$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa File: B9E0D3EA716711EFBF91272AC4F9AE02.roa (raw, json) Hash identifier: QNd+7yoJE7XGdb3l9stbVIXGPJdYrSjK5lDsTdFfmX0= Subject key identifier: 3B:23:DB:C6:80:A7:6A:24:B0:E0:8F:20:85:00:06:BE:36:34:C5:FC Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 1118 Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa Signing time: Thu 02 Apr 2026 17:22:27 +0000 ROA not before: Thu 02 Apr 2026 17:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2402:2a80:100::/40 maxlen: 48 2402:2a80:200::/40 maxlen: 48 2402:2a80:300::/40 maxlen: 48 2402:2a80:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 17:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4376 (0x1118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Validity Not Before: Apr 2 17:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69cea5d3-8654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:a8:6e:2a:ce:a8:e8:2e:24:b9:5e:fc:50: 0d:5a:d8:9e:95:4b:9b:6b:1a:00:33:a7:00:ed:c4: b0:47:cb:bb:d0:43:7e:a3:5e:7d:a3:fe:8c:e3:88: 19:73:02:02:cf:81:29:1c:99:37:ef:f1:5d:75:a2: bf:a3:d7:fa:0e:08:1b:a8:75:93:95:c7:6a:a1:5a: 6b:39:31:72:4f:f9:31:b1:8c:be:77:2a:30:f8:4a: 12:a0:f0:51:98:7b:98:19:02:b7:8a:a8:ad:28:0b: a5:e7:a9:98:5c:e6:1e:5b:11:75:a2:d8:8e:7a:1c: f9:17:9a:75:1b:1c:b8:39:4e:48:78:86:89:8e:d0: 1b:85:09:37:fd:25:bd:49:84:fa:b4:da:7a:16:14: ef:5a:f1:24:07:55:1d:c9:08:40:8e:b4:bb:ac:69: 4d:df:29:09:c0:19:f8:9d:e4:9e:0f:17:36:a7:6e: cf:ca:8c:f1:e5:9e:75:b9:68:e0:8d:dc:bc:f1:ec: d0:79:a1:7a:66:a6:43:35:39:db:56:56:03:1f:0e: f5:e9:12:3b:45:d2:a1:0a:a7:11:74:c1:8f:18:94: 53:3c:94:90:a5:33:4f:9b:81:d5:3d:b2:25:1e:7b: 93:9f:8d:98:5c:30:c1:eb:b4:be:d4:97:45:ae:8e: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:DB:C6:80:A7:6A:24:B0:E0:8F:20:85:00:06:BE:36:34:C5:FC X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:2a80:100::-2402:2a80:4ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6a:7e:f6:25:d1:fe:69:de:f1:f1:a4:5d:c1:af:a2:b8:ab:d5: a4:10:48:c4:2a:6b:93:f9:c0:02:65:b0:2e:ba:96:2b:cb:6b: 73:b5:66:4b:5c:82:bb:9f:f3:52:80:ca:ce:6f:de:24:46:84: 79:57:15:9b:2c:c7:62:18:c7:d6:3f:ee:bf:24:c7:db:0c:1a: 0a:3d:20:75:33:82:88:05:27:99:69:44:77:9d:0d:ab:87:da: 12:ac:24:57:c3:6a:f5:a7:c2:93:03:41:f2:7a:d7:68:5b:c3: f2:bd:d0:1a:5c:c5:5a:6e:ad:8b:66:dc:87:ab:6c:db:05:6b: de:1b:38:30:4d:01:77:79:d3:ad:f6:cf:2a:60:bc:09:0d:37: 9c:4e:f5:9b:da:31:0b:ec:34:43:d8:d7:1b:7d:90:be:47:ee: 9c:8b:71:9a:bd:91:4a:8f:fd:fd:2b:c9:37:83:63:2e:6d:b8: 30:96:7b:16:20:32:81:72:88:22:78:48:c7:df:d9:8f:9f:1f: 72:fa:c1:c5:dd:d6:1b:49:6f:2e:de:0a:a7:db:0e:2a:ac:fb: df:83:3f:b2:9f:9b:cf:26:9e:24:43:0a:5b:06:86:f7:b7:26: 39:15:26:e7:04:9a:bb:36:cc:8c:85:36:0b:da:02:70:40:9a: e4:ed:80:9b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICERgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjYwNDAyMTcyMjI3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYTVkMy04NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwWobirOqOguJLle/FANWtielUubaxoAM6cA7cSwR8u70EN+o159o/6M44gZ cwICz4EpHJk37/FddaK/o9f6DggbqHWTlcdqoVprOTFyT/kxsYy+dyow+EoSoPBR mHuYGQK3iqitKAul56mYXOYeWxF1otiOehz5F5p1Gxy4OU5IeIaJjtAbhQk3/SW9 SYT6tNp6FhTvWvEkB1UdyQhAjrS7rGlN3ykJwBn4neSeDxc2p27Pyozx5Z51uWjg jdy88ezQeaF6ZqZDNTnbVlYDHw716RI7RdKhCqcRdMGPGJRTPJSQpTNPm4HVPbIl HnuTn42YXDDB67S+1JdFro7ZywIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDsj28aA p2oksOCPIIUABr42NMX8MB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM1NTgvMEYyMTIxNEUzOTA1MTFFOTlBMzMwMjMzQzRGOUFFMDIvQjlFMEQzRUE3 MTY3MTFFRkJGOTEyNzJBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASMBADBgAkAiqAAQMGACQCKoAEMA0GCSqGSIb3DQEBCwUAA4IBAQBqfvYl 0f5p3vHxpF3Br6K4q9WkEEjEKmuT+cACZbAuupYry2tztWZLXIK7n/NSgMrOb94k RoR5VxWbLMdiGMfWP+6/JMfbDBoKPSB1M4KIBSeZaUR3nQ2rh9oSrCRXw2r1p8KT A0HyetdoW8PyvdAaXMVabq2LZtyHq2zbBWveGzgwTQF3edOt9s8qYLwJDTecTvWb 2jEL7DRD2NcbfZC+R+6ci3GavZFKj/39K8k3g2MubbgwlnsWIDKBcogieEjH39mP nx9y+sHF3dYbSW8u3gqn2w4qrPvfgz+yn5vPJp4kQwpbBob3tyY5FSbnBJq7NsyM hTYL2gJwQJrk7YCb -----END CERTIFICATE-----Generated at Tue Apr 7 13:32:25 2026 by rpki-client