$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/B710956ACD7E11EFBBAE2137C4F9AE02.roa File: B710956ACD7E11EFBBAE2137C4F9AE02.roa (raw, json) Hash identifier: xCTb7m70C8ktIRA0Y3XISp4G4lVWQ5RasqzMmTsyIbM= Subject key identifier: 1D:01:33:11:55:2C:58:93:66:C0:F7:A0:A7:10:0D:D4:ED:22:53:B6 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: DC Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/B710956ACD7E11EFBBAE2137C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:14:52 +0000 ROA not before: Wed 31 Dec 2025 05:24:15 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 150339 IP address blocks: 2001:df4:dbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07 Validity Not Before: Dec 31 05:24:15 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a41fac-77a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:71:60:df:41:4d:60:22:b3:be:12:62:ad: b8:dc:d3:6a:ef:b9:a3:69:76:b9:c6:22:08:8f:f3: 73:b9:11:f0:89:d8:a6:a6:9a:fc:41:2d:b9:74:d5: f7:e4:cc:da:58:3f:1d:5f:e6:a5:16:2a:87:8e:82: 2c:06:1e:7d:06:4c:f3:c1:51:a1:d3:f4:a7:3e:4b: 71:c5:e6:ef:0e:fd:c9:d8:f6:53:dc:b3:52:78:5b: e4:19:18:df:fe:3a:eb:69:59:2e:9c:c3:e9:16:70: 24:66:a2:30:85:75:d4:c1:9e:0e:d6:aa:24:a6:00: d5:7e:18:d7:9f:4b:09:6b:67:ad:04:5e:f6:58:05: 2a:5f:12:90:3f:3b:16:fc:3f:b1:f6:07:90:cc:84: 6e:e9:8c:73:a8:f8:f0:49:45:5e:83:7f:65:ec:9b: 05:93:d1:37:ed:93:35:a3:90:16:1d:74:67:83:5f: 4d:ec:08:ed:5c:78:29:aa:4d:b7:a3:92:fd:ab:33: 9a:24:86:71:f0:ee:bc:af:3d:cf:a3:70:38:79:03: f0:48:f5:49:8c:9b:c3:85:d2:e7:dc:76:9f:59:fb: 89:c5:19:0e:1e:b9:d3:76:55:5b:7c:72:fa:ae:09: 53:55:18:6c:88:bf:13:e4:52:f1:81:d3:7b:16:ba: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:01:33:11:55:2C:58:93:66:C0:F7:A0:A7:10:0D:D4:ED:22:53:B6 X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/B710956ACD7E11EFBBAE2137C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:dbc0::/48 Signature Algorithm: sha256WithRSAEncryption 28:d4:3a:bb:15:55:db:b5:ae:95:92:e3:a8:ec:91:e9:e0:ce: 05:16:9b:52:31:3d:d2:b8:21:0b:b1:aa:07:e2:41:cd:06:d7: 55:e6:0a:cb:48:58:18:15:b4:49:c6:74:5f:30:90:ec:c4:30: ea:ea:74:b4:83:2e:c2:7f:d6:26:e2:12:8f:74:d2:8b:bd:12: fd:1f:62:ce:89:f1:f7:fc:e8:5e:0d:34:16:ed:d7:f1:c3:dc: af:83:83:86:ec:c7:da:85:8b:40:32:b0:e5:69:09:71:81:43: 3f:30:45:29:cd:93:03:2e:4c:ec:db:c0:b4:75:29:d9:c2:36: ea:74:b2:f3:1d:a3:64:13:6d:bf:0f:c4:50:59:98:c7:4d:41: 05:b5:a2:52:5b:e8:25:36:99:48:52:d7:b7:4f:37:84:40:b8: 16:c3:87:03:61:82:30:58:70:1c:ed:3d:92:8c:a3:35:f8:e4: 0d:2c:70:1f:88:46:3d:06:39:9d:9d:c0:a8:73:0e:73:1e:57: cf:c2:58:a9:8d:6a:84:44:d7:a2:ba:8c:73:76:1f:d5:c5:b1: 1e:de:41:e6:73:ad:9d:68:72:8b:bc:2c:9c:9f:03:8d:81:40: 28:e5:7c:2d:13:40:4c:1e:08:a5:bc:e8:3e:96:5a:69:ab:b4: f1:0c:bc:f4 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKDg1MjA0NjkxNTE4NUY4NTVFMDlFQjM0NDc4ODEzOTQz MEU3NDBGMDcwHhcNMjUxMjMxMDUyNDE1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWZhYy03N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyORxYN9BTWAis74SYq243NNq77mjaXa5xiIIj/NzuRHwidimppr8QS25dNX3 5MzaWD8dX+alFiqHjoIsBh59BkzzwVGh0/SnPktxxebvDv3J2PZT3LNSeFvkGRjf /jrraVkunMPpFnAkZqIwhXXUwZ4O1qokpgDVfhjXn0sJa2etBF72WAUqXxKQPzsW /D+x9geQzIRu6YxzqPjwSUVeg39l7JsFk9E37ZM1o5AWHXRng19N7AjtXHgpqk23 o5L9qzOaJIZx8O68rz3Po3A4eQPwSPVJjJvDhdLn3HafWfuJxRkOHrnTdlVbfHL6 rglTVRhsiL8T5FLxgdN7FrrfIQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFB0BMxFV LFiTZsD3oKcQDdTtIlO2MB8GA1UdIwQYMBaAFIUgRpFRhfhV4J6zRHiBOUMOdA8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9FNjM1Rjc5NkNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1GWGduck5FZUlFNVF3NTBE d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFDNEIvRTYzNUY3OTZDRDdEMTFFRkFBMDcyMzBBQzRGOUFFMDIvQjcxMDk1NkFD RDdFMTFFRkJCQUUyMTM3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9NvAMA0GCSqGSIb3DQEBCwUAA4IBAQAo1Dq7FVXbta6VkuOo 7JHp4M4FFptSMT3SuCELsaoH4kHNBtdV5grLSFgYFbRJxnRfMJDsxDDq6nS0gy7C f9Ym4hKPdNKLvRL9H2LOifH3/OheDTQW7dfxw9yvg4OG7MfahYtAMrDlaQlxgUM/ MEUpzZMDLkzs28C0dSnZwjbqdLLzHaNkE22/D8RQWZjHTUEFtaJSW+glNplIUte3 TzeEQLgWw4cDYYIwWHAc7T2SjKM1+OQNLHAfiEY9BjmdncCocw5zHlfPwlipjWqE RNeiuoxzdh/VxbEe3kHmc62daHKLvCycnwONgUAo5XwtE0BMHgilvOg+llppq7Tx DLz0 -----END CERTIFICATE-----Generated at Mon Mar 2 09:20:34 2026 by rpki-client