$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/B579952EEBB311EEAF9E7718C4F9AE02.roa File: B579952EEBB311EEAF9E7718C4F9AE02.roa (raw, json) Hash identifier: n0kbOHx+gPXiGTq+IGpjHWC7Py7vTKNeDF+pdKlyCFA= Subject key identifier: 01:BE:FB:7F:BF:B2:33:06:B0:A6:4C:25:B2:8B:BF:01:5F:AA:02:47 Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D62 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/B579952EEBB311EEAF9E7718C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:22:23 +0000 ROA not before: Tue 08 Apr 2025 18:27:01 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135019 IP address blocks: 2400:b140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3426 (0xd62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Apr 8 18:27:01 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69a4054f-6017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:dd:66:64:58:15:d1:5d:c2:0f:c1:61:93: 98:02:9a:39:96:6f:cf:ed:4c:db:c2:5e:72:7c:ab: ee:9f:e6:1a:d6:d8:b4:ed:9c:23:43:dd:a4:91:21: 90:af:d9:13:19:04:b8:03:31:17:dc:68:06:59:c3: fb:0c:03:74:9b:49:e7:78:7c:5f:f4:38:58:c3:91: ff:01:e0:f7:3e:19:1b:11:61:25:3d:44:2a:ef:53: 5e:71:4e:00:4c:a1:3b:9d:a6:dc:b9:f1:0f:a5:00: f9:77:73:27:66:b1:ae:04:85:34:37:8b:cc:b4:31: fd:fb:70:b2:14:d5:f7:84:88:35:44:45:d3:28:63: 68:90:19:5a:f1:79:05:e8:f0:30:89:dc:62:9b:06: 4d:ea:28:e9:ca:4d:30:0c:39:8e:1a:d5:58:c2:b6: e0:14:2d:2e:e8:ea:73:9f:e4:11:97:5b:dd:6c:18: 9d:9c:ab:a4:c1:e7:64:4e:a7:03:88:1e:03:ac:2d: 3b:27:46:c4:5a:2d:73:18:18:16:37:47:8a:9b:17: 7c:e4:a2:ca:4a:ef:d4:6d:db:76:3b:aa:e5:83:1e: 44:08:f7:27:2d:30:26:56:53:c4:47:d8:dc:6f:26: 0a:f4:0a:72:77:d8:e9:e9:2b:3b:90:13:14:81:1f: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BE:FB:7F:BF:B2:33:06:B0:A6:4C:25:B2:8B:BF:01:5F:AA:02:47 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/B579952EEBB311EEAF9E7718C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:b140::/32 Signature Algorithm: sha256WithRSAEncryption 24:27:d4:c4:ae:ed:d4:e7:0f:34:55:d2:61:05:17:3c:1a:76: 13:3d:b4:07:a4:a9:b1:63:8d:a3:5f:68:52:90:90:16:87:93: be:55:0f:45:58:8e:25:9d:5b:fc:8a:1d:d1:4a:a7:55:42:cf: e9:0c:51:93:c5:d3:3d:f3:24:4a:27:bb:67:07:bf:6b:8d:42: 25:6b:b9:1a:90:b0:4a:f7:bd:94:db:4d:b7:0e:4d:c6:91:7f: 62:8f:da:a7:05:2e:89:5a:8b:04:d2:53:9c:46:b3:e1:ed:ea: 25:fb:67:24:8a:63:ad:da:d6:96:53:f1:1b:fd:34:ae:93:be: 25:c9:78:16:1b:78:04:db:c0:41:fe:df:93:1d:09:19:9c:43: 8a:a8:97:0a:30:70:68:12:0c:dd:cf:9b:62:c1:a9:b2:ed:28: 9f:8c:38:74:d8:55:f7:0c:3f:82:05:b6:e4:af:dd:a6:11:f8: c7:38:7f:ee:1d:5e:9a:4b:1b:72:4d:f5:36:66:f0:89:4c:2c: bd:7e:7e:23:c8:c2:7b:b9:5b:e3:a6:b3:da:6a:59:e1:be:a7: 59:a7:e7:dd:7a:50:db:62:f9:b3:ad:7d:eb:c5:c3:d2:28:fd: 46:e7:4c:36:d0:6a:42:0e:fe:45:f5:9c:03:14:31:38:87:36: 19:50:06:53 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICDWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUwNDA4MTgyNzAxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDU0Zi02MDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjTdZmRYFdFdwg/BYZOYApo5lm/P7Uzbwl5yfKvun+Ya1ti07ZwjQ92kkSGQ r9kTGQS4AzEX3GgGWcP7DAN0m0nneHxf9DhYw5H/AeD3PhkbEWElPUQq71NecU4A TKE7nabcufEPpQD5d3MnZrGuBIU0N4vMtDH9+3CyFNX3hIg1REXTKGNokBla8XkF 6PAwidximwZN6ijpyk0wDDmOGtVYwrbgFC0u6Opzn+QRl1vdbBidnKukwedkTqcD iB4DrC07J0bEWi1zGBgWN0eKmxd85KLKSu/Ubdt2O6rlgx5ECPcnLTAmVlPER9jc byYK9Apyd9jp6Ss7kBMUgR+GqQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFAG++3+/ sjMGsKZMJbKLvwFfqgJHMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y4M0YvODkyMzhFQ0NFRjRGMTFFOTlERTQ3RjBDQzRGOUFFMDIvQjU3OTk1MkVF QkIzMTFFRUFGOUU3NzE4QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJACxQDANBgkqhkiG9w0BAQsFAAOCAQEAJCfUxK7t1OcPNFXSYQUX PBp2Ez20B6SpsWONo19oUpCQFoeTvlUPRViOJZ1b/Iod0UqnVULP6QxRk8XTPfMk Sie7Zwe/a41CJWu5GpCwSve9lNtNtw5NxpF/Yo/apwUuiVqLBNJTnEaz4e3qJftn JIpjrdrWllPxG/00rpO+Jcl4Fht4BNvAQf7fkx0JGZxDiqiXCjBwaBIM3c+bYsGp su0on4w4dNhV9ww/ggW25K/dphH4xzh/7h1emksbck31NmbwiUwsvX5+I8jCe7lb 46az2mpZ4b6nWafn3XpQ22L5s61968XD0ij9RudMNtBqQg7+RfWcAxQxOIc2GVAG Uw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:38:51 2026 by rpki-client