$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/BF71D9D0F26811EFBC446868C4F9AE02.roa File: BF71D9D0F26811EFBC446868C4F9AE02.roa (raw, json) Hash identifier: N8OST72L0V0eTFnYcjzgV/oZzJ5hZOrN4k5ZtWUp5Q8= Subject key identifier: E8:25:A4:7A:CE:FA:48:FD:E9:56:DF:44:6E:E6:16:9A:59:AF:F4:CF Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Certificate serial: 010E Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/BF71D9D0F26811EFBC446868C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:07:31 +0000 ROA not before: Fri 03 Oct 2025 06:33:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153363 IP address blocks: 2001:df4:68c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 04:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Validity Not Before: Oct 3 06:33:30 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a599a3-ce4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:12:e0:d5:6d:6d:f1:32:81:95:2f:12:b7:52: 67:79:32:2d:7c:da:96:ab:61:f0:00:5a:3d:11:ea: 2b:de:5b:25:47:84:7c:66:6a:e4:2a:51:e6:ec:81: af:f5:50:15:18:b1:5e:f2:d2:3a:b8:d2:13:ee:64: 22:15:6b:9b:9a:b4:45:d0:6c:37:7c:23:ba:ac:c8: 57:d4:50:95:b4:18:a9:d6:a6:8a:c3:aa:3e:05:c4: e1:cf:3d:e1:11:92:aa:82:f7:da:ee:f3:62:51:9a: aa:9d:11:d6:c3:7b:f9:52:3d:4d:79:ea:c7:09:a4: 47:09:42:3a:ea:ac:4d:96:a9:4f:68:8c:85:1f:8e: d1:eb:0d:18:b5:b0:8f:b1:01:48:cf:ae:22:1c:80: 23:b2:a4:84:60:c7:03:e6:d9:27:10:5b:ba:84:48: d5:14:4f:49:37:bc:6b:b6:2f:65:a6:b3:48:8b:ad: 5f:05:c6:cf:4a:15:04:7e:d6:05:5d:08:70:96:b4: 2d:a6:aa:16:ce:0f:65:51:fd:23:1f:2d:93:3b:b8: 0a:1c:8f:98:33:ae:1b:1e:53:15:8e:f6:51:9d:e7: 59:60:d8:2a:25:b1:79:ee:43:95:6d:81:40:fe:a2: fa:bf:8a:fc:0b:d8:d9:54:2d:10:37:56:87:70:d0: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:A4:7A:CE:FA:48:FD:E9:56:DF:44:6E:E6:16:9A:59:AF:F4:CF X509v3 Authority Key Identifier: keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/BF71D9D0F26811EFBC446868C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:68c0::/48 Signature Algorithm: sha256WithRSAEncryption 23:36:79:86:80:63:62:be:cd:5e:d5:76:20:13:b0:43:b6:38: 56:b2:9b:53:3c:6a:f6:3f:70:ff:64:09:f7:2e:f4:f9:bb:fb: 13:63:a8:93:d0:56:da:c9:fc:4f:31:d9:9f:e4:3e:61:3c:55: 4a:66:05:1d:b4:6a:6d:dd:4e:2b:a6:3e:48:a2:db:38:76:d6: 51:84:23:1c:17:1c:05:84:e9:fd:f7:d9:94:8f:90:1b:02:ef: 64:99:c8:34:fc:40:1e:bf:dd:81:f4:c4:cc:42:01:c6:78:86: bc:ea:3b:86:52:af:41:cb:5d:e1:17:5f:92:1e:9f:31:45:5b: c2:be:82:f9:84:e8:82:66:21:dc:ee:79:c0:87:32:f0:6f:85: 51:19:99:02:5b:5a:8b:9e:20:da:1e:0e:63:39:d3:78:19:9e: a8:53:4f:9d:cb:12:7b:db:9e:ef:b7:b8:79:0c:03:8e:94:90: 81:08:ef:77:f3:c2:d4:a7:c2:dd:86:6b:f9:4d:82:90:c1:fe: 4b:af:be:94:8b:87:00:f2:8d:cb:70:77:ac:8f:16:53:14:d0: 86:2b:41:16:34:d7:29:20:56:53:15:92:76:95:03:1c:95:e3: 59:48:f0:c1:01:d2:0a:ab:f7:96:33:fa:d8:51:1a:51:dc:ca: 8e:44:f0:a8 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDZDMTk0Njk3ODE2RjlCMTMwQkE1M0NGNEJFRTY3NjAx NTk0RThDQjEwHhcNMjUxMDAzMDYzMzMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTlhMy1jZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjxLg1W1t8TKBlS8St1JneTItfNqWq2HwAFo9Eeor3lslR4R8ZmrkKlHm7IGv 9VAVGLFe8tI6uNIT7mQiFWubmrRF0Gw3fCO6rMhX1FCVtBip1qaKw6o+BcThzz3h EZKqgvfa7vNiUZqqnRHWw3v5Uj1NeerHCaRHCUI66qxNlqlPaIyFH47R6w0YtbCP sQFIz64iHIAjsqSEYMcD5tknEFu6hEjVFE9JN7xrti9lprNIi61fBcbPShUEftYF XQhwlrQtpqoWzg9lUf0jHy2TO7gKHI+YM64bHlMVjvZRnedZYNgqJbF57kOVbYFA /qL6v4r8C9jZVC0QN1aHcNC5WQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOglpHrO +kj96VbfRG7mFppZr/TPMB8GA1UdIwQYMBaAFGwZRpeBb5sTC6U89L7mdgFZToyx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wOUMwRDM2NjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9iQmxHbDRGdm14TUxwVHowdnVaMkFWbE9q TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbEdsNEZ2bXhNTHBUejB2dVoyQVZsT2pMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NBRjEvMDlDMEQzNjY4QUFEMTFFRkJFRjkxNjZBQzRGOUFFMDIvQkY3MUQ5RDBG MjY4MTFFRkJDNDQ2ODY4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9GjAMA0GCSqGSIb3DQEBCwUAA4IBAQAjNnmGgGNivs1e1XYg E7BDtjhWsptTPGr2P3D/ZAn3LvT5u/sTY6iT0FbayfxPMdmf5D5hPFVKZgUdtGpt 3U4rpj5Iots4dtZRhCMcFxwFhOn999mUj5AbAu9kmcg0/EAev92B9MTMQgHGeIa8 6juGUq9By13hF1+SHp8xRVvCvoL5hOiCZiHc7nnAhzLwb4VRGZkCW1qLniDaHg5j OdN4GZ6oU0+dyxJ7257vt7h5DAOOlJCBCO9388LUp8Ldhmv5TYKQwf5Lr76Ui4cA 8o3LcHesjxZTFNCGK0EWNNcpIFZTFZJ2lQMcleNZSPDBAdIKq/eWM/rYURpR3MqO RPCo -----END CERTIFICATE-----Generated at Sun Mar 15 08:41:52 2026 by rpki-client