$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BAC878D0799511F098E98265C4F9AE02.roa File: BAC878D0799511F098E98265C4F9AE02.roa (raw, json) Hash identifier: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A= Subject key identifier: FB:8E:FA:50:60:9D:0B:A7:67:AB:76:58:C5:5B:91:21:43:AF:EB:21 Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: 68 Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BAC878D0799511F098E98265C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:13:27 +0000 ROA not before: Fri 15 Aug 2025 05:07:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 2001:df5:fd40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Aug 15 05:07:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a3f527-1dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:e4:8f:ed:ab:35:00:b5:9b:b8:e5:44:fb: b9:f9:24:c7:f9:26:56:58:e2:07:17:8d:15:02:a7: 87:7e:83:d4:c9:e3:7b:9c:5d:66:05:da:ca:a8:11: 01:1a:56:5a:4d:dc:69:45:da:a3:36:79:2c:8c:b2: c2:93:90:f5:48:fc:17:f2:a6:90:b3:89:d3:05:6e: ae:d9:37:8f:a0:e4:12:23:0d:db:60:d7:3c:23:f8: 84:fa:a2:bc:4f:f4:b3:43:2b:8b:7a:88:5a:af:93: 23:e0:d6:af:18:48:64:6e:d9:ae:9f:a8:36:d0:7c: 4e:a1:60:16:72:7d:4f:17:0c:a2:38:88:e9:61:99: 50:49:16:10:d6:73:d1:03:f7:c0:c5:2b:e3:45:88: 5d:e8:ea:62:4a:1d:86:ca:4f:a2:a8:8c:c2:d4:81: bc:42:83:1b:bf:09:0e:ea:1d:31:31:24:75:bb:c0: df:91:15:7d:73:ba:39:63:63:07:60:bf:29:75:de: 69:f6:db:a1:5e:60:b3:3e:0e:bf:ff:36:87:db:39: 7a:8f:46:37:60:dc:17:60:ba:a4:fe:41:2b:71:62: 3b:3e:97:1c:fd:44:0d:45:7a:c4:09:89:15:bf:75: 20:1b:92:b8:03:0c:3c:a9:64:db:bc:6e:bb:20:ea: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:FA:50:60:9D:0B:A7:67:AB:76:58:C5:5B:91:21:43:AF:EB:21 X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BAC878D0799511F098E98265C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:fd40::/48 Signature Algorithm: sha256WithRSAEncryption af:3b:b2:9b:27:bd:1d:5e:5c:8f:0a:46:0d:03:30:b0:0e:1d: 92:0c:de:c9:11:fb:e7:5c:d4:36:9d:41:64:50:37:cf:8c:99: bc:f3:eb:93:1e:73:75:70:66:20:c8:29:ee:f9:60:87:16:3d: 66:53:4a:5f:67:97:bb:25:b1:09:30:70:20:25:e5:7f:dd:53: e8:9c:f3:75:77:a8:d9:b6:66:9d:a8:b4:fa:04:83:17:1d:2b: f6:e0:d3:c0:77:f6:f8:14:14:02:f8:2b:9d:3a:f1:32:ac:f5: ac:d5:17:c1:85:a1:33:7d:bc:11:aa:57:a4:1e:2f:7b:89:a4: 4b:35:2a:2b:eb:68:60:74:c8:9f:7a:c9:08:55:bc:14:2b:89: 23:be:40:c8:f3:d9:f0:54:46:bb:1b:56:62:be:86:d1:99:81: cc:69:8c:f2:e7:f0:a9:e3:2a:51:f3:84:b9:e0:38:f2:f2:61: d5:9e:2e:1d:cc:8e:be:bc:0f:af:d5:3b:2d:b0:45:8d:ab:43: 10:e8:24:7d:ce:50:f5:d8:e1:1f:e6:db:50:a5:ed:36:ee:ce: fe:96:62:78:6e:72:89:29:a2:bd:f6:0e:0c:af:30:11:c1:7d: b5:57:c9:79:f6:65:ff:82:ac:9a:98:b2:7f:89:ef:f9:b4:2c: 0e:45:a6:9f -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzY0RjExMC8GA1UEBRMoNzQ1M0Q4ODEzQkM4RUY3MjkwQjExMDIzMjM1ODg5NEM3 N0M0REIzNzAeFw0yNTA4MTUwNTA3MjRaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNmNTI3LTFkY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkBuSP7as1ALWbuOVE+7n5JMf5JlZY4gcXjRUCp4d+g9TJ43ucXWYF2sqoEQEa VlpN3GlF2qM2eSyMssKTkPVI/BfyppCzidMFbq7ZN4+g5BIjDdtg1zwj+IT6orxP 9LNDK4t6iFqvkyPg1q8YSGRu2a6fqDbQfE6hYBZyfU8XDKI4iOlhmVBJFhDWc9ED 98DFK+NFiF3o6mJKHYbKT6KojMLUgbxCgxu/CQ7qHTExJHW7wN+RFX1zujljYwdg vyl13mn226FeYLM+Dr//NofbOXqPRjdg3BdguqT+QStxYjs+lxz9RA1FesQJiRW/ dSAbkrgDDDypZNu8brsg6gmVAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQU+476UGCd C6dnq3ZYxVuRIUOv6yEwHwYDVR0jBBgwFoAUdFPYgTvI73KQsRAjI1iJTHfE2zcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNjRGLzM2MENBMTdBNzk5 NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEZQWWdUdkk3M0tRc1JBakkxaUpUSGZFMnpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0Ri8zNjBDQTE3QTc5OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9CQUM4NzhEMDc5 OTUxMUYwOThFOTgyNjVDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ31/UAwDQYJKoZIhvcNAQELBQADggEBAK87spsnvR1eXI8KRg0D MLAOHZIM3skR++dc1DadQWRQN8+Mmbzz65Mec3VwZiDIKe75YIcWPWZTSl9nl7sl sQkwcCAl5X/dU+ic83V3qNm2Zp2otPoEgxcdK/bg08B39vgUFAL4K5068TKs9azV F8GFoTN9vBGqV6QeL3uJpEs1KivraGB0yJ96yQhVvBQriSO+QMjz2fBURrsbVmK+ htGZgcxpjPLn8KnjKlHzhLngOPLyYdWeLh3Mjr68D6/VOy2wRY2rQxDoJH3OUPXY 4R/m21Cl7Tbuzv6WYnhucokpor32DgyvMBHBfbVXyXn2Zf+CrJqYsn+J7/m0LA5F pp8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:26 2026 by rpki-client