$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa File: CF89F560B5E511EFBD3C4A3EC4F9AE02.roa (raw, json) Hash identifier: tXsg3DIktorDrF/YFWHvgqGFtNDPK+lvD8mDTOru2bA= Subject key identifier: E0:E1:94:80:6C:A6:22:B0:B6:0C:AF:1F:9D:AB:59:9C:E2:2E:1C:0A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5EAE Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:19:16 +0000 ROA not before: Thu 28 Aug 2025 14:56:14 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153005 IP address blocks: 2001:df4:5940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24238 (0x5eae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:14 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60ce3-246d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:1b:ff:8c:e8:d4:0f:10:87:94:6b:71:67: 9e:7b:8b:f5:d5:51:a3:01:19:40:06:51:85:03:4f: d7:1e:15:2d:cf:9f:3f:ca:2e:f4:1e:69:33:9b:c1: 58:52:7a:58:3b:db:2a:d0:7c:34:eb:12:d9:0a:62: 95:aa:46:bd:ac:b6:b0:20:04:be:c9:7d:20:87:0d: dc:87:b5:56:92:76:c9:2b:1b:64:26:00:c4:f3:59: 97:76:ce:8b:7b:5d:4e:a1:74:28:1f:09:ab:9f:92: 83:f5:a1:c7:fe:62:1f:b4:61:58:83:33:b3:45:e1: b8:92:f4:5c:d6:b1:c8:84:63:0a:fe:16:49:c2:bb: 45:7b:a4:e8:e7:13:94:8b:ad:79:3e:ed:e8:a9:aa: 6f:05:67:01:21:83:1d:67:91:22:73:63:0e:5f:9c: 30:3c:41:6c:7c:3f:89:5a:cb:9e:64:76:b8:ba:75: 67:45:cf:9d:6f:e5:00:23:17:7b:8f:32:f3:fc:f2: 87:71:07:b7:2b:9a:9f:6e:b7:60:a4:f1:60:60:75: 11:7e:13:73:4f:c0:55:9c:41:e6:1c:69:23:e3:74: 81:75:59:c3:4e:03:6d:c5:e4:64:a1:b5:21:ea:a7: 06:ad:5e:c2:ab:8f:40:57:84:9a:5c:47:9e:10:99: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:94:80:6C:A6:22:B0:B6:0C:AF:1F:9D:AB:59:9C:E2:2E:1C:0A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:5940::/48 Signature Algorithm: sha256WithRSAEncryption bf:55:c6:40:32:ae:ba:fe:65:fb:b9:76:d3:c7:63:fa:a7:c6: 9f:32:b4:21:7a:92:09:c9:bc:cd:08:b1:b7:53:cf:6e:dd:1d: 69:e7:b6:70:60:2c:b0:13:0e:2b:47:5f:f0:50:74:42:0b:0d: 44:af:45:db:17:99:bc:be:79:21:62:d1:79:e7:0f:e5:28:23: 24:02:aa:ae:a6:f3:2b:64:cf:a0:85:31:78:3e:db:6b:63:db: 6a:58:2e:ca:b6:49:60:d2:bd:95:66:d7:9f:97:da:08:fb:eb: 51:27:f4:1d:9d:df:94:4f:01:92:c1:f5:c2:91:e3:3a:fd:ff: 54:44:75:cc:77:63:13:ac:2b:ee:b9:35:1d:25:ed:4b:63:4d: f5:21:6a:d9:af:4b:e5:58:7d:c1:f7:95:39:d3:74:1e:15:d9: c3:a8:3f:ed:0a:f2:bf:73:99:e7:22:70:d1:11:3a:4b:a5:b9: b3:5d:5c:2f:03:56:99:1a:5a:ba:8f:7f:38:cf:e2:12:73:15: 44:f0:86:76:ab:b1:d2:68:63:04:cd:8d:04:f6:97:08:db:56: 24:f5:3c:bf:cc:be:dd:6e:56:84:31:8b:64:c6:b1:31:b5:1c: 61:bd:ad:65:bc:cf:a2:c4:65:03:98:61:0d:02:ba:26:8c:20: 65:b9:dd:41 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICXq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGNlMy0yNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRob/4zo1A8Qh5RrcWeee4v11VGjARlABlGFA0/XHhUtz58/yi70Hmkzm8FY UnpYO9sq0Hw06xLZCmKVqka9rLawIAS+yX0ghw3ch7VWknbJKxtkJgDE81mXds6L e11OoXQoHwmrn5KD9aHH/mIftGFYgzOzReG4kvRc1rHIhGMK/hZJwrtFe6To5xOU i615Pu3oqapvBWcBIYMdZ5Eic2MOX5wwPEFsfD+JWsueZHa4unVnRc+db+UAIxd7 jzLz/PKHcQe3K5qfbrdgpPFgYHURfhNzT8BVnEHmHGkj43SBdVnDTgNtxeRkobUh 6qcGrV7Cq49AV4SaXEeeEJknnQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFODhlIBs piKwtgyvH52rWZziLhwKMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQ0Y4OUY1NjBC NUU1MTFFRkJEM0M0QTNFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9FlAMA0GCSqGSIb3DQEBCwUAA4IBAQC/VcZAMq66/mX7uXbT x2P6p8afMrQhepIJybzNCLG3U89u3R1p57ZwYCywEw4rR1/wUHRCCw1Er0XbF5m8 vnkhYtF55w/lKCMkAqqupvMrZM+ghTF4PttrY9tqWC7Ktklg0r2VZtefl9oI++tR J/Qdnd+UTwGSwfXCkeM6/f9URHXMd2MTrCvuuTUdJe1LY031IWrZr0vlWH3B95U5 03QeFdnDqD/tCvK/c5nnInDRETpLpbmzXVwvA1aZGlq6j384z+IScxVE8IZ2q7HS aGMEzY0E9pcI21Yk9Ty/zL7dblaEMYtkxrExtRxhva1lvM+ixGUDmGENAromjCBl ud1B -----END CERTIFICATE-----Generated at Sat Mar 7 22:46:25 2026 by rpki-client