$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03007AB0B23311EFA164C919C4F9AE02.roa File: 03007AB0B23311EFA164C919C4F9AE02.roa (raw, json) Hash identifier: Wwv+iDRwqq9Ay+OHj8aAbE9e4ROJ4u98pccG3PfaxzA= Subject key identifier: 12:51:A4:B1:E6:80:17:91:9B:75:44:D9:60:78:46:C1:29:0D:1A:09 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5E90 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03007AB0B23311EFA164C919C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:18:46 +0000 ROA not before: Thu 28 Aug 2025 14:55:48 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151872 IP address blocks: 2001:df3:e4c0::/48 maxlen: 48 2001:df3:e8c0::/48 maxlen: 48 2001:df4:19c0::/48 maxlen: 48 2001:df4:1cc0::/48 maxlen: 48 2401:8ce0::/48 maxlen: 48 2401:9760::/48 maxlen: 48 2401:9920::/48 maxlen: 48 2401:9a60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 14:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24208 (0x5e90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:48 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60cc6-4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:63:f5:fb:17:61:ef:3d:6d:5d:d7:dc:47: c2:fe:72:2b:3c:36:b7:42:6d:3c:7f:8b:5b:bd:d0: 91:c7:8a:cd:88:4c:ba:35:ba:fd:21:17:7e:a2:21: 33:bb:14:81:02:da:bf:a7:23:51:09:e0:8d:c4:f1: f3:b6:dd:98:d3:3f:e7:c5:95:bc:8e:e9:32:8e:63: 0b:08:48:ea:59:f9:d6:31:2b:db:08:51:0e:2d:0d: a2:70:8b:6a:c5:de:bd:f3:d4:e1:32:bd:3f:58:33: 75:a4:20:13:e8:91:63:af:8d:86:37:a4:1e:f8:82: 1d:7b:92:6c:9c:d0:95:4a:ff:c7:56:96:66:7f:ad: e6:10:1b:a2:f2:1b:07:13:a1:2b:6b:42:0e:46:33: 02:a0:b9:39:3f:bd:88:b3:57:8f:a4:d1:b8:93:49: c9:f8:2f:9f:f5:91:fa:59:55:d8:2a:ab:b6:16:89: b4:30:aa:42:a9:a4:2c:31:a9:6f:5e:24:4d:70:5c: 0c:47:c3:0d:92:ee:61:8b:ee:06:ee:fc:d6:57:40: 8f:05:1c:c8:36:a0:d3:cd:f4:60:d2:25:0f:14:e4: a6:ad:dc:fd:66:cc:d2:36:b3:fd:ae:4d:f7:14:fa: c2:80:ef:b2:31:a1:f5:9b:64:2f:7b:87:19:59:da: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:A4:B1:E6:80:17:91:9B:75:44:D9:60:78:46:C1:29:0D:1A:09 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03007AB0B23311EFA164C919C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:e4c0::/48 2001:df3:e8c0::/48 2001:df4:19c0::/48 2001:df4:1cc0::/48 2401:8ce0::/48 2401:9760::/48 2401:9920::/48 2401:9a60::/48 Signature Algorithm: sha256WithRSAEncryption 43:e1:95:c3:c6:85:5f:ea:c9:82:5c:2b:bc:41:41:44:b5:94: e0:1b:cd:2b:82:47:03:55:00:bb:08:65:47:b2:31:10:03:d1: 31:93:0a:7e:4b:cb:03:64:08:82:b1:ef:98:c5:6c:11:86:27: 7e:ea:09:16:89:eb:7d:5b:1b:cf:4e:11:9f:3f:1b:0e:db:d1: c2:42:1a:b6:59:1f:2d:15:fc:47:6f:d7:30:df:95:40:e8:6b: 69:d0:44:9f:97:4f:c5:72:77:b0:7d:b3:17:57:79:fa:b6:31: b9:d7:d4:55:2e:da:5c:16:82:f7:7c:02:7a:bb:96:51:2f:56: 24:85:c7:c5:a2:88:65:9f:20:2f:84:3b:34:ac:74:1e:36:4e: db:a8:ce:8a:d9:d5:02:c1:e7:7f:46:31:c6:26:14:71:1e:24: d1:7d:24:dc:1b:3f:ac:a4:93:4e:6e:2a:d0:31:c3:4f:56:91: 8a:c6:78:ae:dc:89:b0:91:d6:91:e5:9c:ae:71:4c:e0:6e:c0: 7d:11:d0:b3:d0:d9:5a:dd:d5:e0:de:1b:cc:5f:03:8f:63:93: db:1d:f7:40:8a:fb:83:2a:9a:ae:53:f4:ac:cc:15:81:08:7f: c0:94:b7:d1:dd:af:7b:b9:6f:89:4a:bb:b7:ed:86:74:8c:76: 95:95:6e:94 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICXpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGNjNi00NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvNj9fsXYe89bV3X3EfC/nIrPDa3Qm08f4tbvdCRx4rNiEy6Nbr9IRd+oiEz uxSBAtq/pyNRCeCNxPHztt2Y0z/nxZW8jukyjmMLCEjqWfnWMSvbCFEOLQ2icItq xd6989ThMr0/WDN1pCAT6JFjr42GN6Qe+IIde5JsnNCVSv/HVpZmf63mEBui8hsH E6Era0IORjMCoLk5P72Is1ePpNG4k0nJ+C+f9ZH6WVXYKqu2Fom0MKpCqaQsMalv XiRNcFwMR8MNku5hi+4G7vzWV0CPBRzINqDTzfRg0iUPFOSmrdz9ZszSNrP9rk33 FPrCgO+yMaH1m2Qve4cZWdqWBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBJRpLHm gBeRm3VE2WB4RsEpDRoJMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMDMwMDdBQjBC MjMzMTFFRkExNjRDOTE5QzRGOUFFMDIucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDBO BAIAAjBIAwcAIAEN8+TAAwcAIAEN8+jAAwcAIAEN9BnAAwcAIAEN9BzAAwcAJAGM 4AAAAwcAJAGXYAAAAwcAJAGZIAAAAwcAJAGaYAAAMA0GCSqGSIb3DQEBCwUAA4IB AQBD4ZXDxoVf6smCXCu8QUFEtZTgG80rgkcDVQC7CGVHsjEQA9Exkwp+S8sDZAiC se+YxWwRhid+6gkWiet9WxvPThGfPxsO29HCQhq2WR8tFfxHb9cw35VA6Gtp0ESf l0/FcnewfbMXV3n6tjG519RVLtpcFoL3fAJ6u5ZRL1YkhcfFoohlnyAvhDs0rHQe Nk7bqM6K2dUCwed/RjHGJhRxHiTRfSTcGz+spJNObirQMcNPVpGKxniu3ImwkdaR 5ZyucUzgbsB9EdCz0Nla3dXg3hvMXwOPY5PbHfdAivuDKpquU/SszBWBCH/AlLfR 3a97uW+JSru37YZ0jHaVlW6U -----END CERTIFICATE-----Generated at Wed Mar 18 00:39:30 2026 by rpki-client