$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/94CEBFFEAB4511F09AA0C458C4F9AE02.roa File: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (raw, json) Hash identifier: VnxPQSSZH/jrUJ6zmg9TBmjFmVAPpsz93eEIgIGKblg= Subject key identifier: 17:F4:60:BE:B2:D9:23:3A:70:C5:DA:F6:8D:9C:29:4D:BD:14:E3:75 Certificate issuer: /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416 Certificate serial: 47 Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/94CEBFFEAB4511F09AA0C458C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:11:27 +0000 ROA not before: Fri 17 Oct 2025 10:39:39 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134738 IP address blocks: 2001:df6:38c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416 Validity Not Before: Oct 17 10:39:39 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d88f-7af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c4:48:c9:b0:85:58:9b:a7:91:45:f6:0c:30: 73:cb:02:23:1b:80:a7:a4:69:a5:4c:bc:d3:0d:c8: dc:4e:b7:38:6d:49:5f:9d:eb:f9:82:87:57:0a:b7: 24:85:8f:e1:97:43:61:28:bb:15:d4:76:ce:a3:fe: 1f:ef:7f:d2:66:c3:4f:0f:eb:2b:c5:b7:94:2e:3c: 75:b9:0a:46:3f:40:17:1c:82:eb:cf:c5:42:96:ec: f0:86:73:06:75:03:ca:c1:fd:65:de:71:48:fd:d7: 27:f2:4f:20:94:13:ca:41:a5:a0:8f:be:87:13:c2: 51:d0:fb:6d:44:86:27:01:8e:59:a0:11:79:9e:b5: 04:fd:30:a6:ad:99:b2:1e:ab:2d:23:ec:e2:e6:26: 26:6f:89:75:57:4b:d8:3d:2d:69:8c:6f:b6:d8:6c: 8f:33:44:68:ce:7d:70:26:16:be:2f:1a:6f:47:9e: 57:20:1a:4c:89:13:f7:f9:13:aa:77:08:e7:2c:c1: 9e:42:27:c4:8a:58:e1:28:46:ab:6c:d7:07:8e:2e: 27:41:5e:b7:79:75:0b:db:9d:3e:48:5e:1a:b1:8c: 74:6b:f9:50:57:2f:73:97:63:10:b5:8a:56:01:15: 77:02:a6:0c:37:0f:63:52:61:cf:8b:45:d0:3c:f2: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F4:60:BE:B2:D9:23:3A:70:C5:DA:F6:8D:9C:29:4D:BD:14:E3:75 X509v3 Authority Key Identifier: keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/94CEBFFEAB4511F09AA0C458C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:38c0::/48 Signature Algorithm: sha256WithRSAEncryption 2d:52:8b:a0:53:a5:0d:e2:9a:d6:cf:97:3a:bf:25:0c:dd:ef: 5d:bb:d6:35:58:09:31:28:c3:9b:c7:3c:97:a4:ae:44:68:c9: 65:91:94:99:44:1b:bf:25:92:df:cc:ea:50:c7:3c:f0:0b:66: 84:a4:63:09:99:6d:6c:48:c7:4a:58:39:a6:b1:17:24:88:43: c0:82:4e:1c:37:9b:56:c2:66:8a:dc:fe:8c:91:97:40:72:2d: 7f:97:9e:80:63:f8:3a:a8:2b:3c:56:82:02:07:b6:af:e1:94: be:1d:dd:2a:22:e7:9e:f5:e5:ff:25:4c:37:43:74:3a:ae:95: a7:ae:dd:5a:d7:1d:0a:da:b3:65:4d:81:70:e1:78:a4:14:09: 81:f6:3d:81:b0:27:9e:58:ce:5e:0f:17:77:27:a7:6e:7e:49: 4d:c2:16:af:98:1a:a5:4e:49:3c:66:fb:39:64:7e:7c:f3:1e: ce:4f:37:29:19:b8:03:78:13:80:de:fc:c5:0a:55:cd:c9:b1: cc:dc:92:69:f9:10:9b:e2:26:49:ca:65:d0:f2:a4:2b:85:f8: 94:1d:86:ab:bf:df:60:33:d7:09:9c:ea:b5:9c:27:d5:b5:cd: ec:9a:66:65:f6:e9:0d:aa:ae:be:49:f5:84:db:35:d1:20:0b: e1:a5:6f:66 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoNTJBMDBBRTM2ODA5NjEzQTBDOTkxNUI4MkQyRUREN0Iw NDdGMDQxNjAeFw0yNTEwMTcxMDM5MzlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkODhmLTdhZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCIxEjJsIVYm6eRRfYMMHPLAiMbgKekaaVMvNMNyNxOtzhtSV+d6/mCh1cKtySF j+GXQ2EouxXUds6j/h/vf9Jmw08P6yvFt5QuPHW5CkY/QBccguvPxUKW7PCGcwZ1 A8rB/WXecUj91yfyTyCUE8pBpaCPvocTwlHQ+21EhicBjlmgEXmetQT9MKatmbIe qy0j7OLmJiZviXVXS9g9LWmMb7bYbI8zRGjOfXAmFr4vGm9HnlcgGkyJE/f5E6p3 COcswZ5CJ8SKWOEoRqts1weOLidBXrd5dQvbnT5IXhqxjHRr+VBXL3OXYxC1ilYB FXcCpgw3D2NSYc+LRdA88rcNAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUF/RgvrLZ Izpwxdr2jZwpTb0U43UwHwYDVR0jBBgwFoAUUqAK42gJYToMmRW4LS7dewR/BBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3LzA1OERENkFFQUI0 NTExRjA4NDNEMDY1N0M0RjlBRTAyL1VxQUs0MmdKWVRvTW1SVzRMUzdkZXdSX0JC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXFBSzQyZ0pZVG9NbVJXNExTN2Rld1JfQkJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzRBNy8wNThERDZBRUFCNDUxMUYwODQzRDA2NTdDNEY5QUUwMi85NENFQkZGRUFC NDUxMUYwOUFBMEM0NThDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32OMAwDQYJKoZIhvcNAQELBQADggEBAC1Si6BTpQ3imtbPlzq/ JQzd71271jVYCTEow5vHPJekrkRoyWWRlJlEG78lkt/M6lDHPPALZoSkYwmZbWxI x0pYOaaxFySIQ8CCThw3m1bCZorc/oyRl0ByLX+XnoBj+DqoKzxWggIHtq/hlL4d 3Soi55715f8lTDdDdDqulaeu3VrXHQras2VNgXDheKQUCYH2PYGwJ55Yzl4PF3cn p25+SU3CFq+YGqVOSTxm+zlkfnzzHs5PNykZuAN4E4De/MUKVc3Jsczckmn5EJvi JknKZdDypCuF+JQdhqu/32Az1wmc6rWcJ9W1zeyaZmX26Q2qrr5J9YTbNdEgC+Gl b2Y= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:39 2026 by rpki-client