$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/AC8A59D689D311EE81F03018C4F9AE02.roa File: AC8A59D689D311EE81F03018C4F9AE02.roa (raw, json) Hash identifier: JVxMI3BBydPHJQteEqMVI2GOfo7MKjizmO2le+yttg4= Subject key identifier: BE:65:E6:71:5D:A3:00:C8:A8:6E:A6:F4:B2:F0:D4:ED:0A:A3:94:5C Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 0293 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/AC8A59D689D311EE81F03018C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:17:19 +0000 ROA not before: Fri 21 Nov 2025 00:47:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149012 IP address blocks: 2401:43e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Nov 21 00:47:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4587e-f44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:30:68:db:d0:95:86:0a:8a:61:36:ca:a6: 8b:0b:94:27:4a:a1:5a:9d:f5:61:dc:be:cb:99:12: 4b:24:d3:fa:28:ee:36:02:2f:f5:39:7c:73:66:dd: fe:75:ae:73:db:2c:72:d4:27:28:1b:e9:a1:b8:e0: 54:87:cb:ba:cf:fc:ab:67:cc:a6:bb:8d:cd:e9:87: 93:59:9e:dd:f3:3c:83:71:d2:81:19:12:74:07:d2: 0b:4a:27:1f:5a:f3:99:a6:db:3d:49:34:01:4e:81: 92:8e:b0:b8:13:70:e7:f7:ec:33:6c:15:6e:09:92: 3c:04:5b:06:93:7a:4c:6b:3d:c8:42:95:d4:8d:14: b0:60:0a:5e:4a:f4:c5:e5:e6:22:f3:29:30:c6:07: 30:2b:a3:88:6d:11:74:6f:b0:fa:34:be:fe:eb:7f: 76:7e:4c:c8:93:9f:20:fc:7f:db:40:cd:bf:dc:e5: 28:61:0b:29:7b:8f:0f:f8:2a:68:64:91:54:8c:28: 7d:1b:e3:bf:d7:54:6c:9f:69:6d:f3:59:ec:6d:b9: f3:4a:40:c7:a8:22:12:4a:c0:91:ed:28:d9:81:e1: c1:15:ac:94:d2:79:be:2c:29:94:5e:c6:f8:eb:07: 63:29:87:5d:52:cd:82:01:ad:6f:bc:d0:e2:48:93: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:65:E6:71:5D:A3:00:C8:A8:6E:A6:F4:B2:F0:D4:ED:0A:A3:94:5C X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/AC8A59D689D311EE81F03018C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 6f:67:88:bc:ca:f5:24:ea:e3:ef:37:d0:26:0f:eb:7b:da:f2: a7:f4:6e:91:5d:1a:d2:c1:6d:0c:54:54:7f:f5:3e:f2:bf:ed: 83:a6:14:fe:94:12:48:58:87:ac:9e:1b:e4:1c:1a:73:a9:1b: 7f:b6:38:22:ce:7e:a3:7d:b3:1c:73:89:6d:2a:03:c0:98:78: 66:1b:18:8c:eb:ca:70:12:93:68:8c:7b:95:c4:90:bf:88:aa: 1f:de:d8:69:44:f2:81:c6:0d:69:f2:ad:43:26:9b:15:a9:c5: 04:6e:7b:82:4b:6d:97:94:75:39:02:da:12:ac:b4:e4:b8:d7: 7d:b3:f4:e1:8f:c1:29:90:1e:34:68:5b:90:41:f5:ce:ab:e9: 32:e3:5b:da:2c:77:2b:d3:c3:30:8d:d2:f2:88:73:12:be:49: 1c:57:4c:68:19:25:1a:01:94:14:91:e1:26:e1:e7:24:ce:1f: e1:9d:89:d2:9a:e5:fb:ad:dd:17:b3:e2:2b:b3:e0:dc:7b:99: fa:55:a2:ad:71:87:69:4f:a0:f1:c7:0c:44:bc:ba:03:a5:73: dd:cb:d2:17:ca:15:8e:d7:8f:52:35:8a:0f:57:1a:e9:51:a3: b4:34:b7:34:79:ae:01:71:b1:96:2a:73:29:29:81:9b:0e:4e: b6:41:92:0c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUxMTIxMDA0NzExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTg3ZS1mNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3wwaNvQlYYKimE2yqaLC5QnSqFanfVh3L7LmRJLJNP6KO42Ai/1OXxzZt3+ da5z2yxy1CcoG+mhuOBUh8u6z/yrZ8ymu43N6YeTWZ7d8zyDcdKBGRJ0B9ILSicf WvOZpts9STQBToGSjrC4E3Dn9+wzbBVuCZI8BFsGk3pMaz3IQpXUjRSwYApeSvTF 5eYi8ykwxgcwK6OIbRF0b7D6NL7+6392fkzIk58g/H/bQM2/3OUoYQspe48P+Cpo ZJFUjCh9G+O/11Rsn2lt81nsbbnzSkDHqCISSsCR7SjZgeHBFayU0nm+LCmUXsb4 6wdjKYddUs2CAa1vvNDiSJPKaQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFL5l5nFd owDIqG6m9LLw1O0Ko5RcMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQUM4QTU5RDY4 OUQzMTFFRTgxRjAzMDE4QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAFD4DANBgkqhkiG9w0BAQsFAAOCAQEAb2eIvMr1JOrj7zfQJg/r e9ryp/RukV0a0sFtDFRUf/U+8r/tg6YU/pQSSFiHrJ4b5Bwac6kbf7Y4Is5+o32z HHOJbSoDwJh4ZhsYjOvKcBKTaIx7lcSQv4iqH97YaUTygcYNafKtQyabFanFBG57 gkttl5R1OQLaEqy05LjXfbP04Y/BKZAeNGhbkEH1zqvpMuNb2ix3K9PDMI3S8ohz Er5JHFdMaBklGgGUFJHhJuHnJM4f4Z2J0prl+63dF7PiK7Pg3HuZ+lWirXGHaU+g 8ccMRLy6A6Vz3cvSF8oVjtePUjWKD1ca6VGjtDS3NHmuAXGxlipzKSmBmw5OtkGS DA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:41 2026 by rpki-client