$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/1F97E6A8C09811F095581A59C4F9AE02.roa File: 1F97E6A8C09811F095581A59C4F9AE02.roa (raw, json) Hash identifier: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU= Subject key identifier: B7:59:B9:B5:80:4B:00:98:AB:8A:27:F9:F6:77:32:70:2C:E9:8C:2F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 3A Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/1F97E6A8C09811F095581A59C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:03:24 +0000 ROA not before: Thu 13 Nov 2025 13:53:25 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154356 IP address blocks: 2001:df6:4c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Nov 13 13:53:25 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d6ab-c775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:4f:15:f6:6f:70:db:7c:2d:8b:f0:9d:ec: b3:41:91:5a:a5:7a:3a:03:c4:c5:98:c0:8d:8e:6d: 8a:5d:ed:23:53:bf:7c:dd:e0:c3:f4:dc:69:1b:b8: 2a:73:9c:ab:c9:3c:92:ec:47:4c:06:74:32:a3:16: ff:0c:b2:df:d7:d3:f0:9e:20:00:6e:36:8c:91:91: c6:21:eb:d8:58:22:d0:9d:4f:d0:91:2e:40:d8:69: a5:13:00:8a:dc:98:4e:65:c3:64:1f:bf:4b:14:26: 65:75:07:80:9c:21:4f:9a:64:5e:4a:71:ba:d3:3e: 20:9c:0f:c8:e2:6c:67:b2:34:a6:a8:37:57:fd:96: 6c:c3:35:e8:48:ce:db:c7:ab:66:4e:4d:96:98:57: 17:24:77:79:09:1c:f8:29:45:0a:98:74:64:be:f2: 13:6d:83:bb:7f:19:8a:f4:5b:9a:2d:18:9d:81:d7: 25:7d:b6:eb:4d:78:0b:be:88:57:1f:66:18:cd:27: 0e:7c:8f:8a:ef:44:a0:5f:b1:f6:57:4c:48:0f:44: fa:49:53:34:76:c2:97:11:35:75:a9:d1:d7:82:1b: 9e:e2:91:0c:92:18:a9:63:36:c7:16:8a:8f:80:39: 90:43:a7:f6:ae:00:3a:99:80:27:a7:2b:67:00:9c: 18:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:59:B9:B5:80:4B:00:98:AB:8A:27:F9:F6:77:32:70:2C:E9:8C:2F X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/1F97E6A8C09811F095581A59C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:4c40::/48 Signature Algorithm: sha256WithRSAEncryption 23:3f:4a:a5:73:0f:51:b0:4a:ae:e7:c3:75:fb:0b:55:57:cf: d0:64:dc:2d:32:3a:2f:54:48:1d:e3:10:0f:9f:2e:82:b5:2f: 0c:5d:a6:bf:11:3f:85:73:ab:32:6d:e1:c6:89:de:31:4f:cb: 7f:51:80:b5:d2:ce:59:9e:db:53:14:c2:bf:5f:27:18:76:51: db:d6:3a:e6:84:c4:2d:ca:d5:bc:40:52:c4:56:46:85:48:6d: ea:57:e1:98:b5:ec:6c:43:f0:54:e5:28:bd:68:72:29:b5:18: f8:a8:e4:9b:0a:77:56:13:55:21:c0:5a:af:53:4a:20:5f:66: 4b:f9:5c:78:40:29:93:1c:c6:55:f2:95:5d:d3:77:e8:a9:eb: d3:d1:13:c1:62:ab:e6:1c:9a:aa:23:96:31:b9:8c:53:36:04: 25:88:30:05:65:dd:4c:65:a0:43:8c:85:0f:56:8a:81:2c:33: 29:b8:f2:fa:e3:6e:f2:c8:5e:51:f2:54:5b:1f:20:4e:62:d8: 7e:40:e7:43:83:62:2e:84:46:bb:2a:81:bb:f1:37:c1:b5:fc: 46:a7:d6:6f:b9:18:fe:26:ca:e5:38:56:7d:6d:55:db:3d:ab: 8d:e8:fd:dc:d5:da:b1:fc:1c:f8:4e:34:e5:68:44:91:bf:30: c3:22:b1:2e -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNTExMTMxMzUzMjVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNmFiLWM3NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3oE8V9m9w23wti/Cd7LNBkVqlejoDxMWYwI2ObYpd7SNTv3zd4MP03GkbuCpz nKvJPJLsR0wGdDKjFv8Mst/X0/CeIABuNoyRkcYh69hYItCdT9CRLkDYaaUTAIrc mE5lw2Qfv0sUJmV1B4CcIU+aZF5KcbrTPiCcD8jibGeyNKaoN1f9lmzDNehIztvH q2ZOTZaYVxckd3kJHPgpRQqYdGS+8hNtg7t/GYr0W5otGJ2B1yV9tutNeAu+iFcf ZhjNJw58j4rvRKBfsfZXTEgPRPpJUzR2wpcRNXWp0deCG57ikQySGKljNscWio+A OZBDp/auADqZgCenK2cAnBiNAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUt1m5tYBL AJiriif59ncycCzpjC8wHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUE0NC9ENjkyRTFDQUMwODIxMUYwQTA4QzcyMjZDNEY5QUUwMi8xRjk3RTZBOEMw OTgxMUYwOTU1ODFBNTlDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32TEAwDQYJKoZIhvcNAQELBQADggEBACM/SqVzD1GwSq7nw3X7 C1VXz9Bk3C0yOi9USB3jEA+fLoK1Lwxdpr8RP4VzqzJt4caJ3jFPy39RgLXSzlme 21MUwr9fJxh2UdvWOuaExC3K1bxAUsRWRoVIbepX4Zi17GxD8FTlKL1ocim1GPio 5JsKd1YTVSHAWq9TSiBfZkv5XHhAKZMcxlXylV3Td+ip69PRE8Fiq+YcmqojljG5 jFM2BCWIMAVl3UxloEOMhQ9WioEsMym48vrjbvLIXlHyVFsfIE5i2H5A50ODYi6E RrsqgbvxN8G1/Ean1m+5GP4myuU4Vn1tVds9q43o/dzV2rH8HPhONOVoRJG/MMMi sS4= -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:42 2026 by rpki-client