$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/5805D2B2EC6611F0B20AED364E6F56BC.roa File: 5805D2B2EC6611F0B20AED364E6F56BC.roa (raw, json) Hash identifier: W29eQt3kZ7s7btLowGFJ4BGvtMBWOti0sq35IiRBTcU= Subject key identifier: E8:15:A2:6C:57:DA:DB:F6:F0:C0:6E:F2:CA:A7:64:21:72:55:76:FB Certificate issuer: /CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE Certificate serial: 0113 Authority key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/5805D2B2EC6611F0B20AED364E6F56BC.roa Signing time: Sun 01 Mar 2026 17:17:47 +0000 ROA not before: Thu 08 Jan 2026 07:47:56 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153312 IP address blocks: 2401:c060::/32 maxlen: 40 2401:c060::/44 maxlen: 52 2401:c060:1000::/44 maxlen: 52 2401:c060:1010::/44 maxlen: 52 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE Validity Not Before: Jan 8 07:47:56 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a474bb-1e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:b8:f3:59:c7:de:0b:af:be:3e:14:84:67: 08:7a:0d:f3:45:e9:d4:0c:b0:35:e1:87:17:c0:c1: 68:15:db:95:d1:bd:1c:57:af:8f:15:96:0f:c8:f7: 51:06:41:ea:97:9b:4d:2d:81:04:ff:b8:12:51:ab: 01:32:cc:3e:ba:ce:0c:4a:0a:19:38:b3:79:9c:89: 98:65:80:8a:3d:27:00:0b:5e:7a:85:49:cc:fa:1c: bc:98:59:f6:56:2f:f5:b7:9b:29:38:4b:1f:c9:69: 97:46:0a:fd:ec:c7:75:93:b9:9d:16:93:0b:7f:96: 74:08:30:8d:7a:83:54:a8:ea:35:c5:99:2e:af:9b: cf:99:2a:c0:98:79:8c:56:cd:fb:4a:f6:22:2e:af: 64:a9:3f:85:f9:0f:40:5c:a9:47:1c:a3:da:7d:9e: 5d:fa:4c:58:f4:bd:dd:f1:7a:d7:c0:2c:e0:95:f7: 42:e5:46:a4:f9:61:bc:e5:06:d7:10:32:f1:6b:ca: c2:87:3b:48:88:16:b1:ac:97:a0:a7:f6:a9:f2:dd: c8:c7:f9:71:bd:9c:1e:ab:32:ac:04:fc:02:b7:39: 98:b2:c2:55:b4:3a:78:57:f2:15:3a:ae:0c:26:f2: c1:60:8d:19:85:b7:72:f2:03:55:1a:53:d6:19:1d: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:15:A2:6C:57:DA:DB:F6:F0:C0:6E:F2:CA:A7:64:21:72:55:76:FB X509v3 Authority Key Identifier: keyid:15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/5805D2B2EC6611F0B20AED364E6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2401:c060::/32 Signature Algorithm: sha256WithRSAEncryption 78:14:ae:c1:80:bd:61:20:83:05:1f:aa:c9:5e:8f:70:dd:d8: 1c:69:43:8b:ef:42:ba:54:8b:dc:2e:c9:9d:69:a7:1d:3b:48: 38:47:54:ab:1a:e5:de:02:27:4d:4d:a9:9c:a8:f6:be:c5:d4: 30:33:d0:85:b8:65:48:90:5c:49:b4:ef:c4:36:5f:a4:4b:a9: 8d:02:f4:43:26:a2:8d:32:11:14:ec:84:13:b0:bb:a1:71:ee: b9:ef:68:cb:1e:e5:30:cd:22:db:5b:a6:4a:da:ab:3c:0a:2c: e6:f4:f3:e7:3f:97:97:3a:43:ec:e2:7f:b0:46:ac:92:f5:47: 2a:1c:b1:2a:0a:8c:9e:7d:c1:dc:dc:c4:fb:6b:48:8c:8e:d3: 95:8b:61:88:7f:49:9e:93:a8:c6:19:7a:39:14:41:33:18:f1: 11:27:b6:0a:3f:f8:e7:d7:e9:46:4a:d2:3e:00:0e:26:29:33: 85:4a:b6:84:35:10:86:e2:d1:17:87:59:4e:69:15:3d:c3:f9: 2d:b1:58:a1:be:72:49:71:05:59:26:8b:07:7d:9a:59:04:b7: f4:10:33:a9:a1:40:d6:27:4b:b3:a3:4d:d0:05:01:bb:df:5a: a6:60:4f:84:ab:b4:b3:e0:c2:e1:56:79:18:43:2c:5b:f1:86: 4b:b8:55:cf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKDE1NDhGMTA5NUYxRTBGOUI3ODRCMUI3RkREOEYwRTc1 OUM4NDJERkUwHhcNMjYwMTA4MDc0NzU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRiYi0xZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBe481nH3guvvj4UhGcIeg3zRenUDLA14YcXwMFoFduV0b0cV6+PFZYPyPdR BkHql5tNLYEE/7gSUasBMsw+us4MSgoZOLN5nImYZYCKPScAC156hUnM+hy8mFn2 Vi/1t5spOEsfyWmXRgr97Md1k7mdFpMLf5Z0CDCNeoNUqOo1xZkur5vPmSrAmHmM Vs37SvYiLq9kqT+F+Q9AXKlHHKPafZ5d+kxY9L3d8XrXwCzglfdC5Uak+WG85QbX EDLxa8rChztIiBaxrJegp/ap8t3Ix/lxvZweqzKsBPwCtzmYssJVtDp4V/IVOq4M JvLBYI0Zhbdy8gNVGlPWGR0WPQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFOgVomxX 2tv28MBu8sqnZCFyVXb7MB8GA1UdIwQYMBaAFBVI8QlfHg+beEsbf92PDnWchC3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80QTBGRkE5NjhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9GVWp4Q1Y4ZUQ1dDRTeHRfM1k4T2RaeUVM ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVanhDVjhlRDV0NFN4dF8zWThPZFp5RUxmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJGMEMvNEEwRkZBOTY4QzVCMTFFRkE3MDY3NTdGQzRGOUFFMDIvNTgwNUQyQjJF QzY2MTFGMEIyMEFFRDM2NEU2RjU2QkMucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAHAYDANBgkqhkiG9w0BAQsFAAOCAQEAeBSuwYC9YSCDBR+qyV6P cN3YHGlDi+9CulSL3C7JnWmnHTtIOEdUqxrl3gInTU2pnKj2vsXUMDPQhbhlSJBc SbTvxDZfpEupjQL0QyaijTIRFOyEE7C7oXHuue9oyx7lMM0i21umStqrPAos5vTz 5z+XlzpD7OJ/sEaskvVHKhyxKgqMnn3B3NzE+2tIjI7TlYthiH9JnpOoxhl6ORRB MxjxESe2Cj/459fpRkrSPgAOJikzhUq2hDUQhuLRF4dZTmkVPcP5LbFYob5ySXEF WSaLB32aWQS39BAzqaFA1idLs6NN0AUBu99apmBPhKu0s+DC4VZ5GEMsW/GGS7hV zw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:54:56 2026 by rpki-client