$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa File: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (raw, json) Hash identifier: hMb2hcSIJToNCOk3fqaJJZYV+N/CGmHdt8jBqc5Ar/g= Subject key identifier: 6B:EE:01:1E:6C:C5:42:02:77:F6:9A:63:FD:B8:4E:87:A3:20:0F:02 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 0295 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:17:21 +0000 ROA not before: Fri 21 Nov 2025 00:47:14 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149201 IP address blocks: 2401:43e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Nov 21 00:47:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45880-c032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:bc:88:83:02:97:0a:07:d5:78:dd:51:e5: 79:74:76:17:c8:be:cd:bd:67:95:a7:6b:56:18:06: e0:6c:46:9b:34:1b:6f:87:4c:b1:47:3f:19:c7:89: 73:a0:45:60:15:8d:f7:8e:a1:6e:34:bc:42:06:8a: 09:24:a0:2b:c3:5d:a9:ac:b1:00:9a:ed:2c:10:8b: e9:77:b1:e1:8a:ef:a3:e7:33:6f:52:bf:8c:38:62: 60:cf:cd:0a:03:92:a6:f7:b4:e0:0d:7a:01:4a:b4: 10:bd:8c:ae:35:62:fd:11:9e:36:fc:e3:00:4f:fd: 53:61:6e:bf:2d:96:d8:64:b2:c7:0d:ce:2a:25:ec: 78:5f:f4:da:b7:2f:27:a1:90:62:6b:8f:71:6b:19: eb:13:16:b2:61:75:d8:d6:ba:82:6e:92:98:41:b7: dc:c3:4a:61:a7:6c:f0:d5:4b:94:78:86:07:c8:81: 42:4b:c9:54:2c:48:95:43:c5:46:73:e5:af:57:e1: 55:bc:cd:fa:ec:38:39:c6:ef:53:03:62:81:8c:ba: 83:39:bf:35:d6:37:21:68:fa:27:0d:58:a7:9a:7b: d4:89:61:6b:24:9c:64:25:b6:de:10:f6:bc:8f:d2: 83:39:16:4d:ec:f0:65:e1:d0:bf:a8:f3:1d:ee:6f: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EE:01:1E:6C:C5:42:02:77:F6:9A:63:FD:B8:4E:87:A3:20:0F:02 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:43e0::/48 Signature Algorithm: sha256WithRSAEncryption 29:35:7d:c4:b5:e7:80:82:b7:99:48:af:5f:e4:8d:19:db:21: be:3b:6d:d1:16:e5:d0:9b:f8:9d:b2:d0:5f:2e:fe:38:12:ad: 37:5a:e1:55:0d:15:f5:95:8e:f5:7d:41:b6:18:4c:ec:5f:8a: a7:d8:a9:92:5b:cd:5f:a5:8a:a8:e8:1c:6a:61:b7:49:d4:b7: 89:75:f2:8b:3e:56:0f:d1:78:34:6d:24:6b:25:03:cf:6d:d6: aa:79:fb:cd:fd:4e:ae:d8:52:f3:85:c3:fb:ca:06:93:29:a7: e7:63:72:ef:31:28:b1:04:f7:a2:b7:de:4a:25:aa:97:18:89: bd:08:2e:3d:87:9b:03:e7:a2:98:70:b8:f9:c4:fa:38:cd:dd: 22:19:9d:7d:00:d2:f3:e2:18:e2:2e:f2:79:f0:85:df:91:10: fc:20:62:59:3c:ce:c3:51:ef:9e:3a:d9:90:20:a3:59:0c:fe: 67:c2:c7:4d:da:1d:dd:c8:bd:f8:94:d8:7b:1c:45:2f:38:d6: 70:0e:67:d2:33:8b:41:55:ff:55:ac:57:72:e3:17:46:71:52: 41:66:4d:64:eb:0c:3d:05:db:61:09:44:2d:a7:8f:d4:d3:a8: ca:8e:94:2a:5e:00:e6:09:70:2d:08:5c:66:da:90:e2:f3:00: 77:b0:ff:43 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUxMTIxMDA0NzE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTg4MC1jMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydm8iIMClwoH1XjdUeV5dHYXyL7NvWeVp2tWGAbgbEabNBtvh0yxRz8Zx4lz oEVgFY33jqFuNLxCBooJJKArw12prLEAmu0sEIvpd7Hhiu+j5zNvUr+MOGJgz80K A5Km97TgDXoBSrQQvYyuNWL9EZ42/OMAT/1TYW6/LZbYZLLHDc4qJex4X/Taty8n oZBia49xaxnrExayYXXY1rqCbpKYQbfcw0php2zw1UuUeIYHyIFCS8lULEiVQ8VG c+WvV+FVvM367Dg5xu9TA2KBjLqDOb811jchaPonDVinmnvUiWFrJJxkJbbeEPa8 j9KDORZN7PBl4dC/qPMd7m/+KwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFGvuAR5s xUICd/aaY/24ToejIA8CMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQjlEOEY5Q0U4 OUQwMTFFRUI2MDNGRjc1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAFD4AAAMA0GCSqGSIb3DQEBCwUAA4IBAQApNX3EteeAgreZSK9f 5I0Z2yG+O23RFuXQm/idstBfLv44Eq03WuFVDRX1lY71fUG2GEzsX4qn2KmSW81f pYqo6BxqYbdJ1LeJdfKLPlYP0Xg0bSRrJQPPbdaqefvN/U6u2FLzhcP7ygaTKafn Y3LvMSixBPeit95KJaqXGIm9CC49h5sD56KYcLj5xPo4zd0iGZ19ANLz4hjiLvJ5 8IXfkRD8IGJZPM7DUe+eOtmQIKNZDP5nwsdN2h3dyL34lNh7HEUvONZwDmfSM4tB Vf9VrFdy4xdGcVJBZk1k6ww9BdthCUQtp4/U06jKjpQqXgDmCXAtCFxm2pDi8wB3 sP9D -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:18 2026 by rpki-client