$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/B32AFC52A7CF11F0923B7A2BC4F9AE02.roa File: B32AFC52A7CF11F0923B7A2BC4F9AE02.roa (raw, json) Hash identifier: 1uCfLlF3eOYzrWGfrDsn6fFJeWHxdlAShDA4pPyjH1w= Subject key identifier: 1B:05:0D:CF:62:6B:A3:29:76:9E:08:AF:28:26:23:4C:B9:70:6F:42 Certificate issuer: /CN=A91C430B/serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3 Certificate serial: 49 Authority key identifier: 3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/B32AFC52A7CF11F0923B7A2BC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:12:26 +0000 ROA not before: Mon 13 Oct 2025 00:58:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154295 IP address blocks: 2001:df6:3440::/46 maxlen: 46 2001:df6:3440::/48 maxlen: 48 2001:df6:3441::/48 maxlen: 48 2001:df6:3442::/48 maxlen: 48 2001:df6:3443::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C430B, serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3 Validity Not Before: Oct 13 00:58:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d8ca-8fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:6d:3a:17:23:51:6b:c4:d1:db:77:14:9c: d8:1f:49:91:16:72:af:4d:3d:32:03:1c:7f:17:c4: da:41:a6:47:a6:c3:a8:98:38:aa:5a:cd:27:29:80: c3:79:7c:a6:2f:5a:31:e0:05:e4:cf:35:14:f8:0c: 5b:61:3e:3e:49:f4:5d:ae:9e:b3:d2:bc:a9:90:70: 1e:f5:a3:be:29:2e:e9:b5:f7:22:02:c4:32:4b:8f: 2b:5b:2a:a1:72:8e:63:69:85:4b:9a:81:5a:51:08: 9e:e3:0f:f0:c5:14:1b:37:9c:0b:1a:fe:e7:d9:3d: 86:41:99:3d:4c:e4:49:59:eb:7a:18:bc:c7:8b:14: e5:fc:5b:6b:df:92:0c:a7:d1:49:67:f6:7c:f3:8a: ef:0b:d7:d8:fd:06:1f:f3:ac:a1:4f:9a:ec:73:f1: d7:29:be:ff:6c:98:ae:e8:5b:3a:75:a8:c1:6d:15: 07:8f:67:58:ab:c6:62:f4:7e:d4:34:55:68:16:50: 3b:6a:85:c7:9f:42:68:72:ca:38:ea:48:05:df:c5: c8:a9:f9:52:bd:b1:74:43:14:77:de:b8:48:67:14: 03:85:a8:f1:2a:c7:2a:ae:88:51:04:9e:c4:34:ca: d8:22:a6:d8:68:8a:67:a4:be:d2:76:e3:cf:cf:08: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:05:0D:CF:62:6B:A3:29:76:9E:08:AF:28:26:23:4C:B9:70:6F:42 X509v3 Authority Key Identifier: keyid:3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/B32AFC52A7CF11F0923B7A2BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:3440::/46 Signature Algorithm: sha256WithRSAEncryption bb:2a:46:d9:34:bc:7f:8c:a5:d8:02:40:52:82:ec:83:d1:43: 63:14:82:68:f3:96:a2:60:f0:72:e5:69:b1:b0:a3:0e:62:12: 47:09:45:8e:76:97:c8:5b:e4:2e:b6:1d:34:fa:18:8e:8a:55: a9:34:30:65:6a:15:47:1c:6c:33:bf:9e:ba:11:10:f6:91:33: e7:6e:1a:30:5b:89:5f:0d:82:04:c4:f8:ed:20:98:3b:3f:d8: 43:6b:f1:ec:e5:ef:72:cf:93:c4:ef:87:0e:7e:5a:6e:cb:8c: b9:2d:09:4e:79:2c:db:3d:02:59:2e:b0:3d:23:ff:ad:87:2e: 99:8d:b2:bb:1e:4b:74:3a:3d:7a:96:53:6e:62:0f:57:0a:39: 18:14:70:55:8c:e4:ec:81:5a:b2:07:9c:24:85:1f:41:5c:31: be:d3:5c:a3:c8:6b:53:c3:5e:ef:5a:58:ef:1f:bd:4f:5f:e8: b5:fe:09:7b:8f:cb:58:1d:dd:07:43:37:60:8b:87:4d:16:b7: 48:23:5a:a3:fe:29:69:d0:b2:90:e0:e8:f4:98:d3:c6:7f:60: c1:10:ac:4b:ef:34:67:21:da:0d:77:2a:73:b1:58:6b:05:c5: d2:c5:f3:5c:11:98:06:d0:e8:17:d3:a6:79:58:0d:2f:07:2c: ec:80:0c:d9 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDMwQjExMC8GA1UEBRMoM0YyRUJBRUI1MUNDMzhGOTVCMzIzREQwQzg1RUU4MzBB RkUzMzdCMzAeFw0yNTEwMTMwMDU4MTZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkOGNhLThmZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkOm06FyNRa8TR23cUnNgfSZEWcq9NPTIDHH8XxNpBpkemw6iYOKpazScpgMN5 fKYvWjHgBeTPNRT4DFthPj5J9F2unrPSvKmQcB71o74pLum19yICxDJLjytbKqFy jmNphUuagVpRCJ7jD/DFFBs3nAsa/ufZPYZBmT1M5ElZ63oYvMeLFOX8W2vfkgyn 0Uln9nzziu8L19j9Bh/zrKFPmuxz8dcpvv9smK7oWzp1qMFtFQePZ1irxmL0ftQ0 VWgWUDtqhcefQmhyyjjqSAXfxcip+VK9sXRDFHfeuEhnFAOFqPEqxyquiFEEnsQ0 ytgipthoimekvtJ248/PCPAdAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUGwUNz2Jr oyl2ngivKCYjTLlwb0IwHwYDVR0jBBgwFoAUPy6661HMOPlbMj3QyF7oMK/jN7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzhEMDNBNDNBQTdD RTExRjA5Nzg5NDUyOEM0RjlBRTAyL1B5NjY2MUhNT1BsYk1qM1F5RjdvTUtfak43 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHk2NjYxSE1PUGxiTWozUXlGN29NS19qTjdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDMwQi84RDAzQTQzQUE3Q0UxMUYwOTc4OTQ1MjhDNEY5QUUwMi9CMzJBRkM1MkE3 Q0YxMUYwOTIzQjdBMkJDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwIgAQ32NEAwDQYJKoZIhvcNAQELBQADggEBALsqRtk0vH+MpdgCQFKC 7IPRQ2MUgmjzlqJg8HLlabGwow5iEkcJRY52l8hb5C62HTT6GI6KVak0MGVqFUcc bDO/nroREPaRM+duGjBbiV8NggTE+O0gmDs/2ENr8ezl73LPk8Tvhw5+Wm7LjLkt CU55LNs9AlkusD0j/62HLpmNsrseS3Q6PXqWU25iD1cKORgUcFWM5OyBWrIHnCSF H0FcMb7TXKPIa1PDXu9aWO8fvU9f6LX+CXuPy1gd3QdDN2CLh00Wt0gjWqP+KWnQ spDg6PSY08Z/YMEQrEvvNGch2g13KnOxWGsFxdLF81wRmAbQ6BfTpnlYDS8HLOyA DNk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:04 2026 by rpki-client