$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/9305EF46716511EFAA44E47BC4F9AE02.roa File: 9305EF46716511EFAA44E47BC4F9AE02.roa (raw, json) Hash identifier: MInSGZWk/+V+/O784VPQkOPEvkikcYw1hh5xAfaMy+Y= Subject key identifier: AA:43:44:74:85:B8:DF:F2:68:DA:F9:50:78:68:2E:11:48:31:BD:26 Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 1117 Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/9305EF46716511EFAA44E47BC4F9AE02.roa Signing time: Thu 02 Apr 2026 17:22:25 +0000 ROA not before: Thu 02 Apr 2026 17:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2402:2a80:100::/40 maxlen: 48 2402:2a80:200::/40 maxlen: 48 2402:2a80:300::/40 maxlen: 48 2402:2a80:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 17:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4375 (0x1117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Validity Not Before: Apr 2 17:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69cea5d0-9bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:da:a1:d6:02:10:66:bd:eb:b4:f6:b7:eb:61: ff:c6:7a:30:85:75:33:1b:3a:69:85:67:e8:31:29: 7a:92:06:1d:c1:82:60:36:b2:db:08:d0:18:bc:be: 1e:26:99:c4:07:b9:9f:b0:89:1d:0f:ca:16:55:66: 30:e4:b0:43:e7:36:ce:cd:92:db:a7:3a:52:e0:4f: 1d:ed:2b:d0:64:ec:ad:51:4d:74:cf:f5:9a:a1:3c: 60:9a:87:b3:9d:e1:1b:40:f5:9f:f2:7f:ca:9a:07: 69:10:09:17:18:93:e5:c6:f5:34:80:5f:ed:bc:a4: 73:e9:ff:fa:b2:01:20:74:37:75:10:cc:1c:a6:d1: c5:90:11:b0:94:16:f3:e6:40:91:f9:3f:25:19:08: f3:57:48:97:ce:cb:6b:e2:b9:07:9e:3b:e8:a1:11: 44:a0:70:8c:a6:0e:2a:3b:6a:88:c5:81:19:9c:01: 37:d8:65:37:d3:81:55:c7:99:33:e4:0f:9e:ca:52: 99:64:74:fe:71:80:9d:c5:f7:cf:b0:0b:bf:76:aa: 08:35:2d:f2:35:0c:f0:a7:57:1c:e7:36:3c:78:cc: 12:14:2e:0d:3c:89:e4:8d:be:b5:2f:64:fc:da:1c: 82:d1:34:f9:9a:b0:aa:48:dd:35:87:b2:00:05:e4: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:44:74:85:B8:DF:F2:68:DA:F9:50:78:68:2E:11:48:31:BD:26 X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/9305EF46716511EFAA44E47BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:2a80:100::-2402:2a80:4ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8a:b9:e4:f6:f6:b8:bf:d8:04:ad:af:72:0b:6e:1e:b7:26:ef: ed:b4:64:e4:8e:e2:ce:b2:54:84:db:3f:d1:1d:17:96:ab:65: de:a5:74:ce:3d:f3:5a:03:05:5a:f9:31:2a:6f:49:02:18:50: 6b:d9:b5:6a:8f:23:21:ed:94:92:8f:a4:93:ba:cd:89:fc:8f: 3b:12:f0:8f:c1:49:13:07:9c:30:90:1d:96:8f:d1:09:76:c8: c5:08:7b:c3:7e:ce:f1:51:33:0d:0c:ca:b3:42:cd:58:60:cb: 5d:75:bb:ea:8e:04:da:30:d5:8d:d7:a6:fe:17:b5:b1:26:3a: c9:0b:b4:0c:f7:1e:f8:4d:1f:3f:b5:a3:f0:72:c9:88:bf:1a: 5f:2a:c3:6e:9c:25:d1:5d:43:9d:71:df:aa:bb:8e:50:d5:81: a3:11:c4:b9:5b:ab:df:d0:84:38:66:41:48:da:99:7a:f3:c0: 03:e7:91:c4:0f:b5:a6:46:6b:c1:ff:eb:cf:b9:12:e1:f9:f1: f6:96:09:9b:60:8f:0a:ec:b0:21:e9:32:39:db:ea:e1:ac:55: 07:ab:03:ec:a3:66:17:ee:28:5c:a2:17:8b:61:73:8d:45:13: ec:47:a3:94:d1:a5:c8:5f:35:f9:fe:e1:87:3a:f2:f9:ed:2e: d8:2e:10:e2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICERcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjYwNDAyMTcyMjI1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYTVkMC05YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9qh1gIQZr3rtPa362H/xnowhXUzGzpphWfoMSl6kgYdwYJgNrLbCNAYvL4e JpnEB7mfsIkdD8oWVWYw5LBD5zbOzZLbpzpS4E8d7SvQZOytUU10z/WaoTxgmoez neEbQPWf8n/KmgdpEAkXGJPlxvU0gF/tvKRz6f/6sgEgdDd1EMwcptHFkBGwlBbz 5kCR+T8lGQjzV0iXzstr4rkHnjvooRFEoHCMpg4qO2qIxYEZnAE32GU304FVx5kz 5A+eylKZZHT+cYCdxffPsAu/dqoINS3yNQzwp1cc5zY8eMwSFC4NPInkjb61L2T8 2hyC0TT5mrCqSN01h7IABeT0oQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKpDRHSF uN/yaNr5UHhoLhFIMb0mMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM1NTgvMEYyMTIxNEUzOTA1MTFFOTlBMzMwMjMzQzRGOUFFMDIvOTMwNUVGNDY3 MTY1MTFFRkFBNDRFNDdCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASMBADBgAkAiqAAQMGACQCKoAEMA0GCSqGSIb3DQEBCwUAA4IBAQCKueT2 9ri/2AStr3ILbh63Ju/ttGTkjuLOslSE2z/RHReWq2XepXTOPfNaAwVa+TEqb0kC GFBr2bVqjyMh7ZSSj6STus2J/I87EvCPwUkTB5wwkB2Wj9EJdsjFCHvDfs7xUTMN DMqzQs1YYMtddbvqjgTaMNWN16b+F7WxJjrJC7QM9x74TR8/taPwcsmIvxpfKsNu nCXRXUOdcd+qu45Q1YGjEcS5W6vf0IQ4ZkFI2pl688AD55HED7WmRmvB/+vPuRLh +fH2lgmbYI8K7LAh6TI52+rhrFUHqwPso2YX7ihcoheLYXONRRPsR6OU0aXIXzX5 /uGHOvL57S7YLhDi -----END CERTIFICATE-----Generated at Tue Apr 7 10:37:27 2026 by rpki-client