28:85:c9:18:8d:dd:8b:a3: d8:7d:c4:2a:34:f0:2b:88:99:f3:f1:a0:86:32:1e:00:92:8d: ec:71:20:2a:d2:c0:69:47:01:63:4f:a4:5f:9d:7f:f2:af:5c: 82:ef:a2:18:6d:6e:48:2b:a6:a9:7f:ad:c7:6a:00:ac:55:d0: a2:53:a2:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUwODI4MTkxMDE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDU1NS1iM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT1lMZvtAoyGZSsUaWTqb17SlD4ctclVYJILcxqawgXcdOcdQe6Cp/Wp9+FG NjvkR+H+RhH4ITqb81muPMZCNiQnbmJ4y4UIq5rVzOpkWHfbzDtMhL3v4XW8Cz5O 1iTPfWBUkQPwoNMeew7KhbfDwXCpHC6i/xpZP9Q+cHUSrJVRlHvDGNWV1eQ4Kx3M nrVz225qPHEqN1SphrMHI1Y1afEOW98/unDa9eXZCPWYPNkZvnXQHZCJ38EAFKCu EIYPx8ctlaCnRdZTU+dHyxSTHEwGd5XERUIKCyCmBdFFuAAOyrTZN1AcD1VcXTQG J9AAXgmWsxVlpd7jzg4q1WUtBwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFI4cu18P FHBHJcU2CAnOfh11VOmCMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg2NUYvQkY5NjZFNEExQzg5MTFFQUE5Qjk1NzYxQzRGOUFFMDIvOEFBRjgwM0Ex QzhBMTFFQUJBQTczQTYyQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJANOgDANBgkqhkiG9w0BAQsFAAOCAQEAMW9K68bLymbNUdTAa+gC aFdSi6ry7PAYn9BH1esh8v9o95r/+mZab/8OUKv14+0W3mQaEX2kZF797zL5Q0La oktwHtdBBsrE4Hx6aWO82NzJhi9rJmjIBUFku9qlt1r/CYWHJT+AhhvgBFofrJIa mw0aHCUzrpIdI0hvM0MjcqNCfkzWljk8mglKcoZkCfyYbdcekEWARfmwcQAVhsQl hXH0nnap9ttv+6xhR2ioNYUInaQGXMV+LykgfPW/nyiFyRiN3Yuj2H3EKjTwK4iZ 8/GghjIeAJKN7HEgKtLAaUcBY0+kX51/8q9cgu+iGG1uSCumqX+tx2oArFXQolOi mg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:34 2026 by rpki-client