$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa File: 610856EC638A11F08BC2A840C4F9AE02.roa (raw, json) Hash identifier: hFVkKE+Qi5ASFcR8wJP4hxF2ONROpTw8ANjmt7CoeCQ= Subject key identifier: B8:9C:9C:4F:94:60:FB:09:A0:1B:32:E1:20:22:02:5D:45:08:BC:2D Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Certificate serial: 0D24 Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:28:44 +0000 ROA not before: Thu 04 Dec 2025 17:59:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132680 IP address blocks: 2407:e700:1::/48 maxlen: 48 2407:e700:2::/48 maxlen: 48 2407:e700:3::/48 maxlen: 48 2407:e700:12::/48 maxlen: 48 2407:e700:13::/48 maxlen: 48 2407:e700:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3364 (0xd24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Validity Not Before: Dec 4 17:59:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4693c-c0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:a5:b3:3b:d0:09:17:cf:f8:e5:8e:79:06: ae:87:b9:5c:ec:31:02:f3:b1:6f:98:f3:ba:28:7c: 6d:54:b0:ac:0d:fe:ea:c6:a8:67:b5:1f:05:5f:0a: 56:cd:a9:bf:aa:f6:32:70:c6:59:bf:48:a3:9a:d1: 70:73:1b:f0:11:bc:0e:e5:4d:b7:c6:ad:61:58:9c: aa:3e:09:ad:fe:45:c4:5e:92:e8:ef:0b:02:fa:e6: d2:f1:ef:e4:94:67:18:ab:d6:b3:c3:25:76:97:9c: 9b:0e:ce:6f:05:ee:82:f2:10:e3:00:8a:11:8c:f5: a2:3a:7f:79:9c:5f:11:b5:0b:de:c0:67:45:9f:41: c9:58:6c:8e:df:34:51:52:4a:fa:20:a1:3e:ef:0c: 07:d9:f5:05:de:44:52:b9:5d:82:3f:7f:e5:f7:d6: 2b:19:b8:10:82:ab:2c:15:fa:c6:17:8f:c4:79:34: c6:90:b7:05:37:7f:be:79:cb:e6:28:d6:90:fa:c8: 9d:b8:7d:68:66:98:ab:c4:d8:0f:da:ed:74:5b:c7: f8:15:07:d5:10:96:f2:f7:c0:e2:64:72:ec:24:38: 20:8b:d5:ae:96:fb:fc:88:a1:7a:4f:17:d6:2e:b7: a1:43:82:97:63:6b:ca:90:06:e2:3b:ff:fe:6b:3e: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9C:9C:4F:94:60:FB:09:A0:1B:32:E1:20:22:02:5D:45:08:BC:2D X509v3 Authority Key Identifier: keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:e700:1::-2407:e700:3:ffff:ffff:ffff:ffff:ffff 2407:e700:12::/47 2407:e700:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 2f:18:39:34:40:7a:14:25:3e:95:6d:55:eb:d9:f6:a9:45:db: ef:1c:cd:54:af:e1:e3:66:07:0e:17:83:3f:47:3b:15:dd:32: 95:5a:47:1c:aa:98:66:2f:57:6f:55:80:12:b2:32:01:d2:4f: 4b:bd:b5:7a:c5:23:5d:08:85:85:57:6c:0a:cf:cd:89:df:46: 88:28:f1:9b:9d:b5:32:5a:93:22:ce:ef:64:cd:55:c8:78:4c: 46:f3:97:ca:4a:e1:92:50:13:d4:ab:33:29:bd:52:bd:be:ea: 0e:4b:ca:14:89:5b:d1:33:2c:bf:a1:b4:9d:23:40:7e:30:8d: 13:81:58:4c:c5:84:de:d4:2d:47:b4:93:c2:3e:2d:96:88:37: df:9f:af:b0:a3:f8:34:06:ed:2e:7f:da:fa:f9:f4:8c:66:be: c1:2d:8f:1e:51:67:d4:d6:d3:bf:4a:d8:1b:ea:31:1a:d4:d3: e7:9c:e6:85:41:7a:f8:29:fe:03:cd:1f:80:f3:2d:7d:16:f9: f7:b7:4c:ed:7a:a7:d5:88:b8:3e:e4:35:76:33:a4:7d:16:a7: 54:db:5e:43:14:36:40:b3:7f:c4:70:0e:34:9f:2c:f5:07:69: 07:e3:39:94:44:a0:19:f7:46:9e:7e:23:08:08:12:98:88:23: 88:2d:26:1f -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICDSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy QzM4OEIxMEMwHhcNMjUxMjA0MTc1OTAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjkzYy1jMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7ylszvQCRfP+OWOeQauh7lc7DEC87FvmPO6KHxtVLCsDf7qxqhntR8FXwpW zam/qvYycMZZv0ijmtFwcxvwEbwO5U23xq1hWJyqPgmt/kXEXpLo7wsC+ubS8e/k lGcYq9azwyV2l5ybDs5vBe6C8hDjAIoRjPWiOn95nF8RtQvewGdFn0HJWGyO3zRR Ukr6IKE+7wwH2fUF3kRSuV2CP3/l99YrGbgQgqssFfrGF4/EeTTGkLcFN3++ecvm KNaQ+siduH1oZpirxNgP2u10W8f4FQfVEJby98DiZHLsJDggi9Wulvv8iKF6TxfW LrehQ4KXY2vKkAbiO//+az774wIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFLicnE+U YPsJoBsy4SAiAl1FCLwtMB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzQTMvMjA5MURDOEUwNTAxMTFFQUJEOUIyMDJDQzRGOUFFMDIvNjEwODU2RUM2 MzhBMTFGMDhCQzJBODQwQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAAjAmMBIDBwAkB+cAAAEDBwIkB+cAAAADBwEkB+cAABIDBwAkB+cA//4wDQYJ KoZIhvcNAQELBQADggEBAC8YOTRAehQlPpVtVevZ9qlF2+8czVSv4eNmBw4Xgz9H OxXdMpVaRxyqmGYvV29VgBKyMgHST0u9tXrFI10IhYVXbArPzYnfRogo8ZudtTJa kyLO72TNVch4TEbzl8pK4ZJQE9SrMym9Ur2+6g5LyhSJW9EzLL+htJ0jQH4wjROB WEzFhN7ULUe0k8I+LZaIN9+fr7Cj+DQG7S5/2vr59IxmvsEtjx5RZ9TW079K2Bvq MRrU0+ec5oVBevgp/gPNH4DzLX0W+fe3TO16p9WIuD7kNXYzpH0Wp1TbXkMUNkCz f8RwDjSfLPUHaQfjOZREoBn3Rp5+IwgIEpiII4gtJh8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:03 2026 by rpki-client