$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BE402F16707F11EDBD17DD28C4F9AE02.roa File: BE402F16707F11EDBD17DD28C4F9AE02.roa (raw, json) Hash identifier: WN9q7rQQBf46/jC5IO4qXkvHnVaxKh9FNi0LfFFu2KQ= Subject key identifier: 8E:B1:ED:32:1F:E4:F7:A5:38:B1:5F:4E:08:62:3B:DF:36:66:EB:F9 Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 26F0 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BE402F16707F11EDBD17DD28C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:06:05 +0000 ROA not before: Tue 02 Sep 2025 16:04:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 396986 IP address blocks: 2404:8d04:2643::/48 maxlen: 48 2404:8d04:4642::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9968 (0x26f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Sep 2 16:04:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4800c-6962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:16:05:87:83:8a:9c:6e:e8:70:3c:a3:fc: cb:f6:74:6f:34:16:db:17:b4:92:61:cf:c8:72:6a: 3a:95:99:3d:78:fc:90:ac:47:bb:2d:5b:d7:27:65: cc:38:86:6f:22:ef:4b:ca:e9:45:57:ce:76:a0:48: 2e:10:e4:3c:3d:4b:63:63:41:4c:40:e8:06:71:ed: 84:77:46:4b:e3:cd:17:28:17:64:74:fd:1a:9e:af: 1b:1f:53:8a:08:2d:5e:87:78:4d:67:85:74:6e:78: 89:92:21:24:78:21:69:14:85:8a:1f:ed:0f:4c:94: 7f:a1:05:da:d6:f3:da:5f:34:2c:3a:fd:43:39:f2: fb:7d:f0:b4:ae:ed:73:7e:8c:e8:08:c7:87:ea:8d: b6:48:89:70:aa:ee:46:f2:7f:f9:8d:7d:95:95:34: 52:d5:39:09:ca:97:d9:0b:24:1f:82:9f:aa:98:a3: 0f:7e:1b:64:cf:02:04:cc:bf:80:ca:29:42:6b:11: 92:e2:1c:2e:d4:4e:c3:23:4d:a3:3f:4a:2e:29:e9: 45:89:38:a3:ec:c1:34:57:ad:ba:c6:da:c3:32:60: 1f:60:f9:4f:41:94:3b:a2:a9:d7:ee:eb:1b:06:d0: 18:5c:3b:0e:25:5c:78:ba:7c:58:e4:ff:a6:57:3d: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:ED:32:1F:E4:F7:A5:38:B1:5F:4E:08:62:3B:DF:36:66:EB:F9 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BE402F16707F11EDBD17DD28C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2404:8d04:2643::/48 2404:8d04:4642::/48 Signature Algorithm: sha256WithRSAEncryption a8:7a:f9:64:00:59:41:e5:63:6e:7f:60:45:08:e0:8e:35:1f: b4:9a:9c:c9:20:63:56:5c:0a:f1:e4:05:3e:cd:4d:80:7b:2b: d0:05:ab:d9:f1:f6:9d:1c:4b:87:10:9d:30:e0:95:29:57:ad: 41:48:f7:44:74:e4:9c:c9:40:53:b3:09:16:18:ec:2a:06:4b: 92:29:fd:85:b3:c6:8d:62:76:5c:69:5c:1a:bc:43:e0:2c:89: bd:06:30:fc:ae:d6:cd:6f:79:76:2e:57:ee:04:e3:28:5b:ca: 5d:dd:20:d2:74:55:d7:ac:1a:30:50:60:c5:ca:c3:0b:b7:b1: 79:d9:16:4d:57:f6:d9:4d:fa:0d:c8:cc:08:7a:d2:56:72:2b: 95:76:e1:bb:21:04:be:a1:40:8f:3d:79:e3:99:71:2e:7f:17: b5:b5:a0:97:e7:76:63:55:23:41:0c:21:f5:b5:5d:b6:24:6d: 00:52:83:05:2b:4c:e2:ef:5b:4e:23:c2:7c:85:d6:ae:a9:18: f7:37:02:0c:7e:c4:5c:4d:e6:26:d4:1d:77:e0:ac:73:3b:29: 4c:62:72:cd:ef:fc:1a:cf:65:36:74:de:a7:98:32:84:b7:35: f7:fb:1e:34:af:10:3d:cd:69:ec:27:c7:ad:63:2a:e8:3b:73: 40:08:df:85 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICJvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwOTAyMTYwNDEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODAwYy02OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb4WBYeDipxu6HA8o/zL9nRvNBbbF7SSYc/Icmo6lZk9ePyQrEe7LVvXJ2XM OIZvIu9LyulFV852oEguEOQ8PUtjY0FMQOgGce2Ed0ZL480XKBdkdP0anq8bH1OK CC1eh3hNZ4V0bniJkiEkeCFpFIWKH+0PTJR/oQXa1vPaXzQsOv1DOfL7ffC0ru1z fozoCMeH6o22SIlwqu5G8n/5jX2VlTRS1TkJypfZCyQfgp+qmKMPfhtkzwIEzL+A yilCaxGS4hwu1E7DI02jP0ouKelFiTij7ME0V626xtrDMmAfYPlPQZQ7oqnX7usb BtAYXDsOJVx4unxY5P+mVz2dqQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFI6x7TIf 5PelOLFfTghiO982Zuv5MB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQkU0MDJGMTY3 MDdGMTFFREJEMTdERDI4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAJASNBCZDAwcAJASNBEZCMA0GCSqGSIb3DQEBCwUAA4IBAQCoevlk AFlB5WNuf2BFCOCONR+0mpzJIGNWXArx5AU+zU2AeyvQBavZ8fadHEuHEJ0w4JUp V61BSPdEdOScyUBTswkWGOwqBkuSKf2Fs8aNYnZcaVwavEPgLIm9BjD8rtbNb3l2 LlfuBOMoW8pd3SDSdFXXrBowUGDFysMLt7F52RZNV/bZTfoNyMwIetJWciuVduG7 IQS+oUCPPXnjmXEufxe1taCX53ZjVSNBDCH1tV22JG0AUoMFK0zi71tOI8J8hdau qRj3NwIMfsRcTeYm1B134KxzOylMYnLN7/waz2U2dN6nmDKEtzX3+x40rxA9zWns J8etYyroO3NACN+F -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:44 2026 by rpki-client