$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/8DDD0D56A98C11EFAAC0F364C4F9AE02.roa File: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (raw, json) Hash identifier: pLovfOrhsSDToSpDuMZH/wCfyLBbh6arUaNSLjztFog= Subject key identifier: BE:4E:19:2A:3E:71:0A:C1:CA:68:E3:3B:AA:37:BC:7F:DC:9F:44:B5 Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Certificate serial: F7 Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/8DDD0D56A98C11EFAAC0F364C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:27:37 +0000 ROA not before: Sat 29 Nov 2025 04:03:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137037 IP address blocks: 2001:df4:96c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 05:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Validity Not Before: Nov 29 04:03:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a59e59-1131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:58:08:ca:f6:5d:5b:fb:41:36:1d:ab:16:7b: 3e:45:39:b2:91:5b:ff:43:b4:9e:85:66:89:4f:f0: 44:67:f0:71:3a:d4:12:ae:bd:99:6c:5d:55:1c:72: 18:9a:2a:a5:15:2f:6d:47:c5:87:95:3a:83:9a:d1: 0a:ca:f3:50:a0:2f:14:0e:59:80:51:bd:c7:ce:4d: 49:3d:e3:b6:2a:cf:5e:30:40:93:77:6d:ca:aa:67: 2b:0b:f6:3e:8b:69:08:4d:e7:b2:de:0c:5b:29:9d: 65:3e:5e:b4:20:9e:42:84:68:80:1e:fb:4f:b4:9f: 91:80:1b:63:27:f6:0f:be:75:33:02:ed:f5:eb:08: b1:13:0f:eb:8b:c0:ef:3e:39:27:44:fb:10:40:52: 2d:3a:a8:d6:9b:37:bd:2e:91:d8:d7:15:13:dd:38: 47:37:3e:aa:03:ea:71:c9:11:2e:69:1b:fd:7c:f8: 6d:6a:8b:fd:e8:ca:9a:03:e2:bd:8a:fa:76:ef:3d: 37:ca:d5:93:2e:bb:20:b1:3f:b0:17:f8:d6:d6:9e: 0b:ef:a5:de:2d:9e:5b:89:b6:14:d9:a8:14:6f:70: 62:f5:91:de:88:1d:61:47:7f:27:56:b3:3b:6c:b0: d0:c1:b8:6f:9e:77:6a:27:f8:e9:ea:b2:08:97:13: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4E:19:2A:3E:71:0A:C1:CA:68:E3:3B:AA:37:BC:7F:DC:9F:44:B5 X509v3 Authority Key Identifier: keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/8DDD0D56A98C11EFAAC0F364C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:96c0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:68:a5:6e:5b:f2:53:93:bc:9d:5b:60:12:0b:4e:e8:83:f0: 75:48:d5:4b:e8:d2:d7:ce:f9:c1:42:fe:34:f0:d1:1d:5a:82: 7d:03:96:0b:7f:bb:60:60:8e:73:ba:c8:4b:86:77:8f:cd:9d: c1:ef:a9:7b:13:25:09:76:29:5f:cb:9c:39:ca:67:81:e6:1b: 55:d1:72:33:52:57:34:3c:f7:a4:72:cb:37:28:d6:4f:ab:ae: 64:f3:91:b5:f9:bd:10:6a:58:61:18:7d:36:71:95:46:50:0b: 71:a7:b7:c4:a5:43:93:8d:1b:1f:72:7e:bf:16:bb:23:ef:24: f7:f9:10:46:19:94:30:73:b7:14:b2:1b:0e:cf:7a:48:73:08: ef:d5:48:70:38:3f:56:3e:28:19:51:44:11:0c:52:08:76:01: 34:c9:fa:bf:c8:3c:c5:ac:98:6d:ce:27:db:56:56:2e:06:24: cd:9e:5e:2d:88:82:06:dc:57:8d:60:0e:e8:47:4f:4c:ee:5b: fe:dc:73:5f:0b:9f:56:b9:2e:e3:24:4a:74:0e:1e:b2:b6:72: 27:3f:27:7a:95:d7:3f:0b:59:d1:eb:00:78:8e:37:88:8a:46: 8e:fa:56:54:4d:45:58:44:9a:8e:1a:73:13:66:3c:6a:d0:5b: e5:ec:bf:65 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKDc4QTdEMzVFRjlDNDc3NUU3NENCQTNEMTY2QjYxQjc1 OTAyNDE1MjMwHhcNMjUxMTI5MDQwMzA2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWU1OS0xMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61gIyvZdW/tBNh2rFns+RTmykVv/Q7SehWaJT/BEZ/BxOtQSrr2ZbF1VHHIY miqlFS9tR8WHlTqDmtEKyvNQoC8UDlmAUb3Hzk1JPeO2Ks9eMECTd23KqmcrC/Y+ i2kITeey3gxbKZ1lPl60IJ5ChGiAHvtPtJ+RgBtjJ/YPvnUzAu316wixEw/ri8Dv PjknRPsQQFItOqjWmze9LpHY1xUT3ThHNz6qA+pxyREuaRv9fPhtaov96MqaA+K9 ivp27z03ytWTLrsgsT+wF/jW1p4L76XeLZ5bibYU2agUb3Bi9ZHeiB1hR38nVrM7 bLDQwbhvnndqJ/jp6rIIlxMJHQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFL5OGSo+ cQrBymjjO6o3vH/cn0S1MB8GA1UdIwQYMBaAFHin0175xHdedMuj0Wa2G3WQJBUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wREU4OTM0MEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9lS2ZUWHZuRWQxNTB5NlBSWnJZYmRaQWtG U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLZlRYdm5FZDE1MHk2UFJaclliZFpBa0ZTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDJDMzgvMERFODkzNDBBOThDMTFFRjkzNTBGQjYzQzRGOUFFMDIvOERERDBENTZB OThDMTFFRkFBQzBGMzY0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9JbAMA0GCSqGSIb3DQEBCwUAA4IBAQAbaKVuW/JTk7ydW2AS C07og/B1SNVL6NLXzvnBQv408NEdWoJ9A5YLf7tgYI5zushLhnePzZ3B76l7EyUJ dilfy5w5ymeB5htV0XIzUlc0PPekcss3KNZPq65k85G1+b0QalhhGH02cZVGUAtx p7fEpUOTjRsfcn6/Frsj7yT3+RBGGZQwc7cUshsOz3pIcwjv1UhwOD9WPigZUUQR DFIIdgE0yfq/yDzFrJhtzifbVlYuBiTNnl4tiIIG3FeNYA7oR09M7lv+3HNfC59W uS7jJEp0Dh6ytnInPyd6ldc/C1nR6wB4jjeIikaO+lZUTUVYRJqOGnMTZjxq0Fvl 7L9l -----END CERTIFICATE-----Generated at Wed Mar 4 13:00:19 2026 by rpki-client