$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa File: 02389B7670E811EFA8DBE571C4F9AE02.roa (raw, json) Hash identifier: cly4cYutElaX5qSNdsfUH5zLjhQKkS1wrfF7eYDZnn4= Subject key identifier: A2:C4:21:3C:CB:A9:38:CE:CD:5E:65:11:FE:F4:90:76:8D:07:82:E1 Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: 011B Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:26:22 +0000 ROA not before: Wed 17 Dec 2025 05:24:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133453 IP address blocks: 2001:df4:4340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Dec 17 05:24:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a43e7d-03f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:7a:1a:89:ba:dc:cd:fd:30:30:4b:cc:cc: fa:9d:91:1e:5b:fe:95:e1:a9:61:d3:75:b5:c5:42: b4:68:57:8e:f5:f8:fe:19:52:14:23:d3:5c:a3:d4: 96:8f:08:3d:01:b1:fc:09:46:5f:65:b5:9d:3a:25: e4:63:f9:59:7c:6b:25:ec:2e:7a:69:02:c3:b1:9c: 15:e5:43:ab:3a:db:02:82:f3:c5:09:90:d8:54:67: ba:bb:a8:e5:13:dd:9f:1c:35:ee:a1:ff:8c:5d:12: 50:bc:42:6a:47:08:5c:c8:30:75:61:f4:1e:cd:3b: 09:16:c5:90:5a:7f:08:61:d5:c5:34:91:36:3f:fe: 9d:8b:2d:22:57:b0:a9:76:e2:0c:0b:b6:43:36:38: a9:86:7f:db:7f:85:eb:92:d3:6e:23:5b:d1:b4:bd: 54:0c:6d:5e:d9:e3:2f:44:98:da:bf:51:c4:3d:4e: 42:74:ac:01:5d:2f:83:b8:0c:de:7c:cb:95:39:bc: 0f:74:f0:18:42:58:81:b2:1e:f4:83:bb:26:8a:b8: 11:1f:df:00:21:dc:f7:e9:34:77:7f:22:62:f9:f7: a2:cf:2d:31:7c:2f:b3:8b:18:92:83:ba:bd:bc:6f: ed:2c:29:9f:a9:a0:10:3f:31:7a:e5:90:f6:9b:ea: e8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C4:21:3C:CB:A9:38:CE:CD:5E:65:11:FE:F4:90:76:8D:07:82:E1 X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:4340::/48 Signature Algorithm: sha256WithRSAEncryption c8:38:c2:2b:df:b6:5e:76:01:2d:0c:86:40:2b:ec:d3:f5:3e: a7:81:36:0f:15:06:13:02:c4:0b:28:22:ba:1b:e7:c7:d5:3e: ad:cf:a5:91:05:b7:54:8e:55:cb:57:78:91:33:44:40:5d:d5: f1:5d:eb:87:d3:7a:62:dc:67:8a:76:c3:78:9f:de:fa:fb:64: a6:47:c3:6d:ca:c5:dc:f9:9a:fb:39:2d:fe:c4:73:ed:6c:8b: 6f:73:29:6d:bf:90:4f:01:b9:54:5d:21:ff:c8:a1:f7:23:d1: f8:c3:94:1b:07:b7:36:fa:10:f8:f1:a7:da:9d:ad:c5:ae:41: ec:99:d5:06:99:d9:e7:af:e0:be:06:d3:fd:85:ed:25:24:dd: 34:3c:7a:48:69:dd:c6:5c:00:6f:dc:b4:d4:00:e2:f1:f9:55: 4b:dd:c5:05:3a:9f:19:22:40:99:64:87:7f:ef:77:f5:fc:83: ea:5a:10:29:94:fb:7d:60:b0:e6:47:ce:a1:f6:40:e2:af:01: 85:01:ce:ce:e2:09:53:d2:95:9b:b1:9a:af:0e:81:e0:20:04: 63:fb:07:33:fe:29:66:18:9b:f5:f4:8f:16:e3:be:49:49:50: fc:e5:2d:63:bd:3a:80:9a:f0:ff:bb:fa:0b:ab:5e:77:65:09: 61:d4:47:89 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjUxMjE3MDUyNDA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2U3ZC0wM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvF6Gom63M39MDBLzMz6nZEeW/6V4alh03W1xUK0aFeO9fj+GVIUI9Nco9SW jwg9AbH8CUZfZbWdOiXkY/lZfGsl7C56aQLDsZwV5UOrOtsCgvPFCZDYVGe6u6jl E92fHDXuof+MXRJQvEJqRwhcyDB1YfQezTsJFsWQWn8IYdXFNJE2P/6diy0iV7Cp duIMC7ZDNjiphn/bf4XrktNuI1vRtL1UDG1e2eMvRJjav1HEPU5CdKwBXS+DuAze fMuVObwPdPAYQliBsh70g7smirgRH98AIdz36TR3fyJi+feizy0xfC+zixiSg7q9 vG/tLCmfqaAQPzF65ZD2m+roYwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKLEITzL qTjOzV5lEf70kHaNB4LhMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBNUIvNTgwMDRBQUE3MEU3MTFFRkI0NDRBRjcwQzRGOUFFMDIvMDIzODlCNzY3 MEU4MTFFRkE4REJFNTcxQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9ENAMA0GCSqGSIb3DQEBCwUAA4IBAQDIOMIr37ZedgEtDIZA K+zT9T6ngTYPFQYTAsQLKCK6G+fH1T6tz6WRBbdUjlXLV3iRM0RAXdXxXeuH03pi 3GeKdsN4n976+2SmR8NtysXc+Zr7OS3+xHPtbItvcyltv5BPAblUXSH/yKH3I9H4 w5QbB7c2+hD48afana3FrkHsmdUGmdnnr+C+BtP9he0lJN00PHpIad3GXABv3LTU AOLx+VVL3cUFOp8ZIkCZZId/73f1/IPqWhAplPt9YLDmR86h9kDirwGFAc7O4glT 0pWbsZqvDoHgIARj+wcz/ilmGJv19I8W475JSVD85S1jvTqAmvD/u/oLq153ZQlh 1EeJ -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:15 2026 by rpki-client