$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/4D189DD4728311EFA9CECE43C4F9AE02.roa File: 4D189DD4728311EFA9CECE43C4F9AE02.roa (raw, json) Hash identifier: kAqPZtki24rgmBDLYUdp+jfh5na7uf15IRdmD6VOLXc= Subject key identifier: B8:F5:D4:32:08:BA:64:BC:0E:6B:BA:E9:19:34:D1:AB:93:D4:F7:EC Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: 0139 Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/4D189DD4728311EFA9CECE43C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:07:43 +0000 ROA not before: Tue 13 Jan 2026 04:23:16 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152317 IP address blocks: 2401:b760::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Jan 13 04:23:16 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41dff-c0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:0c:a0:d8:7e:36:65:bb:41:90:f9:2c:69: 61:4c:00:59:3a:6d:6d:f6:6b:de:ab:c0:ad:19:35: 56:fd:a6:ad:d1:51:eb:ae:b0:d3:70:9c:2a:23:f6: 8e:8a:a9:aa:c6:d5:55:ee:ee:32:be:19:c6:19:4d: 41:ac:c4:ca:44:42:58:c3:a5:7c:3a:fb:e5:c0:1d: 43:e1:a8:fc:b4:f7:51:4a:30:a1:ea:ed:90:3a:e0: 03:9f:e0:05:7a:da:57:f9:73:2d:ef:05:26:31:86: be:22:f4:8e:d6:d6:1d:5b:c4:64:6f:4a:01:e1:70: bc:c0:a6:dd:14:2a:48:c5:f8:6b:bc:00:4e:a8:6b: 07:f5:d5:71:8f:15:7d:5f:f6:e8:71:10:e9:b6:29: 6d:8f:1d:c0:f7:8e:87:69:6b:d5:8d:c2:4b:3b:03: d3:af:66:e6:c2:31:bc:00:3f:c3:30:3e:9c:9f:20: 3e:0f:dc:50:27:a0:86:c5:db:96:48:b1:9b:5f:94: 05:5a:f3:1b:0f:a3:02:43:97:87:f4:61:af:19:46: 2e:ac:4a:18:6a:39:0c:8c:d8:bb:9d:da:8b:a6:e5: 4d:d0:c4:f3:02:3f:a7:93:7c:28:00:3c:da:1d:ab: 5e:ba:0c:00:0a:6d:52:1e:14:3a:b0:18:7e:d2:80: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:D4:32:08:BA:64:BC:0E:6B:BA:E9:19:34:D1:AB:93:D4:F7:EC X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/4D189DD4728311EFA9CECE43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:b760::/32 Signature Algorithm: sha256WithRSAEncryption 38:80:ea:d5:cc:95:dc:b6:cf:1b:4e:08:96:a1:fd:55:86:21: bf:c3:df:d3:33:05:71:76:e4:8b:25:95:cd:8b:57:22:68:0c: 4a:32:c0:ef:5f:a2:cd:f8:02:f2:0e:11:1c:7b:25:35:72:0a: 50:91:5a:51:0b:c5:a8:41:7f:6f:18:92:6a:04:b4:b0:23:bf: 5f:d1:29:d7:34:68:10:e6:f7:f3:4e:93:6d:37:eb:b4:2e:4b: 42:f6:8c:2f:50:79:0e:a9:ee:33:8c:04:99:86:b7:30:5d:74: c4:ce:8c:75:7c:f2:27:c3:52:36:78:a4:04:fc:33:c6:a1:77: a7:b6:08:a9:c0:a5:5c:f0:f3:bc:b8:32:94:b1:68:7f:6e:25: f4:14:56:94:8e:8b:3c:08:a8:65:17:f2:4b:23:7b:1d:28:de: a3:4d:69:7b:f2:c0:86:49:21:68:50:59:ab:17:16:86:b5:dc: 62:ab:ec:c9:3b:0e:4f:9f:30:1f:3a:97:73:3f:4f:e6:6f:f9: 00:e5:47:8a:d8:bf:25:a5:28:47:0d:5c:97:ab:56:ae:16:d2: 4a:f8:d0:cb:54:f1:77:5f:d0:0f:dc:c3:70:98:c8:cf:f9:dc: bc:88:29:eb:2b:d8:59:e2:0f:ef:ef:f4:a1:ad:59:3c:b7:5d: c0:6e:41:56 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjYwMTEzMDQyMzE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWRmZi1jMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxgMoNh+NmW7QZD5LGlhTABZOm1t9mveq8CtGTVW/aat0VHrrrDTcJwqI/aO iqmqxtVV7u4yvhnGGU1BrMTKREJYw6V8OvvlwB1D4aj8tPdRSjCh6u2QOuADn+AF etpX+XMt7wUmMYa+IvSO1tYdW8Rkb0oB4XC8wKbdFCpIxfhrvABOqGsH9dVxjxV9 X/bocRDptiltjx3A946HaWvVjcJLOwPTr2bmwjG8AD/DMD6cnyA+D9xQJ6CGxduW SLGbX5QFWvMbD6MCQ5eH9GGvGUYurEoYajkMjNi7ndqLpuVN0MTzAj+nk3woADza HateugwACm1SHhQ6sBh+0oC0zwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFLj11DII umS8Dmu66Rk00auT1PfsMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VFODUvMDVBN0NFNjg0NUFFMTFFRkI0MzVFQjZGQzRGOUFFMDIvNEQxODlERDQ3 MjgzMTFFRkE5Q0VDRTQzQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAG3YDANBgkqhkiG9w0BAQsFAAOCAQEAOIDq1cyV3LbPG04IlqH9 VYYhv8Pf0zMFcXbkiyWVzYtXImgMSjLA71+izfgC8g4RHHslNXIKUJFaUQvFqEF/ bxiSagS0sCO/X9Ep1zRoEOb3806TbTfrtC5LQvaML1B5DqnuM4wEmYa3MF10xM6M dXzyJ8NSNnikBPwzxqF3p7YIqcClXPDzvLgylLFof24l9BRWlI6LPAioZRfySyN7 HSjeo01pe/LAhkkhaFBZqxcWhrXcYqvsyTsOT58wHzqXcz9P5m/5AOVHiti/JaUo Rw1cl6tWrhbSSvjQy1Txd1/QD9zDcJjIz/ncvIgp6yvYWeIP7+/0oa1ZPLddwG5B Vg== -----END CERTIFICATE-----Generated at Mon Mar 2 08:13:28 2026 by rpki-client