$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/312AAAD4BB7E11E9AFB49C42C4F9AE02.roa File: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (raw, json) Hash identifier: xwFRv4+36h+Qv5qqEuC5mbYdz3jPK7pHI/k9Akot9jk= Subject key identifier: 9B:CA:EC:CA:C5:5E:16:2D:75:82:7E:E4:BC:FC:F0:28:95:A4:2F:7C Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 36C8 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/312AAAD4BB7E11E9AFB49C42C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:45:45 +0000 ROA not before: Tue 02 Sep 2025 15:01:31 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45177 IP address blocks: 2403:cc00:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 14:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14024 (0x36c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:31 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48959-1d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8a:8d:c8:5f:38:3b:77:26:a9:f1:b9:d5:61: 1a:87:42:b9:1b:65:63:be:ce:1e:a6:9b:44:01:ad: 40:95:9f:b2:ed:10:28:5a:e1:82:21:07:90:9f:39: 2a:7f:69:b1:19:2c:0a:c5:65:e5:3a:09:81:25:e3: b3:98:ae:e7:ed:ec:e2:78:6c:7a:6a:1f:e5:b1:36: bc:bd:d3:ec:3c:f4:e5:61:e9:08:ae:db:b9:13:e7: 63:4a:9b:46:16:1c:7e:72:5b:86:7a:fb:7f:45:7b: f4:61:9e:9e:44:ef:49:85:e5:3a:d5:6e:df:59:66: 2b:f4:2b:2d:ac:5f:e9:d8:b7:0a:ef:a3:d0:fa:1a: f2:c9:f9:2d:97:be:25:1b:a5:dd:3d:07:9b:38:0f: 1b:a1:34:39:b7:1f:cf:e5:b9:12:d4:f6:39:0d:a3: 88:e4:31:2b:f0:be:24:71:9c:63:c2:5a:65:5b:e7: e1:01:22:3a:d7:fc:93:31:aa:7f:26:9f:70:07:d9: d6:6d:c6:f3:e0:0f:99:b9:06:32:34:0d:d9:4d:2c: e0:fb:ce:9e:7b:ba:a9:8c:dd:94:6b:ac:11:10:3f: 8d:10:10:e5:b6:38:73:8f:d4:0e:29:fd:ff:38:4a: 59:63:16:e4:5d:25:83:1e:e7:5b:cd:69:77:f6:ef: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CA:EC:CA:C5:5E:16:2D:75:82:7E:E4:BC:FC:F0:28:95:A4:2F:7C X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/312AAAD4BB7E11E9AFB49C42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2403:cc00:4000::/36 Signature Algorithm: sha256WithRSAEncryption 7f:de:cb:df:b6:85:fd:50:60:72:df:c8:1a:d7:37:17:d5:ba: 46:49:d2:0e:bc:4e:db:38:71:e7:b1:be:16:dd:bd:fa:41:03: 99:f8:da:bd:86:5c:f6:0f:e2:6e:d4:34:af:d8:67:db:7b:c7: b4:b9:fe:7c:a5:65:06:ec:2e:f0:1c:fb:52:61:c1:ca:df:22: bc:7f:7c:16:48:df:e4:f2:f9:39:c5:05:6d:e4:98:09:f8:ab: 59:e9:9a:ad:fb:d0:2c:a9:ef:ae:a5:c5:76:fa:18:c5:2f:bc: 0e:33:be:a5:c2:6d:2b:ca:29:00:8b:59:0c:09:15:73:01:37: 53:3f:f1:7d:81:57:22:ee:50:aa:ab:c1:09:1c:ba:7d:52:9a: 98:da:cb:2c:2d:56:d4:30:d1:c9:e3:b7:5e:bf:b2:d7:75:f5: 5f:b5:65:e3:c5:8f:59:e7:3f:e4:e0:c3:17:2f:a1:a0:e0:dc: da:10:12:00:7e:3b:27:48:a4:50:64:53:52:41:63:3e:22:0d: 4b:69:5e:0b:7d:e8:44:e2:89:34:d9:ea:ba:37:83:fc:a3:7a: 01:9f:aa:78:e6:63:77:0d:cd:d7:d6:05:d5:71:99:7b:9d:bd: 58:9f:f1:2e:bc:2a:36:5b:9d:42:56:6b:3c:38:39:14:79:ed: 57:e4:c3:9c -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgICNsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODk1OS0xZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9YqNyF84O3cmqfG51WEah0K5G2Vjvs4epptEAa1AlZ+y7RAoWuGCIQeQnzkq f2mxGSwKxWXlOgmBJeOzmK7n7ezieGx6ah/lsTa8vdPsPPTlYekIrtu5E+djSptG Fhx+cluGevt/RXv0YZ6eRO9JheU61W7fWWYr9CstrF/p2LcK76PQ+hryyfktl74l G6XdPQebOA8boTQ5tx/P5bkS1PY5DaOI5DEr8L4kcZxjwlplW+fhASI61/yTMap/ Jp9wB9nWbcbz4A+ZuQYyNA3ZTSzg+86ee7qpjN2Ua6wRED+NEBDltjhzj9QOKf3/ OEpZYxbkXSWDHudbzWl39u82ZQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFJvK7MrF XhYtdYJ+5Lz88CiVpC98MB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvMzEyQUFBRDRC QjdFMTFFOUFGQjQ5QzQyQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAPMAEAwDQYJKoZIhvcNAQELBQADggEBAH/ey9+2hf1QYHLfyBrX NxfVukZJ0g68Tts4ceexvhbdvfpBA5n42r2GXPYP4m7UNK/YZ9t7x7S5/nylZQbs LvAc+1JhwcrfIrx/fBZI3+Ty+TnFBW3kmAn4q1npmq370Cyp766lxXb6GMUvvA4z vqXCbSvKKQCLWQwJFXMBN1M/8X2BVyLuUKqrwQkcun1SmpjayywtVtQw0cnjt16/ std19V+1ZePFj1nnP+TgwxcvoaDg3NoQEgB+OydIpFBkU1JBYz4iDUtpXgt96ETi iTTZ6ro3g/yjegGfqnjmY3cNzdfWBdVxmXudvVif8S68KjZbnUJWazw4ORR57Vfk w5w= -----END CERTIFICATE-----Generated at Fri Mar 13 11:07:26 2026 by rpki-client