$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/F0F0DEC2C43411F0836DBC7DC4F9AE02.roa File: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (raw, json) Hash identifier: LMzi/nUop3Zg3Ri+ttMW1AIJQZt36oNcqeMlHwO8Bco= Subject key identifier: 45:04:14:1E:2D:A1:DC:4C:3B:CC:64:B6:21:A9:83:41:56:24:E3:84 Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Certificate serial: 1000 Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/F0F0DEC2C43411F0836DBC7DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:15:24 +0000 ROA not before: Tue 02 Dec 2025 17:17:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149855 IP address blocks: 2403:8e80:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4096 (0x1000) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Validity Not Before: Dec 2 17:17:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4823c-fa6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:fc:d3:76:76:ff:5d:f2:4a:03:07:59:a4: 00:3b:36:c7:40:d1:21:35:ba:18:d0:7a:a8:78:91: 8f:4f:02:35:f5:87:95:5a:0f:c5:f7:47:ae:a8:a7: 26:fc:d7:27:d3:cf:e1:cc:2c:39:49:50:70:40:bc: ac:7e:0c:67:c9:1b:da:02:90:61:16:dc:4d:b7:d2: 20:ea:e4:2d:ad:7e:ba:c2:3c:8c:81:19:3e:28:15: 27:77:19:98:88:55:ed:2f:5a:41:1a:7b:e0:2f:fc: 4e:f9:45:e8:4e:00:99:5f:6c:56:31:bc:53:77:03: 24:36:5a:6c:63:4f:51:f9:b4:2f:67:46:0f:6f:2c: cc:27:b0:78:b6:88:c6:ed:cc:ef:81:41:ef:f3:23: 92:07:00:20:af:0d:2c:ed:d7:47:54:b7:2f:f5:ed: 31:08:96:e6:cc:49:23:5e:39:9f:da:b0:8d:f1:1f: 99:aa:21:8c:37:87:46:7f:0b:60:6f:b0:46:09:aa: 80:04:68:6d:37:3c:5e:c7:9d:b4:09:b0:5b:44:10: a0:6f:37:03:2f:2b:87:e7:87:ba:03:f6:9f:e2:6e: 69:3b:fb:ba:34:a1:ed:aa:46:cc:bc:12:86:4c:2b: da:7f:fd:d6:dd:36:77:06:0e:4e:f3:e5:c3:6b:8b: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:04:14:1E:2D:A1:DC:4C:3B:CC:64:B6:21:A9:83:41:56:24:E3:84 X509v3 Authority Key Identifier: keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/F0F0DEC2C43411F0836DBC7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2403:8e80:e000::/48 Signature Algorithm: sha256WithRSAEncryption 44:70:3b:b3:90:7f:a9:c9:36:0a:35:49:01:a6:13:25:6d:0c: a0:d7:89:15:5d:3d:dd:c1:18:d2:33:26:4c:ec:85:91:49:c6: b4:ce:85:d9:21:0c:53:88:6b:ee:ec:09:1e:59:25:7a:80:87: 3b:f8:18:b3:b1:17:aa:25:2f:80:f9:d8:ad:e4:e4:b8:02:c9: 62:72:cd:e8:a6:2b:ca:a8:a2:b3:37:f8:a9:a6:aa:24:ec:72: dc:bb:e9:fe:05:eb:07:42:02:77:88:f4:be:85:d0:4a:7f:c6: b9:3c:06:2d:e8:82:68:e5:88:dd:fe:3e:8a:0c:b3:19:ae:fc: 76:73:71:be:f4:d7:2d:d8:4f:95:6d:4c:ca:da:69:39:59:59: 01:71:df:fb:c9:86:97:fb:41:92:13:88:45:dd:bf:a3:98:25: e9:97:ad:9e:d5:28:51:2e:71:74:05:24:2e:63:c8:67:c0:36: 57:09:c9:c6:64:35:8e:d5:6d:5d:b7:8d:bc:d4:d4:e0:af:d4: 90:46:03:b1:d9:8e:10:b9:0b:c8:7c:79:69:50:2f:59:04:99: 02:54:8d:4b:37:26:2e:62:c8:7e:a5:61:4a:8e:3f:2a:46:c2: 6c:4e:70:02:5f:4e:49:5f:54:7d:ed:fa:0b:31:fa:ec:cc:28: 2d:79:cb:1b -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQwM0UzNDZDMDBD RjNGMDQ5M0UwHhcNMjUxMjAyMTcxNzU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODIzYy1mYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKj803Z2/13ySgMHWaQAOzbHQNEhNboY0HqoeJGPTwI19YeVWg/F90euqKcm /Ncn08/hzCw5SVBwQLysfgxnyRvaApBhFtxNt9Ig6uQtrX66wjyMgRk+KBUndxmY iFXtL1pBGnvgL/xO+UXoTgCZX2xWMbxTdwMkNlpsY09R+bQvZ0YPbyzMJ7B4tojG 7czvgUHv8yOSBwAgrw0s7ddHVLcv9e0xCJbmzEkjXjmf2rCN8R+ZqiGMN4dGfwtg b7BGCaqABGhtNzxex520CbBbRBCgbzcDLyuH54e6A/af4m5pO/u6NKHtqkbMvBKG TCvaf/3W3TZ3Bg5O8+XDa4ueFQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFEUEFB4t odxMO8xktiGpg0FWJOOEMB8GA1UdIwQYMBaAFNivN3EtVrG2k+9tA+NGwAzz8Ek+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC9GQTc4QjA0NDZG Q0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3NiYVQ3MjBENDBiQURQUHdT VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLODNjUzFXc2JhVDcyMEQ0MGJBRFBQd1NUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg2RDAvRkE3OEIwNDQ2RkNFMTFFOTg4QzQ0QjNFQzRGOUFFMDIvRjBGMERFQzJD NDM0MTFGMDgzNkRCQzdEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOOgOAAMA0GCSqGSIb3DQEBCwUAA4IBAQBEcDuzkH+pyTYKNUkB phMlbQyg14kVXT3dwRjSMyZM7IWRSca0zoXZIQxTiGvu7AkeWSV6gIc7+BizsReq JS+A+dit5OS4Aslics3opivKqKKzN/ippqok7HLcu+n+BesHQgJ3iPS+hdBKf8a5 PAYt6IJo5Yjd/j6KDLMZrvx2c3G+9Nct2E+VbUzK2mk5WVkBcd/7yYaX+0GSE4hF 3b+jmCXpl62e1ShRLnF0BSQuY8hnwDZXCcnGZDWO1W1dt4281NTgr9SQRgOx2Y4Q uQvIfHlpUC9ZBJkCVI1LNyYuYsh+pWFKjj8qRsJsTnACX05JX1R97foLMfrszCgt ecsb -----END CERTIFICATE-----Generated at Mon Mar 2 05:37:32 2026 by rpki-client