$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa File: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (raw, json) Hash identifier: SKiH7V+tod/z4lBCc83CPJIwiI1zwMJD2gQincrwEEU= Subject key identifier: FC:B1:BE:2E:E4:36:60:81:7D:17:64:EA:73:A8:BF:FD:B4:D3:7E:A8 Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0509 Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:36:09 +0000 ROA not before: Thu 18 Dec 2025 23:20:07 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 149056 IP address blocks: 2400:3f60:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Dec 18 23:20:07 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a59249-6ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:56:d5:8d:7a:ef:dd:b3:4a:10:dc:81:44: d2:67:d2:16:b9:51:c3:5a:9c:70:98:e9:ff:32:21: be:46:76:cf:38:35:e5:c8:54:ed:3e:dd:56:e4:ce: 63:53:4c:ae:af:31:7b:dc:45:71:a7:bc:a5:2a:79: 87:92:e2:9e:c1:a9:e0:f6:eb:4a:23:17:8a:c2:82: 3b:17:e1:b6:0d:c5:4d:40:48:de:ac:1a:2c:a1:7b: df:46:13:c5:b2:f4:d3:ca:6f:a6:f5:69:1d:4a:b7: c3:73:41:84:1a:a4:69:2f:8f:df:26:1f:2e:88:02: 36:8b:52:87:c7:1a:6d:5d:7a:86:8e:a9:78:1b:4f: db:0f:a3:b5:e0:54:63:88:5e:8a:84:96:54:f5:be: 91:c5:87:b9:89:bf:ba:0a:5a:7e:e1:b6:ae:89:3f: 5e:c1:f4:7c:c0:87:4c:31:2a:5b:d9:df:13:43:d7: 2f:e8:c1:87:51:39:3a:d7:e7:7a:f3:e2:3e:ea:11: f6:c5:77:5e:7e:77:5f:79:52:29:ee:13:52:a6:88: 8f:7b:4f:3b:18:df:dc:ca:b7:85:b7:f2:f6:ce:c9: e3:39:8f:c5:1a:e5:2d:ae:33:0f:6b:58:87:7e:a8: f7:48:21:ef:1e:5d:15:a6:90:20:05:18:73:72:ad: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B1:BE:2E:E4:36:60:81:7D:17:64:EA:73:A8:BF:FD:B4:D3:7E:A8 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:3f60:3::/48 Signature Algorithm: sha256WithRSAEncryption 3d:8d:11:ca:e5:5c:b1:5c:93:5d:f1:03:44:2f:5e:80:29:73: aa:2d:56:c9:e6:dd:1a:1f:0c:98:fb:59:7b:74:80:84:9e:9b: a8:bf:eb:8e:2d:a2:7d:02:d0:89:c3:65:4f:a1:53:ae:32:9c: b9:83:4e:c0:84:e7:6d:2b:e8:56:c4:8a:0a:bf:9d:0f:a9:2e: 39:54:f4:dc:02:d3:c6:8d:d6:66:19:54:5e:5f:ec:ba:f8:ac: 11:81:fd:92:8b:eb:6c:73:6c:10:d0:b2:b1:5c:d7:f5:a7:af: 7c:6b:7e:46:62:9c:7f:e1:8d:63:ce:13:dc:5c:62:17:14:c0: fe:fa:17:81:fd:24:7c:e1:85:e4:64:2e:27:22:8b:40:67:de: 65:da:89:f9:5a:19:bd:72:ba:50:f5:0a:7e:7a:0d:c5:2c:54: fb:1e:3e:12:9c:5c:c3:a3:e5:85:5e:9c:7b:88:68:40:25:93: 79:97:53:ea:6b:2b:46:45:75:6e:55:ca:94:98:53:70:ef:1c: a3:ee:c9:34:b1:d0:a1:45:52:1e:14:09:ca:d8:b8:ad:a2:d5: 93:7a:d3:1e:24:6a:23:f0:c0:40:ed:e1:90:62:eb:99:db:46: d9:0a:c0:17:d4:63:bc:ea:df:5a:96:7e:ba:59:4a:32:19:2f: a9:b4:a1:d7 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjUxMjE4MjMyMDA3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTI0OS02ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtZW1Y16792zShDcgUTSZ9IWuVHDWpxwmOn/MiG+RnbPODXlyFTtPt1W5M5j U0yurzF73EVxp7ylKnmHkuKewang9utKIxeKwoI7F+G2DcVNQEjerBosoXvfRhPF svTTym+m9WkdSrfDc0GEGqRpL4/fJh8uiAI2i1KHxxptXXqGjql4G0/bD6O14FRj iF6KhJZU9b6RxYe5ib+6Clp+4bauiT9ewfR8wIdMMSpb2d8TQ9cv6MGHUTk61+d6 8+I+6hH2xXdefndfeVIp7hNSpoiPe087GN/cyreFt/L2zsnjOY/FGuUtrjMPa1iH fqj3SCHvHl0VppAgBRhzcq2SFQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPyxvi7k NmCBfRdk6nOov/20036oMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhFM0QvMEFCNDM4NkE1ODRFMTFFQzlGQ0YxNzc5QzRGOUFFMDIvRkY5RDg5QjZB QjRDMTFFQ0IwQzk0RjY3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAA/YAADMA0GCSqGSIb3DQEBCwUAA4IBAQA9jRHK5VyxXJNd8QNE L16AKXOqLVbJ5t0aHwyY+1l7dICEnpuov+uOLaJ9AtCJw2VPoVOuMpy5g07AhOdt K+hWxIoKv50PqS45VPTcAtPGjdZmGVReX+y6+KwRgf2Si+tsc2wQ0LKxXNf1p698 a35GYpx/4Y1jzhPcXGIXFMD++heB/SR84YXkZC4nIotAZ95l2on5Whm9crpQ9Qp+ eg3FLFT7Hj4SnFzDo+WFXpx7iGhAJZN5l1PqaytGRXVuVcqUmFNw7xyj7sk0sdCh RVIeFAnK2LitotWTetMeJGoj8MBA7eGQYuuZ20bZCsAX1GO86t9aln66WUoyGS+p tKHX -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:16 2026 by rpki-client