$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/C1C279D6997C11F0BDB1853FC4F9AE02.roa File: C1C279D6997C11F0BDB1853FC4F9AE02.roa (raw, json) Hash identifier: sy82Q33W/5kzadQCj37Q7UZ0VhicR2IKGQXfpva0SkU= Subject key identifier: 43:FF:20:E8:26:A2:0E:A0:FF:E7:27:06:E8:BE:B5:04:64:8A:2B:4C Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0CF6 Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/C1C279D6997C11F0BDB1853FC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:00:32 +0000 ROA not before: Wed 24 Sep 2025 19:29:15 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 65780 IP address blocks: 2400:9940:1142::/48 maxlen: 48 2400:9940:1143::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3318 (0xcf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: Sep 24 19:29:15 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69a47ebf-437e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:6b:c7:02:fc:ef:33:41:de:5f:77:88:13: 79:bd:5e:c9:09:50:ea:7c:5d:15:3d:3e:40:c0:3f: 5f:bc:cc:28:9a:20:66:ab:da:f8:8e:7f:08:a2:39: d4:6f:09:6b:72:03:58:30:12:3d:eb:44:8b:3f:f2: d1:1b:60:94:fa:83:86:70:e2:a9:0f:7b:a7:9c:f8: 3c:a4:8c:97:3c:c0:97:9e:a5:e9:4c:a9:fe:3b:bf: 3b:9e:20:f9:a4:91:0b:db:23:27:01:7a:19:eb:3e: 2b:d7:9f:13:ca:89:52:0d:f2:79:7b:96:08:af:35: f1:a6:c5:13:cf:a5:bb:6a:1e:e2:9c:9f:e5:81:7b: 0a:0a:bd:23:d2:90:14:4e:55:33:27:81:fe:fc:ec: aa:e8:17:a2:a2:67:46:82:b8:62:e3:b9:f5:07:79: c4:85:7a:e0:9d:28:ef:03:70:93:11:dd:16:de:3d: cb:7e:36:a1:dd:45:f3:74:a8:2b:04:39:10:37:b6: e5:96:f6:d9:56:18:24:7b:cf:26:d8:3f:a0:db:f0: 6e:8e:2f:29:d8:f8:63:ad:47:49:e5:22:4f:e3:10: 14:36:71:e2:41:97:46:3d:fe:a2:6a:00:ae:93:49: ca:63:95:1a:ac:55:6b:98:f7:53:a1:53:f8:a3:9b: 8a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FF:20:E8:26:A2:0E:A0:FF:E7:27:06:E8:BE:B5:04:64:8A:2B:4C X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/C1C279D6997C11F0BDB1853FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:9940:1142::/47 Signature Algorithm: sha256WithRSAEncryption 86:0f:1e:a4:78:40:62:64:07:3c:b2:54:7b:e8:0c:c0:98:33: 8a:33:90:9a:76:50:e6:2a:a2:b6:53:5c:04:4d:f0:23:02:81: b0:46:ec:69:3c:fa:b0:a4:17:25:6a:ac:79:89:f3:e6:d9:64: d6:ca:f2:94:39:48:21:91:70:07:d7:37:cc:32:ed:e1:21:59: 34:46:3a:9c:17:6a:96:7d:3f:9c:66:74:50:60:cb:fa:a0:f7: 17:eb:bc:ca:96:9b:f5:63:23:0e:2e:28:9c:59:61:2f:43:f3: 32:5d:be:62:d4:75:b6:5e:97:5e:ef:35:54:f8:ef:2c:e9:64: 6f:53:f6:04:a7:b6:aa:79:a0:fc:8a:a3:d3:f1:71:0d:22:0e: 34:33:af:81:38:1b:27:63:44:15:33:b5:5f:fe:2a:bf:f7:f1: 5e:e2:bb:4e:b3:a8:72:b5:58:a9:7b:5a:13:d5:37:4a:a6:20: b6:53:94:0e:1c:40:3d:33:42:5d:9c:49:5c:1c:33:d7:9a:d3: 01:09:6a:d2:f4:4d:97:06:52:b8:ac:fd:db:8e:18:b7:bd:71: 5a:68:a4:86:10:64:df:40:8f:65:32:ba:f3:bc:7e:19:7e:3a: 9d:ea:0c:9a:c7:41:74:10:8d:e4:39:13:72:6f:88:bf:c4:d4: b8:9c:60:06 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjUwOTI0MTkyOTE1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2ViZi00MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rVrxwL87zNB3l93iBN5vV7JCVDqfF0VPT5AwD9fvMwomiBmq9r4jn8IojnU bwlrcgNYMBI960SLP/LRG2CU+oOGcOKpD3unnPg8pIyXPMCXnqXpTKn+O787niD5 pJEL2yMnAXoZ6z4r158TyolSDfJ5e5YIrzXxpsUTz6W7ah7inJ/lgXsKCr0j0pAU TlUzJ4H+/Oyq6BeiomdGgrhi47n1B3nEhXrgnSjvA3CTEd0W3j3Lfjah3UXzdKgr BDkQN7bllvbZVhgke88m2D+g2/Buji8p2PhjrUdJ5SJP4xAUNnHiQZdGPf6iagCu k0nKY5UarFVrmPdToVP4o5uK+wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFEP/IOgm og6g/+cnBui+tQRkiitMMB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ0NjMvQTRENDQwMEMxMzlGMTFFQUE2NTgyODYwQzRGOUFFMDIvQzFDMjc5RDY5 OTdDMTFGMEJEQjE4NTNGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcBJACZQBFCMA0GCSqGSIb3DQEBCwUAA4IBAQCGDx6keEBiZAc8slR7 6AzAmDOKM5CadlDmKqK2U1wETfAjAoGwRuxpPPqwpBclaqx5ifPm2WTWyvKUOUgh kXAH1zfMMu3hIVk0RjqcF2qWfT+cZnRQYMv6oPcX67zKlpv1YyMOLiicWWEvQ/My Xb5i1HW2Xpde7zVU+O8s6WRvU/YEp7aqeaD8iqPT8XENIg40M6+BOBsnY0QVM7Vf /iq/9/Fe4rtOs6hytVipe1oT1TdKpiC2U5QOHEA9M0JdnElcHDPXmtMBCWrS9E2X BlK4rP3bjhi3vXFaaKSGEGTfQI9lMrrzvH4Zfjqd6gyax0F0EI3kORNyb4i/xNS4 nGAG -----END CERTIFICATE-----Generated at Mon Mar 2 22:19:31 2026 by rpki-client