$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa File: B7D34CC444ED11EE8D931624C4F9AE02.roa (raw, json) Hash identifier: ikN5tRwLqDlsCqslEfbzVnOUPYHIszI42NOtjTWTVog= Subject key identifier: 17:A4:21:E5:16:86:95:FF:AC:34:39:B7:47:0D:8E:9D:11:66:50:45 Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 0223 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:21:11 +0000 ROA not before: Mon 11 Aug 2025 03:40:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151399 IP address blocks: 2401:920::/32 maxlen: 32 2401:920:1::/48 maxlen: 48 2401:920:2::/48 maxlen: 48 2401:920:3::/48 maxlen: 48 2401:920:4::/48 maxlen: 48 2401:920:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Aug 11 03:40:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a43d47-1dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:b5:25:06:00:86:a7:e3:f8:a2:97:d1:51: cf:6a:d9:bf:3c:d6:f4:75:b7:d9:58:15:4f:56:f0: c4:44:e5:2f:84:a1:d9:6e:ee:4c:95:2b:db:d6:bd: e5:29:8a:ef:c3:dc:d2:87:eb:c3:38:73:ab:d6:60: 79:a7:b5:35:af:fa:f4:ef:7e:9d:43:fd:13:f0:b7: 38:d4:d7:85:0e:71:7e:c8:36:1b:00:19:c3:64:72: 19:3f:59:04:30:62:1d:0c:98:37:b9:cf:7c:20:a7: 17:4d:13:c6:d5:8f:82:44:8a:25:36:f7:bf:73:13: 6b:22:fa:d7:a9:58:34:b5:11:50:5e:32:0e:31:70: 64:9d:f3:70:4e:e3:8a:46:46:08:18:11:2b:ec:25: 79:cc:42:b2:59:0b:f9:bd:91:bd:d0:61:97:6c:b8: 8e:25:ce:c4:c2:b7:60:22:4a:13:2c:60:b4:e5:a7: 03:c1:d7:19:31:bc:08:18:d3:9f:5c:1e:db:c3:0b: 29:79:34:9d:ba:9e:18:bd:64:c5:b4:7e:7d:65:ed: 61:60:8c:c6:2b:af:67:82:a9:6c:74:5f:8f:9a:9a: 33:ca:da:c4:e7:d2:9c:6b:40:c7:2b:f0:c1:51:79: 4f:6f:18:f5:17:6b:4e:d0:b3:59:53:f5:e1:8c:94: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A4:21:E5:16:86:95:FF:AC:34:39:B7:47:0D:8E:9D:11:66:50:45 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:920::/32 Signature Algorithm: sha256WithRSAEncryption 7f:82:cf:b5:f9:9f:3e:e5:02:2b:05:07:ea:75:98:6f:df:08: 24:31:83:89:94:7e:56:77:d6:f4:b6:ca:24:fb:48:0c:6d:d2: 82:06:35:51:73:f1:79:1a:e9:59:64:13:1b:7c:ce:7f:1a:35: ea:d8:ee:af:40:c9:29:3e:78:98:4b:a6:75:7c:bc:27:21:0d: 3e:71:aa:46:f0:c2:f3:93:81:92:39:5b:93:2c:34:1a:a9:d7: b9:19:64:bf:53:fd:e6:ff:dc:45:0b:d1:c3:90:c4:ba:68:fb: bd:8b:26:0c:00:8e:6b:7d:73:6d:8e:14:9b:28:8d:9d:a7:b5: 54:96:ee:fa:f0:c7:ec:ad:03:fb:8c:d9:af:2c:be:1a:67:5c: b8:1e:d0:08:23:71:6a:07:a8:de:e1:1d:ec:9c:84:f0:98:08: 12:4a:a9:3a:2f:cc:ea:a3:83:93:af:3b:dc:f4:de:f4:50:18: 0f:52:78:47:a8:96:54:ca:f0:f2:d7:2d:f4:29:34:ea:0b:a6: 2c:f2:94:ff:dd:42:d4:70:9f:0f:9b:c0:fe:13:e9:a0:04:27: 70:3f:9a:c7:ee:73:fa:58:a8:d5:ed:23:99:07:0e:a2:aa:5d: cc:94:ea:05:52:d8:a0:60:8b:dc:05:81:cc:61:fe:83:72:c4: 4b:2f:ff:2b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUwODExMDM0MDIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2Q0Ny0xZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmj+1JQYAhqfj+KKX0VHPatm/PNb0dbfZWBVPVvDEROUvhKHZbu5MlSvb1r3l KYrvw9zSh+vDOHOr1mB5p7U1r/r0736dQ/0T8Lc41NeFDnF+yDYbABnDZHIZP1kE MGIdDJg3uc98IKcXTRPG1Y+CRIolNve/cxNrIvrXqVg0tRFQXjIOMXBknfNwTuOK RkYIGBEr7CV5zEKyWQv5vZG90GGXbLiOJc7EwrdgIkoTLGC05acDwdcZMbwIGNOf XB7bwwspeTSdup4YvWTFtH59Ze1hYIzGK69ngqlsdF+PmpozytrE59Kca0DHK/DB UXlPbxj1F2tO0LNZU/XhjJR/ywIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFBekIeUW hpX/rDQ5t0cNjp0RZlBFMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJFOTIvMTg4NUE2RDIwNkNGMTFFRTlDOTcxMjdCQzRGOUFFMDIvQjdEMzRDQzQ0 NEVEMTFFRThEOTMxNjI0QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAEJIDANBgkqhkiG9w0BAQsFAAOCAQEAf4LPtfmfPuUCKwUH6nWY b98IJDGDiZR+VnfW9LbKJPtIDG3SggY1UXPxeRrpWWQTG3zOfxo16tjur0DJKT54 mEumdXy8JyENPnGqRvDC85OBkjlbkyw0GqnXuRlkv1P95v/cRQvRw5DEumj7vYsm DACOa31zbY4UmyiNnae1VJbu+vDH7K0D+4zZryy+GmdcuB7QCCNxageo3uEd7JyE 8JgIEkqpOi/M6qODk6873PTe9FAYD1J4R6iWVMrw8tct9Ck06gumLPKU/91C1HCf D5vA/hPpoAQncD+ax+5z+lio1e0jmQcOoqpdzJTqBVLYoGCL3AWBzGH+g3LESy// Kw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:51:57 2026 by rpki-client