$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa File: B245BA601C4311F08254DE40C4F9AE02.roa (raw, json) Hash identifier: lKCCxnQLqgGAAxb0II04awvwUyFApZ9TGbpShXSvZgw= Subject key identifier: C7:AC:B1:92:1F:F8:7B:66:64:AD:8B:F8:B2:22:4F:3B:CE:B4:C5:4C Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Certificate serial: AF Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:19:46 +0000 ROA not before: Tue 03 Feb 2026 06:29:32 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 140096 IP address blocks: 2400:cca0:2101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 06:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Validity Not Before: Feb 3 06:29:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46722-b2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:d7:d2:51:d1:89:11:56:bf:9f:e6:2d:9f: dc:a3:ce:4a:25:de:25:a7:98:91:8b:c2:59:2b:26: be:40:a6:39:44:63:e6:8e:16:6e:49:c1:3a:1a:de: 38:bf:d2:7c:73:f9:e9:43:bb:8e:0a:6f:7b:ab:b5: 3a:99:f7:35:15:f7:07:82:e4:88:bf:d5:d0:12:e1: d5:9b:85:f8:0d:c7:6f:97:63:18:ee:f9:3a:aa:cd: 0d:3f:29:30:3d:13:ef:17:30:1a:a7:c0:be:b3:20: c0:80:54:80:4d:5d:69:05:4e:24:09:63:05:b2:65: 4c:56:0f:6c:a1:74:55:c6:6c:06:36:34:57:7e:dd: eb:85:4b:61:d8:cb:b1:73:18:ed:44:0a:7b:7c:44: ea:26:3f:94:c7:2f:fc:4b:76:5f:fb:3b:57:4a:93: 47:90:cb:e9:c0:bd:e7:a4:ca:a7:51:1b:2e:5d:59: d8:d9:21:11:0a:79:b5:cd:3e:df:a1:9c:26:39:cc: 78:76:2c:eb:5d:39:c6:6c:d1:d5:23:8c:ce:37:50: e3:95:07:27:e1:6c:9f:c1:d9:db:90:3b:d4:c6:20: f8:11:0b:7e:5a:41:71:da:80:81:bf:2e:a4:e5:8e: 9a:49:60:1b:9b:b4:57:3e:30:cc:a6:ba:f4:33:94: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AC:B1:92:1F:F8:7B:66:64:AD:8B:F8:B2:22:4F:3B:CE:B4:C5:4C X509v3 Authority Key Identifier: keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:cca0:2101::/48 Signature Algorithm: sha256WithRSAEncryption b0:3e:19:a2:e8:3f:66:33:e8:78:03:e1:86:48:2a:05:54:cb: 19:2d:e3:71:14:b4:69:87:f6:05:ae:8e:c7:85:f3:df:9e:de: c7:00:9a:18:c2:93:a0:1b:2f:a6:6a:ca:66:1b:ac:7a:25:0d: 6f:a4:b9:5a:20:32:f5:27:71:4e:69:07:63:63:e4:d5:9c:97: e7:03:ee:1b:e1:5f:c4:c6:78:bb:6f:af:82:86:1a:3d:e6:c8: e0:5a:17:5e:10:64:35:8f:0b:41:38:2a:c5:e1:18:01:50:c6: 6e:a8:f2:40:5a:5f:fb:4c:92:82:11:e1:25:bc:f3:51:c4:2d: 26:bd:a3:02:0f:75:3b:ff:a3:bd:29:10:91:d8:7d:e0:2e:b0: 1c:11:ee:f3:2a:69:d6:0f:24:d5:d9:9f:71:ee:51:69:6c:fa: 40:d1:2a:7b:2c:28:23:c0:83:f3:4f:2d:a7:96:7a:98:b7:65: 5a:4d:4c:ae:d2:49:28:40:76:b9:10:f0:07:f7:37:03:d2:88: 10:62:73:f0:46:cb:f2:e6:de:e7:41:ea:d5:0a:d0:2b:e2:1a: e7:7c:54:95:51:37:f3:e3:d7:ee:b9:e0:28:b2:b0:7e:6f:e4: 90:33:f1:1a:c2:9c:88:47:1f:47:2c:9d:b7:ca:5b:67:7d:57: 85:68:f8:19 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTYxMTAvBgNVBAUTKDVGNjk5MTg2QTJFQkNENDVCMUZGNkEwQTRBRjYwNjA2 RjNCM0QwOEQwHhcNMjYwMjAzMDYyOTMyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjcyMi1iMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7XX0lHRiRFWv5/mLZ/co85KJd4lp5iRi8JZKya+QKY5RGPmjhZuScE6Gt44 v9J8c/npQ7uOCm97q7U6mfc1FfcHguSIv9XQEuHVm4X4Dcdvl2MY7vk6qs0NPykw PRPvFzAap8C+syDAgFSATV1pBU4kCWMFsmVMVg9soXRVxmwGNjRXft3rhUth2Mux cxjtRAp7fETqJj+Uxy/8S3Zf+ztXSpNHkMvpwL3npMqnURsuXVnY2SERCnm1zT7f oZwmOcx4dizrXTnGbNHVI4zON1DjlQcn4WyfwdnbkDvUxiD4EQt+WkFx2oCBvy6k 5Y6aSWAbm7RXPjDMprr0M5TPOwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFMessZIf +HtmZK2L+LIiTzvOtMVMMB8GA1UdIwQYMBaAFF9pkYai681Fsf9qCkr2Bgbzs9CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Ni9FRkYyQTBBMDFD NDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpVV3hfMm9LU3ZZR0J2T3ow STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4NTYvRUZGMkEwQTAxQzQxMTFGMEE5ODIxRjNFQzRGOUFFMDIvQjI0NUJBNjAx QzQzMTFGMDgyNTRERTQwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJADMoCEBMA0GCSqGSIb3DQEBCwUAA4IBAQCwPhmi6D9mM+h4A+GG SCoFVMsZLeNxFLRph/YFro7HhfPfnt7HAJoYwpOgGy+maspmG6x6JQ1vpLlaIDL1 J3FOaQdjY+TVnJfnA+4b4V/Exni7b6+Chho95sjgWhdeEGQ1jwtBOCrF4RgBUMZu qPJAWl/7TJKCEeElvPNRxC0mvaMCD3U7/6O9KRCR2H3gLrAcEe7zKmnWDyTV2Z9x 7lFpbPpA0Sp7LCgjwIPzTy2nlnqYt2VaTUyu0kkoQHa5EPAH9zcD0ogQYnPwRsvy 5t7nQerVCtAr4hrnfFSVUTfz49fuueAosrB+b+SQM/EawpyIRx9HLJ23yltnfVeF aPgZ -----END CERTIFICATE-----Generated at Sat Mar 7 17:25:25 2026 by rpki-client