$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/8DDA6872D25311EF8EBE2767C4F9AE02.roa File: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (raw, json) Hash identifier: aMh3gHoepLpqOKWWhGXWigpmXGXNEzE7D6VuL1CBkbc= Subject key identifier: 5C:2F:0C:A2:6B:F3:8F:A4:AB:04:57:61:E9:39:74:52:BB:91:6C:BB Certificate issuer: /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20 Certificate serial: D8 Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/8DDA6872D25311EF8EBE2767C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:57:19 +0000 ROA not before: Mon 19 May 2025 06:34:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134351 IP address blocks: 2001:df3:2680::/48 maxlen: 48 2401:d560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20 Validity Not Before: May 19 06:34:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3e34f-a537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1e:a9:da:21:4a:21:c1:eb:32:21:7f:4f:ba: 7e:a0:95:f2:c9:05:be:fd:af:dd:6e:db:18:fc:21: 2e:5a:5d:2f:b0:3b:18:1e:e7:ed:4c:f4:d3:78:f6: 03:5f:cc:69:c8:3c:bd:46:73:13:86:27:e5:07:46: 10:e5:14:b0:a3:10:c3:74:9f:46:60:3b:ed:b1:50: eb:47:ac:51:e5:d3:e3:0e:6a:fc:ed:15:e7:1e:ed: f8:bd:db:53:b1:25:94:7c:94:d7:dd:a9:53:59:a4: 42:af:4a:63:10:51:c7:c9:a1:d2:ca:3e:99:91:51: f0:b2:7c:4d:c5:45:80:64:40:c1:d4:4b:9f:9d:6f: c0:e1:69:96:0e:fd:e8:83:b5:84:60:8e:d2:7a:01: e7:54:0e:36:19:15:cd:66:bd:d2:68:dd:7d:5e:de: 2c:42:2b:a8:79:68:de:73:57:fa:f7:37:7e:a8:fb: 2d:a9:93:0b:55:09:38:bc:4b:e3:e4:93:b4:81:9f: 3c:99:4b:28:2f:e0:5e:b0:ed:50:d7:61:9b:4a:fc: 7e:3e:cc:49:ee:ec:cf:cd:75:7d:eb:57:60:33:3e: 79:0f:76:de:49:0b:ac:22:bf:1a:0a:45:73:7f:cd: 6e:d3:89:8f:6f:76:f5:3e:78:0e:af:d4:83:01:77: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2F:0C:A2:6B:F3:8F:A4:AB:04:57:61:E9:39:74:52:BB:91:6C:BB X509v3 Authority Key Identifier: keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/8DDA6872D25311EF8EBE2767C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:2680::/48 2401:d560::/32 Signature Algorithm: sha256WithRSAEncryption b5:8d:73:94:22:83:7a:9a:f1:95:44:17:35:b6:83:21:11:3a: a0:5d:6a:6a:bd:cd:98:ca:b0:ee:b0:62:34:71:ab:e2:36:47: 57:58:04:32:82:43:f9:45:3b:94:1d:9e:a3:93:d4:a7:2b:20: 67:07:fb:5b:64:26:43:e0:1c:00:29:da:de:71:80:6f:32:0d: ff:9c:4f:c2:db:dc:94:7e:5e:de:cc:5e:2e:d5:96:da:03:34: f9:ad:9b:b0:f0:f6:1d:80:a5:23:b5:7c:09:88:23:91:61:9b: c7:6e:67:f5:61:1d:2a:54:d1:20:ca:89:4d:c7:bc:d7:5e:61: 57:54:88:4b:25:50:ff:9c:88:0b:00:ff:a7:d8:15:e0:78:36: b5:6f:49:5a:12:59:47:10:06:02:00:73:79:c0:b6:9c:2a:d6: 0a:62:a4:23:89:e7:5b:d4:e0:1e:ae:eb:0e:0b:a2:3a:c3:ec: b7:42:63:9c:c5:d5:54:5b:ef:db:07:4f:91:1c:9b:25:a5:16: d3:bf:7d:a5:41:7c:86:8d:90:5c:ed:0f:2f:db:21:8c:37:de: 87:ad:cb:43:a2:ca:b7:32:5f:70:a3:5b:82:dd:ab:ad:25:94: 77:08:3b:40:80:0e:2a:9c:75:09:3a:9a:89:45:e1:92:4a:22: cf:7b:67:90 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkwODMxMTAvBgNVBAUTKDY5NEY1NjFCNjNEQTdDQzU3NzkzMTYzNkQ0Nzg4QUQy QjBCNEFFMjAwHhcNMjUwNTE5MDYzNDE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTM0Zi1hNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6B6p2iFKIcHrMiF/T7p+oJXyyQW+/a/dbtsY/CEuWl0vsDsYHuftTPTTePYD X8xpyDy9RnMThiflB0YQ5RSwoxDDdJ9GYDvtsVDrR6xR5dPjDmr87RXnHu34vdtT sSWUfJTX3alTWaRCr0pjEFHHyaHSyj6ZkVHwsnxNxUWAZEDB1EufnW/A4WmWDv3o g7WEYI7SegHnVA42GRXNZr3SaN19Xt4sQiuoeWjec1f69zd+qPstqZMLVQk4vEvj 5JO0gZ88mUsoL+BesO1Q12GbSvx+PsxJ7uzPzXV961dgMz55D3beSQusIr8aCkVz f81u04mPb3b1PngOr9SDAXccMQIDAQABo4ICajCCAmYwHQYDVR0OBBYEFFwvDKJr 84+kqwRXYek5dFK7kWy7MB8GA1UdIwQYMBaAFGlPVhtj2nzFd5MWNtR4itKwtK4g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTA4My9DODZDRDgwNkQx QjAxMUVGODgzM0M5MzNDNEY5QUUwMi9hVTlXRzJQYWZNVjNreFkyMUhpSzByQzBy aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVOVdHMlBhZk1WM2t4WTIxSGlLMHJDMHJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTkwODMvQzg2Q0Q4MDZEMUIwMTFFRjg4MzNDOTMzQzRGOUFFMDIvOEREQTY4NzJE MjUzMTFFRjhFQkUyNzY3QzRGOUFFMDIucm9hMCkGCCsGAQUFBwEHAQH/BBowGDAW BAIAAjAQAwcAIAEN8yaAAwUAJAHVYDANBgkqhkiG9w0BAQsFAAOCAQEAtY1zlCKD eprxlUQXNbaDIRE6oF1qar3NmMqw7rBiNHGr4jZHV1gEMoJD+UU7lB2eo5PUpysg Zwf7W2QmQ+AcACna3nGAbzIN/5xPwtvclH5e3sxeLtWW2gM0+a2bsPD2HYClI7V8 CYgjkWGbx25n9WEdKlTRIMqJTce8115hV1SISyVQ/5yICwD/p9gV4Hg2tW9JWhJZ RxAGAgBzecC2nCrWCmKkI4nnW9TgHq7rDguiOsPst0JjnMXVVFvv2wdPkRybJaUW 0799pUF8ho2QXO0PL9shjDfeh63LQ6LKtzJfcKNbgt2rrSWUdwg7QIAOKpx1CTqa iUXhkkoiz3tnkA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:24 2026 by rpki-client