$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/2FC3DE84B15B11EB8CCCD624C4F9AE02.roa File: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (raw, json) Hash identifier: N/PTmxsd2qWDIg6nnrJkOUd5Pv8F/h9BMSmjENT3ckM= Subject key identifier: E8:AF:6A:8F:07:1A:80:4C:CA:EE:AC:89:2F:7B:E7:5B:34:33:73:1D Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0D3F Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/2FC3DE84B15B11EB8CCCD624C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:52:59 +0000 ROA not before: Wed 30 Apr 2025 18:28:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132458 IP address blocks: 2001:df1:b401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Apr 30 18:28:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a444bb-f52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:77:4d:39:3e:b1:e0:8d:75:7a:62:8a:86: 78:c7:73:59:ca:ed:32:28:5d:f0:b6:cb:97:63:e0: ed:8a:d6:d6:27:60:76:14:02:0a:96:54:fe:9e:b2: e8:83:1b:b0:24:f3:74:62:9d:0a:54:fc:0e:e7:6a: 13:58:5e:8d:09:90:85:f0:c7:37:c2:e7:a4:f3:42: 9f:2f:fe:ea:67:d3:a3:89:3c:58:ae:f4:55:b5:27: 3d:d7:8b:35:dd:49:f0:41:ab:75:44:46:3f:8b:eb: 22:cf:56:db:dc:72:2a:b7:81:df:12:23:c3:44:c8: 53:4c:13:ea:de:14:70:dc:ca:6b:19:3c:e2:9d:d4: 8b:6d:72:6e:97:65:c9:42:8c:91:68:fb:9c:f2:7e: fb:0f:2a:d5:ae:9b:aa:01:9d:59:52:0f:d9:92:21: 33:92:98:e5:75:d4:ce:ff:1b:7e:4f:20:64:96:4a: b3:f1:f7:a2:c8:f1:0d:74:c4:61:87:c9:2a:ca:86: 64:7a:a8:0b:f1:a4:78:60:ae:4a:47:03:5f:d9:17: 43:bd:1a:51:cc:23:ea:1e:59:17:f0:e6:06:47:26: c9:47:79:b9:36:58:df:a5:11:08:4d:75:13:91:de: c0:69:25:b8:e6:fe:62:a1:b7:a8:87:e7:2d:1c:b2: 63:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AF:6A:8F:07:1A:80:4C:CA:EE:AC:89:2F:7B:E7:5B:34:33:73:1D X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/2FC3DE84B15B11EB8CCCD624C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df1:b401::/48 Signature Algorithm: sha256WithRSAEncryption 0c:a9:c3:ae:0d:f5:c8:d3:5d:85:88:4d:87:01:c3:e8:66:b7: 38:5f:87:05:8e:35:d1:52:e1:0d:c8:43:b8:a3:c1:ba:c2:3d: 73:8b:47:eb:80:d4:ab:86:05:f4:83:0f:59:dc:2d:58:a9:10: 05:fa:87:d1:34:45:b2:d5:c3:f8:74:a9:19:61:d4:15:d5:31: ee:0b:cc:b0:9e:f2:55:2b:f0:7a:2b:76:de:3c:24:d5:2a:db: 4e:b8:2f:04:0a:08:b8:1e:79:31:aa:67:4b:2d:89:68:0f:26: b3:88:0a:b4:fc:0c:a7:2f:f0:6a:3f:59:bc:f5:31:00:10:70: 64:ae:14:a4:87:d1:a5:8e:06:1e:b4:45:fd:02:a7:62:3c:04: 2c:73:db:56:ad:37:b7:9d:f1:c3:60:86:5a:b9:83:1f:9c:51: 9f:99:97:10:95:55:be:3b:c0:87:92:62:2f:c4:3f:b9:e7:02: 52:92:d8:36:b8:50:73:60:b3:2a:39:1b:0b:ab:d2:ad:6d:43: 33:59:df:ba:88:d1:3f:2c:02:7c:a4:f5:cb:a1:5a:f1:44:de: 52:c4:4f:c0:40:7e:6a:77:36:65:9b:67:74:b9:13:7a:31:3b: e5:84:98:d9:7d:5f:36:9d:24:4f:58:af:77:e8:f4:a1:89:42: 0d:75:48:99 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjUwNDMwMTgyODE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDRiYi1mNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DN3TTk+seCNdXpiioZ4x3NZyu0yKF3wtsuXY+DtitbWJ2B2FAIKllT+nrLo gxuwJPN0Yp0KVPwO52oTWF6NCZCF8Mc3wuek80KfL/7qZ9OjiTxYrvRVtSc914s1 3UnwQat1REY/i+siz1bb3HIqt4HfEiPDRMhTTBPq3hRw3MprGTzindSLbXJul2XJ QoyRaPuc8n77DyrVrpuqAZ1ZUg/ZkiEzkpjlddTO/xt+TyBklkqz8feiyPENdMRh h8kqyoZkeqgL8aR4YK5KRwNf2RdDvRpRzCPqHlkX8OYGRybJR3m5NljfpREITXUT kd7AaSW45v5iobeoh+ctHLJjxQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOivao8H GoBMyu6siS9751s0M3MdMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkJBODAvQjk4RTgxRDYwNUI5MTFFQTgyMDg5OTZFQzRGOUFFMDIvMkZDM0RFODRC MTVCMTFFQjhDQ0NENjI0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8bQBMA0GCSqGSIb3DQEBCwUAA4IBAQAMqcOuDfXI012FiE2H AcPoZrc4X4cFjjXRUuENyEO4o8G6wj1zi0frgNSrhgX0gw9Z3C1YqRAF+ofRNEWy 1cP4dKkZYdQV1THuC8ywnvJVK/B6K3bePCTVKttOuC8ECgi4HnkxqmdLLYloDyaz iAq0/AynL/BqP1m89TEAEHBkrhSkh9GljgYetEX9AqdiPAQsc9tWrTe3nfHDYIZa uYMfnFGfmZcQlVW+O8CHkmIvxD+55wJSktg2uFBzYLMqORsLq9KtbUMzWd+6iNE/ LAJ8pPXLoVrxRN5SxE/AQH5qdzZlm2d0uRN6MTvlhJjZfV82nSRPWK936PShiUIN dUiZ -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:38 2026 by rpki-client