$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa File: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (raw, json) Hash identifier: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M= Subject key identifier: FE:A4:A6:34:5D:D0:26:6D:61:7A:DE:D8:AA:70:CB:CF:DC:74:0B:85 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0B40 Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa Signing time: Thu 26 Mar 2026 19:24:54 +0000 ROA not before: Thu 26 Mar 2026 19:24:53 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 1613 IP address blocks: 2001:218:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: Mar 26 19:24:53 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c58805-0038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:e7:8f:a4:a7:d5:29:2f:f2:cd:6f:a3:47: cb:fd:98:af:1a:55:2c:6f:5d:40:b4:a1:74:13:1a: ae:d2:6e:61:47:de:18:4f:89:20:70:0f:75:f1:09: 9b:05:c1:b1:a0:67:b8:ec:81:ea:09:f7:e3:5f:2f: e4:e0:c9:0a:3c:65:8d:48:57:22:85:03:d0:a7:65: 38:f2:82:fb:c5:6a:50:cc:f6:c7:fb:ed:ff:f1:f0: 34:85:2f:1d:29:ee:bb:cc:9a:51:f9:92:8c:c0:9d: 3d:1a:37:3c:46:36:0e:85:1f:f7:cc:31:47:7d:8c: 67:e2:1b:ae:fa:27:64:b7:ee:22:b4:15:ee:38:04: 6f:8f:42:fd:9d:08:c5:9c:21:42:86:d6:a4:5b:c7: d2:bd:cb:88:a1:23:11:ec:9d:60:2d:1f:4e:88:d8: d3:0f:4a:04:1a:c9:60:d8:5a:95:00:eb:de:8f:f2: f1:ff:10:d2:61:88:24:0c:7c:57:0e:a5:9e:54:36: f2:ea:88:65:55:97:a3:4c:37:b6:55:d4:27:d8:7a: e3:39:76:b0:38:6f:e5:c4:29:6e:cd:2d:bb:6c:ce: af:72:f2:a8:21:a8:bf:cd:e8:46:b9:5c:21:f5:1f: cf:9e:8d:4f:bc:a3:45:be:da:ae:65:3c:90:13:19: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A4:A6:34:5D:D0:26:6D:61:7A:DE:D8:AA:70:CB:CF:DC:74:0B:85 X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:218:3002::/48 Signature Algorithm: sha256WithRSAEncryption b9:12:f8:3d:4e:cf:1d:0d:4f:e0:73:5a:71:d4:b0:a3:9c:ae: e5:fe:a0:63:26:ec:42:eb:40:38:3c:e4:7d:77:a5:c1:29:83: 89:33:81:88:ef:d0:68:a8:2d:24:4c:14:18:0b:8d:a7:8b:32: 1e:ab:ea:7e:e1:18:2c:8c:6b:6f:93:29:58:f6:dc:c1:55:97: a5:3e:fa:ee:c0:bb:7a:ae:d2:ef:96:1f:88:65:2f:81:84:5d: 19:89:fe:74:03:58:d5:55:23:ae:eb:97:9b:e9:8e:a1:5b:8f: a4:88:19:26:88:c6:58:35:fc:81:17:23:a3:e6:b1:3b:96:a6: 73:6d:01:2e:d6:e1:a1:d0:6c:a4:3d:d5:80:c4:9e:e4:46:f7: 8f:d0:f2:4a:5a:35:5a:1b:df:38:8d:7b:52:d3:ad:31:45:3e: c3:7e:ff:59:69:00:39:2e:0c:1f:18:88:9a:82:fb:7f:4d:18: 7c:2c:75:c6:22:1d:c8:f0:51:1a:46:87:14:a5:17:c8:36:df: a3:e3:48:56:d6:ba:ca:77:f9:12:e1:83:be:f3:fe:bc:8c:51: 55:02:a2:fa:ea:7f:04:a5:e1:81:2d:ef:6d:0a:23:63:a5:25: f4:b9:b7:b9:de:d8:7c:46:f1:43:03:5b:f1:d9:bf:fe:ff:b0: ea:4b:94:37 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjYwMzI2MTkyNDUzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1ODgwNS0wMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJznj6Sn1Skv8s1vo0fL/ZivGlUsb11AtKF0Exqu0m5hR94YT4kgcA918Qmb BcGxoGe47IHqCffjXy/k4MkKPGWNSFcihQPQp2U48oL7xWpQzPbH++3/8fA0hS8d Ke67zJpR+ZKMwJ09Gjc8RjYOhR/3zDFHfYxn4huu+idkt+4itBXuOARvj0L9nQjF nCFChtakW8fSvcuIoSMR7J1gLR9OiNjTD0oEGslg2FqVAOvej/Lx/xDSYYgkDHxX DqWeVDby6ohlVZejTDe2VdQn2HrjOXawOG/lxCluzS27bM6vcvKoIai/zehGuVwh 9R/Pno1PvKNFvtquZTyQExkiwQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFP6kpjRd 0CZtYXre2Kpwy8/cdAuFMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvOEE5MTZGREM4 M0Q3MTFFQUFBNUFFQzU2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAECGDACMA0GCSqGSIb3DQEBCwUAA4IBAQC5Evg9Ts8dDU/gc1px 1LCjnK7l/qBjJuxC60A4POR9d6XBKYOJM4GI79BoqC0kTBQYC42nizIeq+p+4Rgs jGtvkylY9tzBVZelPvruwLt6rtLvlh+IZS+BhF0Zif50A1jVVSOu65eb6Y6hW4+k iBkmiMZYNfyBFyOj5rE7lqZzbQEu1uGh0GykPdWAxJ7kRveP0PJKWjVaG984jXtS 060xRT7Dfv9ZaQA5LgwfGIiagvt/TRh8LHXGIh3I8FEaRocUpRfINt+j40hW1rrK d/kS4YO+8/68jFFVAqL66n8EpeGBLe9tCiNjpSX0ube53th8RvFDA1vx2b/+/7Dq S5Q3 -----END CERTIFICATE-----Generated at Tue Mar 31 00:21:13 2026 by rpki-client