$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/58C16E043B7811F099AF3F55C4F9AE02.roa File: 58C16E043B7811F099AF3F55C4F9AE02.roa (raw, json) Hash identifier: Z8V6aheDSz+e4X0EWGtNzfkbSxH9rxPxx8nCeAn8miQ= Subject key identifier: A4:F9:13:FC:6A:1F:B0:E0:63:E2:57:CC:FC:90:80:83:9F:30:C1:21 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 8F Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/58C16E043B7811F099AF3F55C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:06:57 +0000 ROA not before: Wed 28 May 2025 04:00:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152583 IP address blocks: 2001:df3:7d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: May 28 04:00:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3e591-5e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8f:ee:04:e9:0f:87:fd:2d:92:2c:dd:30:bc: 81:bf:96:d1:ec:85:99:e7:77:38:d4:08:0f:6d:f2: a1:5c:df:79:e9:04:ea:96:68:90:ee:16:98:ac:1a: 46:5d:37:00:4d:db:71:21:4a:59:3f:ec:f3:2a:78: 98:13:63:f1:4b:46:02:01:f7:5f:10:eb:21:4c:a3: c7:45:cf:9c:b0:7d:c8:d9:2b:f7:4d:12:86:af:a5: 8b:b2:fe:ec:2a:17:21:e4:89:93:86:5e:66:d5:0d: 85:b5:54:2b:4d:3b:30:81:67:96:40:40:23:66:54: 60:a2:47:bb:f5:73:6c:f7:7a:20:ce:cc:8b:33:02: 44:54:5c:2c:a3:fc:a5:86:00:e4:82:60:c2:de:52: e8:b5:e9:34:c4:e5:c1:70:ce:ce:1c:5d:c6:ed:16: 40:bf:42:50:4f:1c:56:ec:cf:52:0a:04:7e:75:b3: 16:88:45:e2:03:79:c8:a7:79:89:75:ca:95:a1:3e: 30:bc:5f:a0:85:a5:52:72:cf:00:15:5a:13:64:6f: 96:49:1d:27:c7:e8:d4:91:bf:3f:d1:00:0e:f5:29: 82:77:d7:b3:63:0c:a4:2f:66:04:0a:75:24:b5:85: 57:35:d9:7c:bc:4a:14:d9:a4:c9:db:4c:ea:1e:c9: 52:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F9:13:FC:6A:1F:B0:E0:63:E2:57:CC:FC:90:80:83:9F:30:C1:21 X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/58C16E043B7811F099AF3F55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:7d40::/48 Signature Algorithm: sha256WithRSAEncryption 38:3d:1f:24:c2:7f:91:e2:35:4f:80:cb:d8:b6:54:e5:2d:b8: 69:6d:d5:57:17:03:f7:ca:db:3d:1e:ec:6a:69:6b:4b:20:e8: cd:e9:99:56:63:dd:8b:b0:8d:9c:5f:2b:f1:2a:d7:26:c2:61: d9:67:07:74:a7:c7:32:86:eb:bf:5c:ef:db:80:3b:77:31:22: b5:e6:83:40:43:f6:0d:9a:e0:4a:46:bc:24:d3:9b:65:3f:f0: 78:0e:14:2a:3d:69:2b:06:ef:dc:fb:70:3b:65:c6:8e:28:35: 9d:de:04:39:b3:b1:a4:06:d9:d9:e4:47:d2:b7:a6:25:7e:da: bc:20:dd:27:2a:97:5d:21:37:38:4e:6a:6c:0b:92:93:e4:04: df:a3:d9:71:fb:eb:2a:18:eb:60:45:2b:dc:b0:5c:b0:f0:8e: 54:01:09:e6:0b:8c:9f:43:1f:54:9a:3a:1c:25:06:21:1c:5c: fc:cc:ea:11:5b:4b:8a:e2:3b:0e:6e:8e:65:2b:1b:50:8a:24: 6b:10:99:e9:af:53:f2:6d:38:ed:5f:6e:df:9e:2e:2b:a3:b0: 4f:d7:a0:8d:14:a6:74:38:d6:c3:fa:c3:19:cc:93:b3:0b:e9: 0c:e2:56:1a:67:54:c5:15:63:26:d2:08:13:1a:ba:dc:ce:3d: bd:e2:52:9d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBNEYxMTAvBgNVBAUTKEUwMzk4RDU0QUNEOURCMzNFRDRGQ0FBOEQyMjgwNUQ0 NUU4MENCQjYwHhcNMjUwNTI4MDQwMDUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTU5MS01ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoY/uBOkPh/0tkizdMLyBv5bR7IWZ53c41AgPbfKhXN956QTqlmiQ7haYrBpG XTcATdtxIUpZP+zzKniYE2PxS0YCAfdfEOshTKPHRc+csH3I2Sv3TRKGr6WLsv7s Khch5ImThl5m1Q2FtVQrTTswgWeWQEAjZlRgoke79XNs93ogzsyLMwJEVFwso/yl hgDkgmDC3lLotek0xOXBcM7OHF3G7RZAv0JQTxxW7M9SCgR+dbMWiEXiA3nIp3mJ dcqVoT4wvF+ghaVScs8AFVoTZG+WSR0nx+jUkb8/0QAO9SmCd9ezYwykL2YECnUk tYVXNdl8vEoU2aTJ20zqHslSKwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKT5E/xq H7DgY+JXzPyQgIOfMMEhMB8GA1UdIwQYMBaAFOA5jVSs2dsz7U/KqNIoBdRegMu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE0Ri81ODdGMzVEQTNC NzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6UHRUOHFvMGlnRjFGNkF5 N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkJBNEYvNTg3RjM1REEzQjc3MTFGMDk3QThCQjI0QzRGOUFFMDIvNThDMTZFMDQz Qjc4MTFGMDk5QUYzRjU1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN831AMA0GCSqGSIb3DQEBCwUAA4IBAQA4PR8kwn+R4jVPgMvY tlTlLbhpbdVXFwP3yts9HuxqaWtLIOjN6ZlWY92LsI2cXyvxKtcmwmHZZwd0p8cy huu/XO/bgDt3MSK15oNAQ/YNmuBKRrwk05tlP/B4DhQqPWkrBu/c+3A7ZcaOKDWd 3gQ5s7GkBtnZ5EfSt6Ylftq8IN0nKpddITc4TmpsC5KT5ATfo9lx++sqGOtgRSvc sFyw8I5UAQnmC4yfQx9UmjocJQYhHFz8zOoRW0uK4jsObo5lKxtQiiRrEJnpr1Py bTjtX27fni4ro7BP16CNFKZ0ONbD+sMZzJOzC+kM4lYaZ1TFFWMm0ggTGrrczj29 4lKd -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:04 2026 by rpki-client