$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/DB9D3A1AE24411F0BBC3E4F5716F56BC.roa File: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (raw, json) Hash identifier: FGeU1tZaj6B6d9kcXemk68XFxPuUp5ULKxFkHVuu17c= Subject key identifier: F2:4B:C3:9F:4B:85:DF:18:D1:FF:EF:53:1C:34:2A:B9:55:34:0D:A0 Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Certificate serial: 29 Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/DB9D3A1AE24411F0BBC3E4F5716F56BC.roa Signing time: Mon 02 Mar 2026 15:15:39 +0000 ROA not before: Fri 26 Dec 2025 10:23:02 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154424 IP address blocks: 2001:df6:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Validity Not Before: Dec 26 10:23:02 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a5a99b-3317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4d:c7:8f:f8:eb:40:ee:85:cd:00:17:ce:8a: cf:46:6c:53:cf:56:cb:09:e9:e1:29:2f:2b:73:03: bb:fd:19:84:31:af:ac:6a:f1:9c:10:a7:97:40:b3: 0a:07:c7:e3:c1:78:97:38:4f:2b:3f:a7:06:b9:0a: 1f:4a:88:8a:bb:ff:22:9c:80:db:df:09:54:6f:0e: 12:08:59:70:34:b6:c2:59:cc:7a:b8:39:e1:44:dc: 80:ed:86:f8:5e:a5:ad:79:87:65:ca:09:ea:0a:b6: 0a:db:5e:e1:b1:b6:f6:9e:72:7d:cd:3a:ea:90:34: e2:30:ec:b5:25:6b:1c:99:20:e2:89:7d:a0:df:d7: 0a:0d:8c:f7:65:4b:6f:a1:09:50:52:4d:18:d9:87: a7:f4:ac:5e:23:c5:6f:2b:15:96:7b:49:52:8e:e6: 04:07:f3:72:a1:f6:cb:27:89:b9:36:52:c5:4e:02: 07:15:6f:3c:23:05:5a:fe:62:4b:a6:b2:e0:db:2c: 0f:56:4d:8a:e3:43:0c:b4:66:d7:ac:b3:a1:80:2f: 4c:41:0b:ec:6a:4d:c6:d0:a6:a2:4c:53:e0:de:64: b2:0d:90:c2:87:eb:fe:7d:4d:0c:c8:57:9f:6e:8d: 92:ff:e7:97:a8:2f:48:f1:52:b0:a4:0a:68:8e:fb: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4B:C3:9F:4B:85:DF:18:D1:FF:EF:53:1C:34:2A:B9:55:34:0D:A0 X509v3 Authority Key Identifier: keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/DB9D3A1AE24411F0BBC3E4F5716F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 7e:11:63:c0:b9:10:47:38:03:f0:cd:ad:9f:00:4b:8b:31:1f: da:65:91:85:ae:a6:15:a2:66:6d:06:4a:39:ff:cc:2f:37:7e: f9:b7:91:ae:ec:1d:6c:cb:f2:10:3f:9c:c1:0a:14:50:d5:83: 5a:88:0d:ee:3c:13:62:f9:c9:15:48:5e:41:39:0b:25:90:0b: a0:25:63:01:72:37:f0:cd:52:49:c0:fc:4e:84:50:98:2d:9d: 1c:7c:05:aa:77:8d:5e:e9:36:b5:df:a8:80:ba:85:c8:e0:56: c0:80:7a:72:d3:84:9a:01:46:c8:16:4c:f7:7e:8f:9e:e3:36: 5c:da:c2:ce:d7:03:2f:96:5c:9c:1c:87:58:11:23:2f:11:81: c4:90:fb:52:b8:c5:9a:fc:5b:c9:36:d3:f2:9e:43:8e:10:ff: c4:2b:ff:6c:fb:5c:f7:da:bf:ef:d8:ce:ba:60:8c:bf:0d:52: 6b:93:d0:f9:00:6a:97:19:d1:55:e7:e4:bd:fa:b7:ab:d8:16: 89:cc:fb:78:44:9c:0a:db:34:81:d9:b4:1f:08:eb:a6:bb:ab: fc:09:db:24:ef:78:79:58:a3:fb:28:a0:80:14:09:0a:c7:9d: bd:21:6b:c8:bf:ee:05:32:2e:83:6a:e6:00:26:59:03:fc:80: 93:4d:6e:ab -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUJCMzExMC8GA1UEBRMoNDI2RjRBRDU4NUQ3QTU0REQzNjJFM0Y3QjNDOEYzQUY2 QUE2M0MyRTAeFw0yNTEyMjYxMDIzMDJaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTVhOTliLTMzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSTceP+OtA7oXNABfOis9GbFPPVssJ6eEpLytzA7v9GYQxr6xq8ZwQp5dAswoH x+PBeJc4Tys/pwa5Ch9KiIq7/yKcgNvfCVRvDhIIWXA0tsJZzHq4OeFE3IDthvhe pa15h2XKCeoKtgrbXuGxtvaecn3NOuqQNOIw7LUlaxyZIOKJfaDf1woNjPdlS2+h CVBSTRjZh6f0rF4jxW8rFZZ7SVKO5gQH83Kh9ssnibk2UsVOAgcVbzwjBVr+Ykum suDbLA9WTYrjQwy0Ztess6GAL0xBC+xqTcbQpqJMU+DeZLINkMKH6/59TQzIV59u jZL/55eoL0jxUrCkCmiO+xdhAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQU8kvDn0uF 3xjR/+9THDQquVU0DaAwHwYDVR0jBBgwFoAUQm9K1YXXpU3TYuP3s8jzr2qmPC4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QkIzLzgxOThFMDE0RTI0 NDExRjBCOTUzRDg5NjcxNkY1NkJDL1FtOUsxWVhYcFUzVFl1UDNzOGp6cjJxbVBD NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW05SzFZWFhwVTNUWXVQM3M4anpyMnFtUEM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCMy84MTk4RTAxNEUyNDQxMUYwQjk1M0Q4OTY3MTZGNTZCQy9EQjlEM0ExQUUy NDQxMUYwQkJDM0U0RjU3MTZGNTZCQy5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32cMAwDQYJKoZIhvcNAQELBQADggEBAH4RY8C5EEc4A/DNrZ8A S4sxH9plkYWuphWiZm0GSjn/zC83fvm3ka7sHWzL8hA/nMEKFFDVg1qIDe48E2L5 yRVIXkE5CyWQC6AlYwFyN/DNUknA/E6EUJgtnRx8Bap3jV7pNrXfqIC6hcjgVsCA enLThJoBRsgWTPd+j57jNlzaws7XAy+WXJwch1gRIy8RgcSQ+1K4xZr8W8k20/Ke Q44Q/8Qr/2z7XPfav+/YzrpgjL8NUmuT0PkAapcZ0VXn5L36t6vYFonM+3hEnArb NIHZtB8I66a7q/wJ2yTveHlYo/sooIAUCQrHnb0ha8i/7gUyLoNq5gAmWQP8gJNN bqs= -----END CERTIFICATE-----Generated at Mon Mar 2 23:05:10 2026 by rpki-client