$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/3D04EA589D9211EF8083B245C4F9AE02.roa File: 3D04EA589D9211EF8083B245C4F9AE02.roa (raw, json) Hash identifier: uTJLxFWxmXVPmsyuMe7D4Y0DugrlFezuy8t+kMf4wQc= Subject key identifier: C6:26:64:75:2E:29:DA:D4:C1:B2:09:A8:8C:36:34:4D:01:A9:3C:CE Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: FF Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/3D04EA589D9211EF8083B245C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:24:45 +0000 ROA not before: Sat 31 May 2025 06:58:53 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153167 IP address blocks: 2401:b3a0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: May 31 06:58:53 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3f7cd-3ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:8e:2a:c4:f7:39:33:11:af:04:33:fa:ce: dc:c4:ba:df:14:d5:b2:ea:91:ee:e4:4b:a5:ec:a9: 21:38:d6:17:83:67:42:99:9c:ca:e0:5d:fa:0b:eb: 41:b0:ad:cc:3b:38:f2:89:b3:32:c9:4c:3a:56:39: 91:19:b8:4e:0f:c4:17:d4:f3:44:af:02:91:20:78: 92:6d:d3:ff:57:f3:36:62:61:7c:ab:ce:89:e9:9b: f2:91:28:5b:4c:57:fa:ca:8a:81:bc:2a:9f:f4:b4: 4f:da:23:84:af:5b:6a:c7:19:c7:71:7c:86:d9:45: 87:f8:18:57:3e:71:e6:03:aa:76:17:f3:2f:c9:a8: ce:5f:ee:ca:fb:bf:41:e9:7b:56:80:f6:3e:01:a8: a4:ec:f9:ae:aa:dc:1b:08:2f:9b:61:a3:7e:e3:77: 0e:ae:6c:3d:90:ad:6f:9b:72:00:a8:13:2b:74:68: f8:e6:06:43:c7:a4:44:8e:a0:4a:10:8c:73:f3:79: 7e:95:6e:b0:91:5d:96:83:d4:49:bd:0f:6a:04:61: 88:1d:75:fe:dc:94:98:0c:43:78:64:8e:7c:ef:94: b2:2d:cb:c2:db:b4:58:fd:66:c2:23:11:6f:66:d7: 0a:fc:14:c4:fb:86:cf:4a:17:38:e3:1f:d8:43:f5: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:26:64:75:2E:29:DA:D4:C1:B2:09:A8:8C:36:34:4D:01:A9:3C:CE X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/3D04EA589D9211EF8083B245C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:b3a0::/32 Signature Algorithm: sha256WithRSAEncryption c4:c6:68:7c:ee:c5:4f:49:13:21:4b:94:20:ee:66:13:ae:78: 6c:a3:eb:a8:be:af:42:cb:f8:ae:78:30:9d:91:18:0e:2b:e5: fa:4a:00:12:d1:95:dd:5b:31:cc:6f:56:ad:32:61:d1:71:61: 7c:b2:c6:8a:5c:8c:81:ed:96:43:49:55:ca:b5:e1:a1:09:13: 4b:23:a4:6f:75:8f:14:1b:46:1b:4e:aa:28:b5:0e:90:12:52: b0:9a:bd:f3:5d:1a:28:16:28:08:96:03:5a:e5:a7:72:7b:46: 5d:4e:33:bf:3c:b1:ec:f9:d9:19:86:04:a2:df:c3:0c:a8:0f: e3:ca:01:97:9d:a6:e5:01:95:cb:18:bd:86:c4:ec:00:16:4e: 2f:23:26:29:4b:ee:a9:76:56:7d:f7:8e:8f:b8:de:8a:fc:73: d1:3a:9f:54:14:bf:5b:f8:b6:e9:14:64:ed:00:10:93:fa:bd: d4:ec:a2:b2:36:64:e8:95:26:75:71:6f:20:21:ba:5a:2c:1a: 4d:ee:1c:e4:01:80:b9:79:d0:8f:5a:39:77:ee:71:a2:85:f7: 80:e8:a1:21:6e:2e:34:e3:38:4c:d6:df:e7:b7:58:e2:03:84: 91:f1:39:4c:d5:ee:0a:07:69:49:95:a8:13:6e:f6:18:13:8f: c4:28:01:93 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjUwNTMxMDY1ODUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjdjZC0zYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonGOKsT3OTMRrwQz+s7cxLrfFNWy6pHu5Eul7KkhONYXg2dCmZzK4F36C+tB sK3MOzjyibMyyUw6VjmRGbhOD8QX1PNErwKRIHiSbdP/V/M2YmF8q86J6ZvykShb TFf6yoqBvCqf9LRP2iOEr1tqxxnHcXyG2UWH+BhXPnHmA6p2F/MvyajOX+7K+79B 6XtWgPY+Aaik7PmuqtwbCC+bYaN+43cOrmw9kK1vm3IAqBMrdGj45gZDx6REjqBK EIxz83l+lW6wkV2Wg9RJvQ9qBGGIHXX+3JSYDEN4ZI5875SyLcvC27RY/WbCIxFv ZtcK/BTE+4bPShc44x/YQ/XPZQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFMYmZHUu KdrUwbIJqIw2NE0BqTzOMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOTU2RjY2MkM5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvM0QwNEVBNTg5 RDkyMTFFRjgwODNCMjQ1QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAGzoDANBgkqhkiG9w0BAQsFAAOCAQEAxMZofO7FT0kTIUuUIO5m E654bKPrqL6vQsv4rngwnZEYDivl+koAEtGV3VsxzG9WrTJh0XFhfLLGilyMge2W Q0lVyrXhoQkTSyOkb3WPFBtGG06qKLUOkBJSsJq9810aKBYoCJYDWuWncntGXU4z vzyx7PnZGYYEot/DDKgP48oBl52m5QGVyxi9hsTsABZOLyMmKUvuqXZWffeOj7je ivxz0TqfVBS/W/i26RRk7QAQk/q91OyisjZk6JUmdXFvICG6WiwaTe4c5AGAuXnQ j1o5d+5xooX3gOihIW4uNOM4TNbf57dY4gOEkfE5TNXuCgdpSZWoE272GBOPxCgB kw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:56 2026 by rpki-client