$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ACF3D2085ED011EFA4FAB861C4F9AE02.roa File: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (raw, json) Hash identifier: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo= Subject key identifier: E6:2C:F3:36:82:0C:83:A6:1A:E8:8F:6E:30:E6:0C:D4:EE:C8:11:93 Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: 0140 Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ACF3D2085ED011EFA4FAB861C4F9AE02.roa Signing time: Thu 16 Apr 2026 22:27:30 +0000 ROA not before: Thu 16 Apr 2026 22:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3758 IP address blocks: 2401:be20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Apr 16 22:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e16252-b61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:aa:32:cd:0c:32:c2:63:c5:2d:f3:81:4d: 05:2b:ac:8a:b5:1b:8f:a9:db:eb:08:bb:dc:b1:c2: 04:c9:23:53:9d:13:d7:c8:3b:61:10:5d:f9:67:69: 38:d3:6a:b3:96:73:da:ab:0b:92:ad:6c:33:ec:36: 13:28:cd:4b:40:54:72:fd:d4:59:88:02:b3:7c:6f: 4f:6e:d2:17:5e:e3:cb:8d:6b:e3:7c:e8:fc:f0:85: 0b:c9:08:17:2e:48:ce:76:1d:06:dd:fa:c8:33:f3: c7:bb:b6:3f:12:4d:66:04:8d:d1:cb:dc:ca:1e:9d: 02:2b:51:5e:5b:67:81:a7:3d:35:95:02:de:27:1a: 18:69:c9:2a:48:c3:73:ed:bf:a8:72:4d:1c:57:cb: 71:29:fd:95:86:5f:8a:45:38:5e:97:04:85:d9:0c: 39:43:9b:e0:72:1e:c9:78:91:fc:da:17:96:3c:d7: 8f:25:a1:e7:d7:98:c5:e2:b4:f1:17:55:9c:30:4a: 2b:c5:b8:6a:be:ed:ed:88:3f:5f:76:bb:58:62:c0: fe:e6:85:20:63:04:6c:8d:2a:fa:0e:da:76:45:35: 21:c7:cc:61:76:16:82:25:ec:0e:91:b2:36:0c:57: 7f:72:27:89:09:ad:83:6f:ef:8b:61:7b:a8:91:2b: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2C:F3:36:82:0C:83:A6:1A:E8:8F:6E:30:E6:0C:D4:EE:C8:11:93 X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ACF3D2085ED011EFA4FAB861C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:be20::/32 Signature Algorithm: sha256WithRSAEncryption c0:4d:35:58:f4:a0:3b:75:ae:53:fa:6f:c0:c8:06:f2:33:97: 26:fa:c2:7a:fa:4c:50:84:2a:13:2a:8c:6f:bc:91:4c:90:5a: 77:ed:5e:4d:d0:35:53:7b:61:63:05:a2:9f:ac:ca:12:f0:ff: 2e:45:8d:30:1e:21:d8:43:5e:9b:11:44:63:31:b7:9f:c3:92: 05:f4:8e:41:ce:a8:13:71:20:b2:74:54:ac:34:54:30:d3:c5: 03:9d:4c:b6:9f:ec:da:3e:39:89:f0:ce:47:82:d2:12:0c:44: 88:dd:bb:1c:52:36:7c:85:a4:8d:9b:9e:8c:42:24:b6:bb:e0: e3:48:3c:d8:69:55:49:07:9d:33:52:3b:d5:77:40:d0:2c:9d: 2b:c8:4f:c6:bf:af:86:dc:e4:de:87:0b:be:80:5f:ff:c5:c9: 3e:99:a0:0f:ba:16:ca:72:91:0b:27:4e:d5:e2:99:15:78:a6: cd:d7:3b:6a:5b:5d:64:e4:bc:f8:be:8f:d2:1b:08:7b:e7:95: 07:14:50:d2:b2:59:6f:be:1e:3e:0a:88:40:a3:c5:d3:2b:05: 3d:9d:77:c7:3a:9c:6e:9f:44:6b:c2:0c:b7:12:02:cd:57:0c: da:db:ea:2a:a0:60:22:d1:d2:d2:74:16:07:9c:4e:0d:da:8f: 77:1f:34:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjYwNDE2MjIyNzMwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWUxNjI1Mi1iNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypeqMs0MMsJjxS3zgU0FK6yKtRuPqdvrCLvcscIEySNTnRPXyDthEF35Z2k4 02qzlnPaqwuSrWwz7DYTKM1LQFRy/dRZiAKzfG9PbtIXXuPLjWvjfOj88IULyQgX LkjOdh0G3frIM/PHu7Y/Ek1mBI3Ry9zKHp0CK1FeW2eBpz01lQLeJxoYackqSMNz 7b+ock0cV8txKf2Vhl+KRThelwSF2Qw5Q5vgch7JeJH82heWPNePJaHn15jF4rTx F1WcMEorxbhqvu3tiD9fdrtYYsD+5oUgYwRsjSr6Dtp2RTUhx8xhdhaCJewOkbI2 DFd/cieJCa2Db++LYXuokSu4QQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFOYs8zaC DIOmGuiPbjDmDNTuyBGTMB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I0MzUvRjVFNjI3MjQ1RUNFMTFFRjg4NTRDQTVFQzRGOUFFMDIvQUNGM0QyMDg1 RUQwMTFFRkE0RkFCODYxQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAG+IDANBgkqhkiG9w0BAQsFAAOCAQEAwE01WPSgO3WuU/pvwMgG 8jOXJvrCevpMUIQqEyqMb7yRTJBad+1eTdA1U3thYwWin6zKEvD/LkWNMB4h2ENe mxFEYzG3n8OSBfSOQc6oE3EgsnRUrDRUMNPFA51Mtp/s2j45ifDOR4LSEgxEiN27 HFI2fIWkjZuejEIktrvg40g82GlVSQedM1I71XdA0CydK8hPxr+vhtzk3ocLvoBf /8XJPpmgD7oWynKRCydO1eKZFXimzdc7altdZOS8+L6P0hsIe+eVBxRQ0rJZb74e PgqIQKPF0ysFPZ13xzqcbp9Ea8IMtxICzVcM2tvqKqBgItHS0nQWB5xODdqPdx80 /g== -----END CERTIFICATE-----Generated at Fri Apr 17 12:34:28 2026 by rpki-client