$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/B25FEE6E85EB11F088AFC15EC4F9AE02.roa File: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (raw, json) Hash identifier: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo= Subject key identifier: F1:94:B9:3D:34:AF:3F:7A:29:0E:35:45:78:4B:E2:F6:72:58:95:F7 Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 04D0 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/B25FEE6E85EB11F088AFC15EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:30:29 +0000 ROA not before: Thu 12 Feb 2026 23:20:12 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 4766 IP address blocks: 2400:8d60:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Feb 12 23:20:12 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a477b4-b978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:3d:30:07:4f:a0:5d:1d:70:36:83:70:39: 49:76:2d:96:bf:6a:2a:80:ba:bb:f9:b9:3a:c0:df: c5:af:7d:fb:03:65:4f:5c:f2:47:41:51:50:ee:64: 76:70:54:e3:37:90:e2:57:9f:67:c2:a8:2c:b7:b0: 46:e0:4e:c3:ed:67:3c:e1:09:4f:86:03:33:af:7e: be:6f:77:6f:6f:f5:49:d5:e9:33:9d:36:ef:33:47: f2:a1:71:73:56:23:c0:20:99:68:38:0b:3e:f0:3c: f6:74:f2:22:9a:56:37:d0:e9:a6:11:56:68:f4:7a: a8:f2:37:ff:8a:5d:c0:21:74:12:fd:4d:c0:5e:7c: ff:96:de:07:37:09:0b:fd:36:2b:96:44:a3:69:d6: af:0c:e7:ae:18:cd:22:15:ce:c2:42:01:e7:0b:91: 29:8d:6b:05:72:bb:36:28:3d:2c:1d:ed:36:b7:8c: 38:fa:cb:5b:c2:c4:c1:e7:b6:27:d5:43:8f:14:35: 4a:b4:78:e1:8a:d1:08:59:46:c8:b4:e2:f3:7c:f4: 56:2e:5f:b8:1e:cd:2c:5b:84:9f:ce:69:64:8f:87: 95:37:db:17:79:a9:6b:42:d6:f8:bc:46:81:72:7a: 1d:82:d2:b2:dd:d2:97:41:ba:44:e6:52:c5:5e:24: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:94:B9:3D:34:AF:3F:7A:29:0E:35:45:78:4B:E2:F6:72:58:95:F7 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/B25FEE6E85EB11F088AFC15EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:8d60:18::/48 Signature Algorithm: sha256WithRSAEncryption 26:96:8e:80:59:6d:df:f4:ae:d6:2d:4b:a8:20:79:e8:c4:f4: 28:9e:0c:0e:d9:84:47:64:5e:6a:5b:73:74:ea:70:f7:49:a5: da:2f:66:47:0d:2f:75:28:7e:5e:6d:78:24:6f:a0:c9:a3:ad: 83:ec:bb:41:1b:4a:3b:9c:3f:7a:e2:2c:65:98:8f:c2:ad:af: f6:4a:ac:99:7c:d1:3e:a4:12:41:68:f5:70:8e:13:56:31:eb: 20:75:98:12:0e:26:03:ee:6f:f2:ed:f8:3e:96:c1:68:ed:f1: 34:65:0a:d0:bb:97:fa:01:92:63:a8:24:7e:58:cc:2a:f8:5c: 9b:c9:4e:bb:d3:e9:de:e5:f5:11:cd:8a:2a:14:35:36:2e:db: 91:6f:3a:29:ad:e8:06:a7:c5:fe:ca:69:f4:21:b6:e3:0e:03: 74:da:ee:6f:a5:b1:96:c8:83:cd:a0:f4:40:4c:0d:16:00:b5: 6c:76:f0:e2:fd:f0:42:65:4e:06:99:7f:40:85:08:bf:84:d2: e6:d8:b4:ec:37:9d:84:9b:ac:eb:69:a8:e1:c0:ef:b7:6b:c5: db:cf:b2:c3:cb:0f:68:97:09:b2:62:80:13:ac:10:4c:e6:4e: ac:64:38:db:e8:82:8b:3d:3d:a5:96:94:cb:6c:21:cd:8c:cb: 3b:4e:a3:9c -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjYwMjEyMjMyMDEyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzdiNC1iOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNE9MAdPoF0dcDaDcDlJdi2Wv2oqgLq7+bk6wN/Fr337A2VPXPJHQVFQ7mR2 cFTjN5DiV59nwqgst7BG4E7D7Wc84QlPhgMzr36+b3dvb/VJ1ekznTbvM0fyoXFz ViPAIJloOAs+8Dz2dPIimlY30OmmEVZo9Hqo8jf/il3AIXQS/U3AXnz/lt4HNwkL /TYrlkSjadavDOeuGM0iFc7CQgHnC5EpjWsFcrs2KD0sHe02t4w4+stbwsTB57Yn 1UOPFDVKtHjhitEIWUbItOLzfPRWLl+4Hs0sW4Sfzmlkj4eVN9sXealrQtb4vEaB cnodgtKy3dKXQbpE5lLFXiSeJwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPGUuT00 rz96KQ41RXhL4vZyWJX3MB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRBRDQvQzQyMzE4MzA3N0I1MTFFQ0E1QkNFMDVGQzRGOUFFMDIvQjI1RkVFNkU4 NUVCMTFGMDg4QUZDMTVFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJACNYAAYMA0GCSqGSIb3DQEBCwUAA4IBAQAmlo6AWW3f9K7WLUuo IHnoxPQongwO2YRHZF5qW3N06nD3SaXaL2ZHDS91KH5ebXgkb6DJo62D7LtBG0o7 nD964ixlmI/Cra/2SqyZfNE+pBJBaPVwjhNWMesgdZgSDiYD7m/y7fg+lsFo7fE0 ZQrQu5f6AZJjqCR+WMwq+FybyU670+ne5fURzYoqFDU2LtuRbzopregGp8X+ymn0 IbbjDgN02u5vpbGWyIPNoPRATA0WALVsdvDi/fBCZU4GmX9AhQi/hNLm2LTsN52E m6zraajhwO+3a8Xbz7LDyw9olwmyYoATrBBM5k6sZDjb6IKLPT2llpTLbCHNjMs7 TqOc -----END CERTIFICATE-----Generated at Mon Mar 2 03:23:23 2026 by rpki-client