$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/A3571FDE47EC11EFB51C3666C4F9AE02.roa File: A3571FDE47EC11EFB51C3666C4F9AE02.roa (raw, json) Hash identifier: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs= Subject key identifier: 00:49:D0:48:24:A0:96:FC:F2:B3:3B:29:CC:BC:16:AB:61:52:4C:DA Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 03F1 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/A3571FDE47EC11EFB51C3666C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:46:14 +0000 ROA not before: Wed 25 Jun 2025 01:28:13 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 58954 IP address blocks: 2407:2900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Jun 25 01:28:13 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a48976-68db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:27:8c:a1:38:73:c5:71:28:e4:1d:9d:c6:a5: bf:70:86:f5:da:ee:57:d6:e9:f4:cf:4f:63:5c:54: 1f:31:dc:2b:7a:c2:c4:e4:a0:bf:bc:f4:42:96:b3: 89:97:09:8c:bb:a9:71:fc:f2:f0:db:9a:c9:b3:cf: 03:39:e3:d6:37:4a:5d:10:cb:53:d4:62:2e:e0:69: 59:90:9c:3d:2e:83:4f:40:ac:d5:46:cd:97:0b:4b: 08:61:56:32:9d:e2:a4:51:b1:34:e1:e8:32:f1:a4: 83:f6:41:85:2c:54:a5:2f:93:0e:11:45:26:68:50: 5b:6b:1f:54:11:b0:3e:54:67:cc:95:31:4c:a9:1a: 82:8f:b1:b0:14:ea:23:28:ec:2f:55:97:53:8a:ab: df:89:4d:14:65:e6:3a:62:e3:df:ec:1c:07:b0:bd: fa:44:3d:16:f8:62:8f:d7:79:c9:9f:2c:87:c0:d9: f4:af:9a:02:16:12:dc:bf:fd:d4:c8:73:a6:05:e3: e0:66:be:30:ca:dc:e5:c1:9a:91:b8:bf:f3:6e:44: 56:28:6a:3b:6b:3f:d1:c5:e5:a8:12:26:9c:80:86: 64:70:b4:c3:d7:45:33:74:eb:40:09:ea:0d:29:c9: f8:af:4a:de:5c:91:cd:d3:bc:5c:ee:5a:b2:30:46: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:49:D0:48:24:A0:96:FC:F2:B3:3B:29:CC:BC:16:AB:61:52:4C:DA X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/A3571FDE47EC11EFB51C3666C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:2900::/32 Signature Algorithm: sha256WithRSAEncryption ab:77:a2:f3:8e:4a:03:b5:72:18:f4:2f:5f:d1:8b:4b:87:0b: cc:65:ce:52:78:75:73:1f:8b:f1:68:7b:71:da:0e:e7:2f:41: 9f:f5:38:06:ba:af:ee:6b:c2:3e:6d:62:5f:d1:2d:8a:20:ab: 9f:a1:b0:4e:96:0b:a5:1a:15:c1:c4:2a:05:db:f4:40:34:f0: c4:2a:ce:26:72:ff:32:cb:0f:8c:2e:4f:60:45:0f:40:9e:b2: 45:84:be:9f:f1:98:ab:05:b8:5d:f1:e2:7c:27:97:60:f5:6b: b3:dc:6f:60:91:43:d3:6e:a2:ef:18:bf:2e:39:0b:78:a8:d9: 1b:d4:22:78:33:62:cb:6b:32:7d:d1:0b:a7:d5:6c:54:b8:99: ec:c3:c7:9d:fa:24:20:ec:1a:4e:84:7b:ef:f6:26:b2:0b:25: 79:e3:69:6b:10:9c:73:f0:04:23:ce:35:af:1f:82:b7:6b:8c: b2:1e:65:53:3e:ad:63:0b:d0:df:6b:3f:f7:07:bb:2f:ef:98: a7:5d:3f:24:02:f4:7a:7e:c5:c0:1d:e8:3b:c4:3f:2b:9e:d9: 02:1b:6a:a4:9c:c5:af:4c:c9:73:90:80:9b:7e:cd:60:68:58: f3:e9:dc:6b:79:76:49:1d:e0:15:d3:63:ab:01:58:4e:e8:7e: 15:bf:62:da -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNjI1MDEyODEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODk3Ni02OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjyeMoThzxXEo5B2dxqW/cIb12u5X1un0z09jXFQfMdwresLE5KC/vPRClrOJ lwmMu6lx/PLw25rJs88DOePWN0pdEMtT1GIu4GlZkJw9LoNPQKzVRs2XC0sIYVYy neKkUbE04egy8aSD9kGFLFSlL5MOEUUmaFBbax9UEbA+VGfMlTFMqRqCj7GwFOoj KOwvVZdTiqvfiU0UZeY6YuPf7BwHsL36RD0W+GKP13nJnyyHwNn0r5oCFhLcv/3U yHOmBePgZr4wytzlwZqRuL/zbkRWKGo7az/RxeWoEiacgIZkcLTD10UzdOtACeoN Kcn4r0reXJHN07xc7lqyMEaxSwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFABJ0Egk oJb88rM7Kcy8FqthUkzaMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvQTM1NzFGREU0 N0VDMTFFRkI1MUMzNjY2QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAcpADANBgkqhkiG9w0BAQsFAAOCAQEAq3ei845KA7VyGPQvX9GL S4cLzGXOUnh1cx+L8Wh7cdoO5y9Bn/U4Brqv7mvCPm1iX9EtiiCrn6GwTpYLpRoV wcQqBdv0QDTwxCrOJnL/MssPjC5PYEUPQJ6yRYS+n/GYqwW4XfHifCeXYPVrs9xv YJFD026i7xi/LjkLeKjZG9QieDNiy2syfdELp9VsVLiZ7MPHnfokIOwaToR77/Ym sgsleeNpaxCcc/AEI841rx+Ct2uMsh5lUz6tYwvQ32s/9we7L++Yp10/JAL0en7F wB3oO8Q/K57ZAhtqpJzFr0zJc5CAm37NYGhY8+nca3l2SR3gFdNjqwFYTuh+Fb9i 2g== -----END CERTIFICATE-----Generated at Mon Mar 2 12:58:55 2026 by rpki-client