$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa File: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (raw, json) Hash identifier: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4= Subject key identifier: 52:B9:37:AC:4D:AD:E2:AC:32:5D:76:10:E4:87:85:15:39:44:04:1A Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 3F Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:47:40 +0000 ROA not before: Mon 01 Dec 2025 06:41:07 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 56132 IP address blocks: 130.194.0.0/16 maxlen: 16 130.194.248.0/21 maxlen: 21 130.194.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 18:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Dec 1 06:41:07 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a594fb-0005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:b6:31:f4:10:b4:ee:6d:35:58:50:ba:28: ae:d6:91:cc:ed:7b:ef:99:d6:7e:8d:ed:1c:c3:05: d1:54:a6:80:89:65:82:20:6b:c6:bf:f9:75:84:1c: 73:8a:f7:c6:83:30:c9:70:ec:e0:03:3b:0b:47:52: 40:9e:5e:b1:d8:fa:d3:cb:48:46:1d:b6:1d:36:ee: af:54:2e:0c:a0:d8:21:01:fc:ca:08:62:06:67:ea: 4a:9a:0d:cd:e9:22:15:8c:08:ac:1d:d8:9a:c6:9c: c2:c3:ed:d2:15:a7:ec:a0:35:9a:bd:03:38:a0:d4: 22:9c:8a:2c:2a:0f:03:45:8a:08:22:57:9f:ed:61: 27:97:2a:e3:a3:7b:d4:3e:b4:da:50:9c:9d:8c:cd: 2f:3b:4d:16:d5:17:00:dd:c1:79:dd:e2:fd:72:c6: 7b:ec:49:6e:b4:75:8a:50:18:88:02:a9:d2:be:9c: 94:4b:0a:f3:57:fa:92:1a:66:9b:58:bb:f7:04:c1: 67:a5:e9:f9:78:de:7c:c8:42:53:6d:7b:46:1a:dd: 1d:b7:a0:83:5a:bc:57:b8:31:53:cf:bf:38:e5:3d: cb:53:b5:b6:c3:a3:95:15:f4:1f:4e:2a:0c:cf:bb: 9d:15:5a:40:f2:b2:cd:5f:24:7a:31:37:17:a7:0f: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B9:37:AC:4D:AD:E2:AC:32:5D:76:10:E4:87:85:15:39:44:04:1A X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 130.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6d:53:5b:87:74:d8:5a:bd:e4:b5:d5:f0:52:33:dd:ec:03:86: 9b:6d:94:fe:4b:d1:10:e9:5c:04:3e:b1:ee:f4:79:13:2a:21: 7d:7f:48:1f:d4:ee:1a:db:9c:43:3c:20:4b:f1:a0:4a:55:7d: 3a:c3:ec:cd:e9:8e:eb:1e:0b:d5:41:db:26:75:e6:05:6a:79: e4:65:b2:1e:8d:2f:a5:94:45:c1:1f:12:d8:6e:ec:89:b4:15: 70:a2:e7:4a:11:a3:d5:d0:ff:d2:ff:59:74:7c:bd:9d:86:d6: 3d:a6:f0:bf:73:d5:ae:f7:25:f3:93:07:65:de:9a:86:0d:37: 8f:27:11:e8:8b:a2:0e:50:55:cd:d4:bc:21:82:3a:82:6a:02: 59:23:9e:3d:48:ea:28:e5:1d:98:a8:22:72:9b:ac:52:83:bf: 4f:af:1e:17:3f:14:4b:d9:94:47:bf:7b:da:88:9f:50:ae:b7: 64:be:0c:96:39:be:64:6f:4c:e0:82:f9:3c:ec:be:1c:17:88: 0b:f7:e0:d3:f3:18:bb:d1:b6:3e:aa:c8:08:f5:78:dd:ad:49: e8:00:9a:f2:99:28:50:32:6d:55:57:2b:e1:d1:57:d2:e1:8c: 65:d9:8d:64:65:e1:cd:29:3f:a3:ec:0d:c0:38:bc:91:c6:11: cd:1f:60:26 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNTEyMDEwNjQxMDdaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU5NGZiLTAwMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp+rYx9BC07m01WFC6KK7Wkczte++Z1n6N7RzDBdFUpoCJZYIga8a/+XWEHHOK 98aDMMlw7OADOwtHUkCeXrHY+tPLSEYdth027q9ULgyg2CEB/MoIYgZn6kqaDc3p IhWMCKwd2JrGnMLD7dIVp+ygNZq9Azig1CKciiwqDwNFiggiV5/tYSeXKuOje9Q+ tNpQnJ2MzS87TRbVFwDdwXnd4v1yxnvsSW60dYpQGIgCqdK+nJRLCvNX+pIaZptY u/cEwWel6fl43nzIQlNte0Ya3R23oINavFe4MVPPvzjlPctTtbbDo5UV9B9OKgzP u50VWkDyss1fJHoxNxenD4CxAgMBAAGjggJfMIICWzAdBgNVHQ4EFgQUUrk3rE2t 4qwyXXYQ5IeFFTlEBBowHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS9FRDIyNTUzMkM0MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi8zQUY2Q0RFNENF N0UxMUYwQkREM0U0NTJDNEY5QUUwMi5yb2EwHgYIKwYBBQUHAQcBAf8EDzANMAsE AgABMAUDAwCCwjANBgkqhkiG9w0BAQsFAAOCAQEAbVNbh3TYWr3ktdXwUjPd7AOG m22U/kvREOlcBD6x7vR5EyohfX9IH9TuGtucQzwgS/GgSlV9OsPszemO6x4L1UHb JnXmBWp55GWyHo0vpZRFwR8S2G7sibQVcKLnShGj1dD/0v9ZdHy9nYbWPabwv3PV rvcl85MHZd6ahg03jycR6IuiDlBVzdS8IYI6gmoCWSOePUjqKOUdmKgicpusUoO/ T68eFz8US9mUR7972oifUK63ZL4Mljm+ZG9M4IL5POy+HBeIC/fg0/MYu9G2PqrI CPV43a1J6ACa8pkoUDJtVVcr4dFX0uGMZdmNZGXhzSk/o+wNwDi8kcYRzR9gJg== -----END CERTIFICATE-----Generated at Wed Mar 4 09:48:03 2026 by rpki-client