$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D717B9F0B7E511EFB5F63E6DC4F9AE02.roa File: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (raw, json) Hash identifier: KrKOHKApCfIlvSNW0s+tbRggHCf468HmTluYQjo8tCk= Subject key identifier: 69:28:BF:02:BD:72:54:79:49:EE:C7:50:E2:22:CD:FF:54:EC:01:F0 Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082 Certificate serial: 04F7 Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D717B9F0B7E511EFB5F63E6DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:38:15 +0000 ROA not before: Sat 31 Jan 2026 00:19:44 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 149289 IP address blocks: 2001:df0:31c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082 Validity Not Before: Jan 31 00:19:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46b77-ed74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:b9:53:c6:2b:e2:67:01:d6:76:de:7f:ce: e9:2d:fd:48:49:89:7c:16:02:30:dc:06:dc:91:7a: ae:5d:17:93:b7:0d:9e:35:b0:fc:68:97:f8:f1:f4: 80:53:4b:c3:b8:4b:07:2b:03:38:42:7d:c5:95:6e: 54:86:9c:8f:0d:86:6d:00:e9:3f:26:df:cf:14:2f: b8:b2:85:80:88:35:03:c8:b9:12:20:e1:3d:c6:97: 92:5b:22:ae:47:74:55:c1:97:66:54:da:b6:c6:9e: 15:49:df:15:65:b2:44:01:bf:f6:ee:e0:c3:8f:a0: 46:a7:81:ff:63:cf:fd:89:27:e8:38:c4:62:d3:f9: fc:72:5d:0e:3f:69:c4:3e:e2:12:87:7d:06:a7:d2: 97:7f:f2:b6:55:d3:cf:7b:11:af:31:11:8a:e2:50: 7e:e5:e9:84:c6:85:1e:21:0b:7a:52:8b:e1:30:62: a3:7d:d1:15:42:57:51:de:ce:75:07:33:45:2d:b9: 2b:39:5a:44:08:31:cf:3c:b1:45:37:b6:44:8a:02: 22:0e:62:16:a1:d5:cd:56:a8:7b:18:dd:45:e4:ef: da:b8:a3:b7:5d:f5:7b:90:4a:0d:d0:61:f3:8e:e2: 18:d6:c4:47:2c:74:17:63:c4:06:e5:3f:ff:e4:e2: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:28:BF:02:BD:72:54:79:49:EE:C7:50:E2:22:CD:FF:54:EC:01:F0 X509v3 Authority Key Identifier: keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D717B9F0B7E511EFB5F63E6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:31c0::/48 Signature Algorithm: sha256WithRSAEncryption 36:86:f9:03:e9:70:fc:49:c0:b9:18:84:22:87:b7:54:be:0a: 61:03:6c:bb:ea:d7:c1:65:68:f7:1e:c2:1c:cb:69:4d:71:d3: 3d:bd:60:2c:47:7c:6f:3b:2e:07:49:2c:bc:d6:a1:3a:f5:a3: e3:8a:f8:4f:d9:7d:ed:0f:58:e9:f4:91:36:e5:08:66:24:45: f0:08:be:4d:d4:6c:4f:16:dd:0a:16:d7:bc:ce:0e:58:68:e7: 58:f2:54:85:ee:c5:24:e9:34:c8:da:2a:65:d2:0f:53:ec:30: 1f:ee:0c:b2:e1:cf:8f:fa:a1:f2:18:66:a4:75:da:0a:a2:2f: 37:48:ed:d9:4f:06:c5:9b:43:5d:c8:d4:ec:21:4c:7d:a0:55: c3:73:c6:08:f5:dd:a8:56:b0:2e:45:ee:6e:04:0e:04:20:4e: 01:40:25:00:f4:c4:68:03:ca:4d:f5:d6:8d:2e:01:55:20:30: f4:a8:04:1f:c9:9f:0f:97:8e:86:aa:05:03:d9:13:5c:be:90: 12:42:53:0f:59:b1:fc:75:90:c5:63:14:1c:ab:c9:a3:ae:9a: 29:27:f0:57:68:d1:9f:f3:6a:a8:b2:2b:84:bd:00:30:45:23: ff:2a:20:76:24:3e:a0:61:e4:42:b2:6d:a7:b7:59:83:80:32: 8b:3e:5a:64 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx QTRDREQwODIwHhcNMjYwMTMxMDAxOTQ0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmI3Ny1lZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNa5U8Yr4mcB1nbef87pLf1ISYl8FgIw3AbckXquXReTtw2eNbD8aJf48fSA U0vDuEsHKwM4Qn3FlW5UhpyPDYZtAOk/Jt/PFC+4soWAiDUDyLkSIOE9xpeSWyKu R3RVwZdmVNq2xp4VSd8VZbJEAb/27uDDj6BGp4H/Y8/9iSfoOMRi0/n8cl0OP2nE PuISh30Gp9KXf/K2VdPPexGvMRGK4lB+5emExoUeIQt6UovhMGKjfdEVQldR3s51 BzNFLbkrOVpECDHPPLFFN7ZEigIiDmIWodXNVqh7GN1F5O/auKO3XfV7kEoN0GHz juIY1sRHLHQXY8QG5T//5OKtSQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFGkovwK9 clR5Se7HUOIizf9U7AHwMB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY0MjgvMzVFQjEzNDg1REQ4MTFFQ0I5QjRENjMwQzRGOUFFMDIvRDcxN0I5RjBC N0U1MTFFRkI1RjYzRTZEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8DHAMA0GCSqGSIb3DQEBCwUAA4IBAQA2hvkD6XD8ScC5GIQi h7dUvgphA2y76tfBZWj3HsIcy2lNcdM9vWAsR3xvOy4HSSy81qE69aPjivhP2X3t D1jp9JE25QhmJEXwCL5N1GxPFt0KFte8zg5YaOdY8lSF7sUk6TTI2ipl0g9T7DAf 7gyy4c+P+qHyGGakddoKoi83SO3ZTwbFm0NdyNTsIUx9oFXDc8YI9d2oVrAuRe5u BA4EIE4BQCUA9MRoA8pN9daNLgFVIDD0qAQfyZ8Pl46GqgUD2RNcvpASQlMPWbH8 dZDFYxQcq8mjrpopJ/BXaNGf82qosiuEvQAwRSP/KiB2JD6gYeRCsm2nt1mDgDKL Plpk -----END CERTIFICATE-----Generated at Mon Mar 2 14:00:58 2026 by rpki-client