$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/253978EAE0FC11F0B50D6A7D5F6F56BC.roa File: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (raw, json) Hash identifier: 6RxldyO2/Y3wToEhzB/mHNRPtNgIGcUmqFl9NgQBrdA= Subject key identifier: B2:39:AC:5D:71:5D:BF:60:02:02:86:9F:73:A1:32:61:17:1B:C2:F5 Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Certificate serial: 31 Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/253978EAE0FC11F0B50D6A7D5F6F56BC.roa Signing time: Sun 01 Mar 2026 05:56:06 +0000 ROA not before: Sat 03 Jan 2026 06:29:10 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 199073 IP address blocks: 2402:4220::/40 maxlen: 48 2402:4220:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Validity Not Before: Jan 3 06:29:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d4f5-1502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:68:83:fa:86:40:3c:e3:14:2d:bf:90:cb: ed:ae:ec:e3:40:95:f3:fd:6e:52:97:e7:36:1c:58: 45:5a:52:02:69:a5:ab:58:63:21:27:c8:27:db:ca: e0:f8:46:d5:10:94:f2:d2:1b:4a:12:59:ac:e5:18: 81:c1:25:dc:c7:3c:b6:90:8f:80:00:48:5c:0a:c3: c9:3d:93:7d:38:41:8e:99:da:f8:64:55:f4:07:cd: c3:36:b4:e6:c8:53:e7:fe:2b:ed:41:92:4e:0f:bb: b7:0b:a0:da:24:2a:bd:12:cf:2d:aa:d7:da:b7:a4: 15:bc:d5:81:78:e0:e5:ac:5c:12:ce:d7:ee:c8:bb: b4:d1:55:f7:63:e2:93:b9:8e:5d:ab:35:88:39:bc: 31:04:5b:36:eb:e8:30:2d:67:f4:35:60:11:1b:63: 0e:0c:76:69:a7:2e:f9:4e:d5:8c:db:19:86:f4:1e: 80:19:11:7d:33:ee:ea:a0:ed:74:af:37:4d:7c:52: eb:0f:f6:72:78:62:73:8a:0f:c6:0f:31:62:11:c6: 90:58:d7:e0:65:32:30:54:1b:71:fd:6a:60:fc:fb: 27:ac:0b:99:01:24:75:76:c2:24:71:22:c2:41:5b: b0:6c:ac:ee:68:e5:ab:b7:ee:ca:c7:e9:38:5a:6c: 6f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:39:AC:5D:71:5D:BF:60:02:02:86:9F:73:A1:32:61:17:1B:C2:F5 X509v3 Authority Key Identifier: keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/253978EAE0FC11F0B50D6A7D5F6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2402:4220::/39 Signature Algorithm: sha256WithRSAEncryption c0:4d:65:08:f5:01:2f:8d:ab:3a:04:39:15:16:8b:9b:55:ba: db:41:49:b3:0e:44:83:7b:cd:89:8d:53:70:85:41:c1:5e:26: 8b:b5:73:b1:13:13:29:49:59:a5:0b:f4:af:ed:35:e6:d8:7b: 70:77:a6:7f:78:23:e2:e6:3a:9e:48:18:4c:63:78:00:2f:7c: ed:e1:f9:b1:a0:3a:e2:56:39:d5:70:9f:ee:26:07:49:1d:b4: e6:20:b5:c9:00:23:a7:5e:40:7c:7f:17:b0:2d:29:94:b9:d0: 6e:19:50:8f:99:ce:00:3a:66:59:94:ce:a8:33:13:ef:94:d7: 5d:e0:90:f2:26:45:19:97:bf:14:1c:31:ff:76:8e:2c:a1:81: fa:48:a8:38:d0:65:81:9d:d9:41:7e:e6:1d:f3:33:33:87:76: 30:86:d0:9a:9c:63:8d:03:7d:f9:2f:3d:1f:f1:08:7b:4b:0c: 7c:99:d9:7d:6d:2a:c5:fe:13:14:6f:4b:92:f8:7f:00:83:16: 75:c0:72:cd:ca:ed:cc:cc:98:04:a6:48:d4:c6:22:1c:01:0e: 76:65:e1:f5:1a:85:47:df:16:90:f9:d2:fe:33:31:42:0b:5b: 31:e2:e0:d8:37:bd:39:0b:12:56:bc:61:53:d5:52:af:ca:19: 40:1c:db:23 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoNUQzMEVFQkYxMUU0MTc4RDYyM0JFMUJERTREQkI0Q0I1 OUNDODQzNzAeFw0yNjAxMDMwNjI5MTBaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNGY1LTE1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1FGiD+oZAPOMULb+Qy+2u7ONAlfP9blKX5zYcWEVaUgJppatYYyEnyCfbyuD4 RtUQlPLSG0oSWazlGIHBJdzHPLaQj4AASFwKw8k9k304QY6Z2vhkVfQHzcM2tObI U+f+K+1Bkk4Pu7cLoNokKr0Szy2q19q3pBW81YF44OWsXBLO1+7Iu7TRVfdj4pO5 jl2rNYg5vDEEWzbr6DAtZ/Q1YBEbYw4MdmmnLvlO1YzbGYb0HoAZEX0z7uqg7XSv N018UusP9nJ4YnOKD8YPMWIRxpBY1+BlMjBUG3H9amD8+yesC5kBJHV2wiRxIsJB W7BsrO5o5au37srH6ThabG+vAgMBAAGjggJiMIICXjAdBgNVHQ4EFgQUsjmsXXFd v2ACAoafc6EyYRcbwvUwHwYDVR0jBBgwFoAUXTDuvxHkF41iO+G95Nu0y1nMhDcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzBGOTEwNzU0RENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQxaU8tRzk1TnUweTFuTWhE Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWFREdXZ4SGtGNDFpTy1HOTVOdTB5MW5NaERjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFDMi8wRjkxMDc1NERDQTMxMUYwODVENkYxNUI0MzZGNTZCQy8yNTM5NzhFQUUw RkMxMUYwQjUwRDZBN0Q1RjZGNTZCQy5yb2EwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgEkAkIgADANBgkqhkiG9w0BAQsFAAOCAQEAwE1lCPUBL42rOgQ5FRaL m1W620FJsw5Eg3vNiY1TcIVBwV4mi7VzsRMTKUlZpQv0r+015th7cHemf3gj4uY6 nkgYTGN4AC987eH5saA64lY51XCf7iYHSR205iC1yQAjp15AfH8XsC0plLnQbhlQ j5nOADpmWZTOqDMT75TXXeCQ8iZFGZe/FBwx/3aOLKGB+kioONBlgZ3ZQX7mHfMz M4d2MIbQmpxjjQN9+S89H/EIe0sMfJnZfW0qxf4TFG9Lkvh/AIMWdcByzcrtzMyY BKZI1MYiHAEOdmXh9RqFR98WkPnS/jMxQgtbMeLg2De9OQsSVrxhU9VSr8oZQBzb Iw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:53:30 2026 by rpki-client