$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/7020A3F6FB6411F0B417A8544B6F56BC.roa File: 7020A3F6FB6411F0B417A8544B6F56BC.roa (raw, json) Hash identifier: LANAc8IRGA6Xv9lapcXONkG7BjVDITgPYPKJAx+5jSk= Subject key identifier: AA:81:F5:AD:17:69:20:CA:0D:06:99:83:38:51:D3:81:91:60:56:2A Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 9C Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/7020A3F6FB6411F0B417A8544B6F56BC.roa Signing time: Tue 27 Jan 2026 09:42:04 +0000 ROA not before: Tue 27 Jan 2026 09:42:04 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 40676 IP address blocks: 2001:df0:a880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Feb 2026 05:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Jan 27 09:42:04 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6978886c-2591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:de:68:0f:9b:bb:ab:f0:ed:2f:83:f3:e8: 42:9f:d2:7e:c8:2f:8e:fe:15:18:d1:f8:28:63:10: a1:70:59:b3:f9:a4:cd:73:71:85:4d:6d:44:dd:fc: 83:98:20:47:c7:f2:40:1d:bc:46:d2:6e:b1:fd:dc: 0f:c0:05:c3:9f:e3:d6:46:1f:1f:82:8d:b6:8b:ee: a9:98:58:3a:25:f6:03:77:f3:e9:9f:85:d0:10:b0: 42:c7:74:c1:5e:5e:40:04:48:5f:b1:60:a7:20:13: a7:16:69:56:cc:8b:4a:ac:98:1d:bf:64:62:c5:07: 9b:fb:ac:8e:6f:27:5e:48:e1:dc:db:04:3a:f0:7c: 76:81:2f:82:f1:7b:d0:39:14:1c:94:02:df:a7:f1: 8f:cc:99:77:b6:e0:5a:53:d7:5e:7a:a4:58:2d:21: 32:a6:88:2b:61:71:e8:b5:d7:75:8e:94:72:b7:8f: f5:88:a2:a8:8c:81:f2:d8:e4:ac:6f:0e:12:24:01: 9b:77:63:9d:d4:2d:97:19:09:4a:ec:3f:50:84:b9: 69:b7:3f:85:cd:91:18:fb:7e:ff:b1:ad:c4:a4:58: 65:e5:42:60:e7:e8:f9:22:4f:72:d7:f8:6f:d3:fe: 1f:25:99:a1:7a:56:ad:37:50:e5:fd:65:1d:ed:4f: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:81:F5:AD:17:69:20:CA:0D:06:99:83:38:51:D3:81:91:60:56:2A X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/7020A3F6FB6411F0B417A8544B6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:a880::/48 Signature Algorithm: sha256WithRSAEncryption 6d:a5:0e:09:94:a4:11:90:19:f8:61:f9:cb:fe:d2:d1:87:81: cb:fd:b8:ae:a2:62:e1:2e:3f:51:93:8c:78:00:c1:0a:1c:60: c7:a5:b4:99:d6:d0:33:e5:78:7d:da:38:ed:c1:04:1a:a8:35: 3f:c8:06:66:60:3f:b0:2a:5d:94:12:bf:f8:75:1c:24:fd:20: 1c:dc:b5:67:c8:f2:cc:74:6f:6d:c7:f4:3e:3f:6c:8c:0b:49: 9c:0d:5a:6d:1c:85:0d:3e:fa:a7:1e:cb:af:86:18:cd:8d:04: 79:a6:64:69:f5:75:6e:a6:72:55:43:d4:bb:0d:c7:d8:06:6b: b2:2e:97:c2:8f:fa:ab:ab:bd:e2:0a:97:59:d0:86:fc:9b:61: 73:79:7a:78:11:b3:28:86:c7:7b:9d:84:89:79:fe:58:2d:f2: 4d:6b:6b:80:71:32:64:2d:c1:2c:b0:22:8c:d5:4d:38:13:57: 55:93:8d:1d:7e:90:1e:e4:19:6c:32:ef:c3:3c:69:4d:9e:55: 37:97:4b:d2:1e:71:da:dc:bc:9e:05:37:54:d2:0a:23:fd:70: 77:fd:df:9d:f4:9b:ed:37:25:bd:26:f1:d6:73:69:71:51:1d: b8:9e:a7:e7:d7:63:1a:3d:e7:bd:a6:c7:fa:51:70:75:08:91: c6:f4:4b:11 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjExMTAvBgNVBAUTKEFFRTE3RERCOEM2QjM1OTk2NDYxODdEMDgxRTdDOEY3 OTg4M0UxOUQwHhcNMjYwMTI3MDk0MjA0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTc4ODg2Yy0yNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1O7eaA+bu6vw7S+D8+hCn9J+yC+O/hUY0fgoYxChcFmz+aTNc3GFTW1E3fyD mCBHx/JAHbxG0m6x/dwPwAXDn+PWRh8fgo22i+6pmFg6JfYDd/Ppn4XQELBCx3TB Xl5ABEhfsWCnIBOnFmlWzItKrJgdv2RixQeb+6yObydeSOHc2wQ68Hx2gS+C8XvQ ORQclALfp/GPzJl3tuBaU9deeqRYLSEypogrYXHotdd1jpRyt4/1iKKojIHy2OSs bw4SJAGbd2Od1C2XGQlK7D9QhLlptz+FzZEY+37/sa3EpFhl5UJg5+j5Ik9y1/hv 0/4fJZmhelatN1Dl/WUd7U9HzQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKqB9a0X aSDKDQaZgzhR04GRYFYqMB8GA1UdIwQYMBaAFK7hfduMazWZZGGH0IHnyPeYg+Gd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyMS8zM0VBQUM2ODJE MDMxMUYwODNFQkIzN0FDNEY5QUUwMi9ydUY5MjR4ck5abGtZWWZRZ2VmSTk1aUQ0 WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkIyMjEvMzNFQUFDNjgyRDAzMTFGMDgzRUJCMzdBQzRGOUFFMDIvNzAyMEEzRjZG QjY0MTFGMEI0MTdBODU0NEI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3wqIAwDQYJKoZIhvcNAQELBQADggEBAG2lDgmUpBGQ Gfhh+cv+0tGHgcv9uK6iYuEuP1GTjHgAwQocYMeltJnW0DPleH3aOO3BBBqoNT/I BmZgP7AqXZQSv/h1HCT9IBzctWfI8sx0b23H9D4/bIwLSZwNWm0chQ0++qcey6+G GM2NBHmmZGn1dW6mclVD1LsNx9gGa7Iul8KP+qurveIKl1nQhvybYXN5engRsyiG x3udhIl5/lgt8k1ra4BxMmQtwSywIozVTTgTV1WTjR1+kB7kGWwy78M8aU2eVTeX S9IecdrcvJ4FN1TSCiP9cHf93530m+03Jb0m8dZzaXFRHbiep+fXYxo9572mx/pR cHUIkcb0SxE= -----END CERTIFICATE-----Generated at Thu Feb 19 23:09:33 2026 by rpki-client