$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/41669A1AFA7111EFBBC5374BC4F9AE02.roa File: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (raw, json) Hash identifier: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0= Subject key identifier: 61:1D:18:8D:6B:33:1D:0C:8D:DE:3C:53:26:2A:ED:83:70:5E:2E:12 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 0292 Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/41669A1AFA7111EFBBC5374BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:40:18 +0000 ROA not before: Mon 03 Nov 2025 01:46:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 212147 IP address blocks: 2400:b3a0:e1::/48 maxlen: 48 2400:b3a0:e2::/48 maxlen: 48 2400:b3a0:e3::/48 maxlen: 48 2400:b3a0:e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 01:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Nov 3 01:46:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46bf2-5a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:76:73:ce:a8:e9:e9:05:e0:4d:70:df:6d: e2:22:86:10:8b:6c:68:2a:67:d5:59:19:be:fb:4c: d6:83:95:98:3d:b8:d6:94:ea:9c:c9:60:b0:72:0b: 48:d9:10:a7:5b:5c:5d:8b:b3:4c:af:7d:8a:93:54: 27:9c:a6:4d:a3:12:f0:39:cc:ad:29:c1:d9:8f:f7: ec:39:0e:b8:4d:3d:bc:ff:67:7b:62:b4:f0:f5:86: e9:6a:af:b1:78:9c:51:10:e7:2d:88:89:02:d5:5d: be:d2:16:2b:0a:e9:dd:2d:0e:05:23:b5:10:3c:11: f3:96:85:25:06:a0:a9:a4:8d:3d:30:cf:8c:46:bc: af:ca:5c:c3:da:50:51:5c:e7:a1:59:a9:c3:1d:0b: a3:37:be:f7:67:1f:87:ff:c7:8e:45:11:cd:b2:32: 46:4e:18:cc:d7:55:b8:4c:cb:01:da:60:06:44:13: 0d:54:38:33:aa:e8:31:cf:70:da:b5:a7:25:8f:9f: 16:77:28:0c:cb:0f:99:b1:d6:b5:c3:43:9e:3d:49: 43:e0:9c:13:02:3f:f9:8b:cb:07:61:0e:8b:a6:f6: 75:a7:d0:fb:88:00:c2:d2:bb:fd:95:69:bd:14:8f: e1:40:f1:d0:fc:70:14:1d:2a:ea:c6:8a:86:eb:66: 56:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1D:18:8D:6B:33:1D:0C:8D:DE:3C:53:26:2A:ED:83:70:5E:2E:12 X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/41669A1AFA7111EFBBC5374BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:b3a0:e1::-2400:b3a0:e4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 48:66:e0:9d:b7:ab:97:b2:ff:04:51:7e:7c:01:6e:85:3e:ae: a7:78:4c:51:bd:51:15:8f:3c:cc:ee:a9:ca:98:37:b8:bb:02: f1:a6:29:f5:32:bd:92:07:43:53:b4:54:05:c2:11:d4:cf:65: 00:94:bf:7d:22:d6:69:3c:c7:f6:10:67:c0:df:57:22:d6:6c: 25:e1:de:66:b5:79:10:a9:dc:3d:65:8c:e6:86:ae:2f:6b:59: ad:17:98:89:b8:dd:a8:6d:88:45:d9:44:9e:30:56:43:dc:8b: cb:98:b0:86:7c:35:25:1c:f3:33:fb:e1:09:13:40:3b:70:12: b8:62:26:46:00:8d:bb:d7:7e:c9:a6:c8:2f:bf:59:a7:fa:c5: db:73:42:90:69:a3:e8:fe:51:12:61:6f:29:99:76:60:a0:94: 6f:eb:5c:0b:d1:e2:b7:39:41:2e:3d:86:81:ea:6d:c0:54:75: 4e:46:6c:66:52:6a:37:8c:67:b3:ed:e4:b4:63:7b:a6:fc:d4: d9:fc:fa:5c:0a:46:fb:18:f0:cb:27:87:b3:86:16:19:28:b7: 49:56:e5:28:5d:18:c9:bb:fb:85:9f:88:16:db:be:12:5c:82: 81:14:56:53:80:8d:e8:0b:0f:fe:24:70:59:cb:39:67:f8:50: 44:54:d7:5b -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjUxMTAzMDE0NjUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmJmMi01YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ex2c86o6ekF4E1w323iIoYQi2xoKmfVWRm++0zWg5WYPbjWlOqcyWCwcgtI 2RCnW1xdi7NMr32Kk1QnnKZNoxLwOcytKcHZj/fsOQ64TT28/2d7YrTw9Ybpaq+x eJxREOctiIkC1V2+0hYrCundLQ4FI7UQPBHzloUlBqCppI09MM+MRryvylzD2lBR XOehWanDHQujN773Zx+H/8eORRHNsjJGThjM11W4TMsB2mAGRBMNVDgzqugxz3Da taclj58WdygMyw+Zsda1w0OePUlD4JwTAj/5i8sHYQ6LpvZ1p9D7iADC0rv9lWm9 FI/hQPHQ/HAUHSrqxoqG62ZW4wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFGEdGI1r Mx0Mjd48UyYq7YNwXi4SMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUUzRjIvODZBMEZCMjg0NjE2MTFFRDkyRUFBRDIwQzRGOUFFMDIvNDE2NjlBMUFG QTcxMTFFRkJCQzUzNzRCQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwAkALOgAOEDBwAkALOgAOQwDQYJKoZIhvcNAQELBQADggEBAEhm 4J23q5ey/wRRfnwBboU+rqd4TFG9URWPPMzuqcqYN7i7AvGmKfUyvZIHQ1O0VAXC EdTPZQCUv30i1mk8x/YQZ8DfVyLWbCXh3ma1eRCp3D1ljOaGri9rWa0XmIm43aht iEXZRJ4wVkPci8uYsIZ8NSUc8zP74QkTQDtwErhiJkYAjbvXfsmmyC+/Waf6xdtz QpBpo+j+URJhbymZdmCglG/rXAvR4rc5QS49hoHqbcBUdU5GbGZSajeMZ7Pt5LRj e6b81Nn8+lwKRvsY8Msnh7OGFhkot0lW5ShdGMm7+4WfiBbbvhJcgoEUVlOAjegL D/4kcFnLOWf4UERU11s= -----END CERTIFICATE-----Generated at Thu Mar 5 21:51:57 2026 by rpki-client