$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/920A3E000E0611F1A3BA1443083D8C67.roa File: 920A3E000E0611F1A3BA1443083D8C67.roa (raw, json) Hash identifier: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y= Subject key identifier: 4B:66:0C:95:A3:1A:B8:8D:2E:42:4F:B7:F5:70:AA:56:A1:E9:5D:81 Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Certificate serial: 0D Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/920A3E000E0611F1A3BA1443083D8C67.roa Signing time: Sun 01 Mar 2026 05:35:19 +0000 ROA not before: Fri 20 Feb 2026 02:48:01 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154492 IP address blocks: 2001:df6:b440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Validity Not Before: Feb 20 02:48:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d017-7be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:f3:05:97:e9:87:e9:97:9b:82:15:d0:08: de:f7:72:34:de:f8:73:0d:c7:5c:fa:73:d1:16:38: 21:ab:9e:2a:37:71:2f:1c:f1:86:6f:85:31:5e:54: 58:7d:85:22:b1:e4:3f:fd:6f:17:ca:a0:d3:8d:68: 23:ba:94:9f:6f:96:70:8d:93:b0:48:bf:2b:1c:bf: 4e:6a:c5:d8:c8:d5:8b:d8:92:dc:d3:d5:d8:b0:de: fc:fd:9e:1f:be:71:23:a8:94:84:e0:b3:4a:e7:2b: 86:08:b7:0b:75:5a:4b:fc:ca:58:e0:02:ac:44:86: d1:ce:95:35:69:4f:c4:a1:f2:3e:32:d7:d3:6c:4c: 68:81:6b:80:30:84:5e:1d:d5:d3:64:a9:35:c8:03: ad:2b:c2:3c:6f:a3:48:e3:69:ef:7f:fe:ff:6a:ea: 63:e6:b1:40:6b:51:54:81:e3:da:41:b8:66:4b:2d: fd:55:43:72:36:b6:74:c7:c8:84:50:51:18:bb:5e: d3:23:1b:ab:59:27:db:a5:d3:29:cb:fc:2b:2f:95: b2:13:3f:ae:9c:ad:e7:d9:d8:f2:e9:b1:23:cb:f8: 92:5f:0a:57:8b:ef:47:b4:cd:ed:a1:4a:43:b8:3a: 7e:9b:f9:ea:79:1b:41:c7:f4:0e:51:91:50:12:a2: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:66:0C:95:A3:1A:B8:8D:2E:42:4F:B7:F5:70:AA:56:A1:E9:5D:81 X509v3 Authority Key Identifier: keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/920A3E000E0611F1A3BA1443083D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:b440::/48 Signature Algorithm: sha256WithRSAEncryption 9b:91:b9:7c:15:ec:26:b0:af:94:f2:f3:cd:d7:35:44:6d:2c: 43:af:43:47:0f:f3:cc:3d:b7:cf:b3:e5:80:d7:30:a1:3d:3f: b5:80:d9:ec:14:87:0e:b6:f1:03:8b:f5:7b:35:95:fd:71:38: 0b:b4:d3:8b:cc:df:6c:0d:26:15:d9:c2:9a:46:c0:ed:d9:bc: 65:a7:e0:c7:9b:11:41:2c:f5:7b:e5:03:cc:ca:dc:09:f3:1d: c6:3a:cf:91:10:e3:14:6b:a3:96:14:b1:88:d0:b9:33:92:51: 49:2d:81:3e:51:b3:84:49:b6:47:5d:03:4f:e7:a3:a1:56:1d: 31:a6:9f:51:bf:2b:54:49:51:f4:c0:2d:a7:ec:76:f5:2c:f7: 20:ef:e9:18:bd:bf:12:56:02:9b:37:45:59:b9:90:e6:80:77: 99:59:21:1e:1b:bd:4d:eb:64:79:62:aa:03:e8:2b:30:24:60: ab:90:bc:14:d5:93:c9:78:6a:70:f7:53:a0:56:9b:58:2d:a3: 6e:7c:02:64:f6:9b:74:14:d0:a5:88:2f:e7:86:98:17:b6:66: 5a:50:19:fd:63:31:92:ea:b0:27:94:ff:3f:30:bd:40:6c:18: ca:39:e7:88:67:fa:9f:ca:dd:69:72:c3:71:24:63:3a:78:01: 30:53:f9:56 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzZCMTExMC8GA1UEBRMoOUEzREEwQjg2OEM1ODlEQTE4NDQxQTJBNzBFMDUxNEFD OTdDNDA0RDAeFw0yNjAyMjAwMjQ4MDFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMDE3LTdiZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyevMFl+mH6ZebghXQCN73cjTe+HMNx1z6c9EWOCGrnio3cS8c8YZvhTFeVFh9 hSKx5D/9bxfKoNONaCO6lJ9vlnCNk7BIvyscv05qxdjI1YvYktzT1diw3vz9nh++ cSOolITgs0rnK4YItwt1Wkv8yljgAqxEhtHOlTVpT8Sh8j4y19NsTGiBa4AwhF4d 1dNkqTXIA60rwjxvo0jjae9//v9q6mPmsUBrUVSB49pBuGZLLf1VQ3I2tnTHyIRQ URi7XtMjG6tZJ9ul0ynL/CsvlbITP66crefZ2PLpsSPL+JJfCleL70e0ze2hSkO4 On6b+ep5G0HH9A5RkVASookZAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUS2YMlaMa uI0uQk+39XCqVqHpXYEwHwYDVR0jBBgwFoAUmj2guGjFidoYRBoqcOBRSsl8QE0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNkIxL0Y0QTkxNTdBMDg4 QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRvWVJCb3FjT0JSU3NsOFFF MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWoyZ3VHakZpZG9ZUkJvcWNPQlJTc2w4UUUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzZCMS9GNEE5MTU3QTA4OEIxMUYxQkNCMTUzRTcwRjNEOEM2Ny85MjBBM0UwMDBF MDYxMUYxQTNCQTE0NDMwODNEOEM2Ny5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32tEAwDQYJKoZIhvcNAQELBQADggEBAJuRuXwV7Cawr5Ty883X NURtLEOvQ0cP88w9t8+z5YDXMKE9P7WA2ewUhw628QOL9Xs1lf1xOAu004vM32wN JhXZwppGwO3ZvGWn4MebEUEs9XvlA8zK3AnzHcY6z5EQ4xRro5YUsYjQuTOSUUkt gT5Rs4RJtkddA0/no6FWHTGmn1G/K1RJUfTALafsdvUs9yDv6Ri9vxJWAps3RVm5 kOaAd5lZIR4bvU3rZHliqgPoKzAkYKuQvBTVk8l4anD3U6BWm1gto258AmT2m3QU 0KWIL+eGmBe2ZlpQGf1jMZLqsCeU/z8wvUBsGMo554hn+p/K3Wlyw3EkYzp4ATBT +VY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:05:41 2026 by rpki-client