$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/8FD0B12E400311EEBF5A8B52C4F9AE02.roa File: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (raw, json) Hash identifier: p9RVi+s1ILV3mpgFASP2Wwedaky8oSfRWWEMGENRGTk= Subject key identifier: 02:C0:05:CD:5C:BD:76:B7:D5:D9:7D:24:77:37:EE:F8:50:C8:EE:B4 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 04CC Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/8FD0B12E400311EEBF5A8B52C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:57:57 +0000 ROA not before: Fri 07 Mar 2025 00:46:08 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 216452 IP address blocks: 2400:54a0:2120::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Mar 7 00:46:08 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a47e25-9f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:f9:d8:af:5c:ef:13:d5:70:c0:b9:49:1c: 47:4a:15:a1:48:21:2e:95:a2:c7:1a:2f:b1:b2:8b: 56:5a:a5:1b:bb:c4:eb:9f:09:55:01:95:81:1f:04: 9d:bf:fb:dd:d9:ea:0f:0b:dc:d7:0c:7c:a5:06:e4: 1e:5d:42:fa:d8:55:b0:ba:ae:43:b6:0b:66:66:86: 11:7a:48:5f:50:a3:2b:5b:df:5b:1c:fc:57:a0:f3: 56:bd:78:41:b0:0b:26:4b:a1:bc:23:7e:cb:2c:b9: 94:8a:34:8a:c9:ac:a9:6a:34:45:ce:e2:65:a0:87: e3:eb:bf:ca:7d:3f:da:d1:83:64:18:2a:70:9d:4e: 4d:71:b0:4b:66:5d:46:fd:4a:b1:bb:12:f6:08:c1: 4a:a7:10:19:cb:25:a8:9e:97:45:98:17:33:28:1f: c8:26:d2:4c:f2:22:1d:fd:5e:1d:c3:ca:c9:65:f7: 46:f2:72:ac:03:3f:64:03:0b:7a:90:ab:93:8f:dd: 5e:f5:0c:5e:1e:09:37:d8:88:78:54:43:23:5f:2e: e4:1c:f3:f1:1f:c6:50:32:90:31:c2:e8:d4:73:57: bc:bb:9e:24:c0:16:9c:ea:2a:b6:4c:1e:80:2f:96: da:b9:b0:20:46:13:3e:bb:ed:89:a1:d7:7a:0e:d3: 07:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:05:CD:5C:BD:76:B7:D5:D9:7D:24:77:37:EE:F8:50:C8:EE:B4 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/8FD0B12E400311EEBF5A8B52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:54a0:2120::/44 Signature Algorithm: sha256WithRSAEncryption 18:c6:05:23:2b:c0:f8:75:12:4b:1e:49:2a:a8:e4:a8:3c:2f: 68:38:dc:f1:8b:77:50:52:cd:1d:f0:ea:6b:f6:76:0b:70:3e: 55:05:a3:1e:71:35:84:55:87:e1:d3:5d:0a:69:51:18:ca:b3: 12:64:56:3b:ae:e4:30:c3:d9:9c:b1:6f:ef:5e:0a:3a:98:bc: 9e:a1:25:8a:63:49:43:81:da:eb:60:f4:63:c6:e4:9c:fb:1f: b6:03:c4:f6:e0:42:3f:dd:cc:1a:95:16:e0:23:30:71:8a:83: 36:01:02:1a:47:f4:1f:91:73:df:e2:05:eb:cb:a8:75:82:c2: 5f:f7:ed:0e:1e:21:b9:6b:95:9b:68:23:8a:3b:4c:eb:f8:5e: c1:f6:22:26:b8:7e:fc:be:ab:3a:46:05:ad:13:44:2b:dc:e2: 63:e5:70:ad:dd:95:d8:52:62:94:e5:a6:c2:da:29:0c:1a:5b: b8:27:47:b5:76:89:22:77:34:bf:ae:a1:54:f0:a1:94:af:76: a7:e9:33:85:6b:30:e3:b2:52:48:8f:4a:f3:83:0c:5d:72:2f: ae:b8:ff:ec:f8:67:8d:3d:9b:63:41:78:5c:40:22:91:a2:f4: ff:98:44:fa:1a:ba:83:ed:e0:2b:af:d2:cd:70:1d:b6:8c:bc: e4:95:35:95 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUwMzA3MDA0NjA4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2UyNS05ZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI/52K9c7xPVcMC5SRxHShWhSCEulaLHGi+xsotWWqUbu8TrnwlVAZWBHwSd v/vd2eoPC9zXDHylBuQeXUL62FWwuq5DtgtmZoYRekhfUKMrW99bHPxXoPNWvXhB sAsmS6G8I37LLLmUijSKyaypajRFzuJloIfj67/KfT/a0YNkGCpwnU5NcbBLZl1G /UqxuxL2CMFKpxAZyyWonpdFmBczKB/IJtJM8iId/V4dw8rJZfdG8nKsAz9kAwt6 kKuTj91e9QxeHgk32Ih4VEMjXy7kHPPxH8ZQMpAxwujUc1e8u54kwBac6iq2TB6A L5baubAgRhM+u+2Jodd6DtMHYQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFALABc1c vXa31dl9JHc37vhQyO60MB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUxQTAvN0M1MzkxMEM3Rjg0MTFFQzgwNTE4RTUxQzRGOUFFMDIvOEZEMEIxMkU0 MDAzMTFFRUJGNUE4QjUyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcEJABUoCEgMA0GCSqGSIb3DQEBCwUAA4IBAQAYxgUjK8D4dRJLHkkq qOSoPC9oONzxi3dQUs0d8Opr9nYLcD5VBaMecTWEVYfh010KaVEYyrMSZFY7ruQw w9mcsW/vXgo6mLyeoSWKY0lDgdrrYPRjxuSc+x+2A8T24EI/3cwalRbgIzBxioM2 AQIaR/QfkXPf4gXry6h1gsJf9+0OHiG5a5WbaCOKO0zr+F7B9iImuH78vqs6RgWt E0Qr3OJj5XCt3ZXYUmKU5abC2ikMGlu4J0e1dokidzS/rqFU8KGUr3an6TOFazDj slJIj0rzgwxdci+uuP/s+GeNPZtjQXhcQCKRovT/mET6GrqD7eArr9LNcB22jLzk lTWV -----END CERTIFICATE-----Generated at Mon Mar 2 02:31:57 2026 by rpki-client