$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa File: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (raw, json) Hash identifier: od/GgrkV7jF8XlgD/RNt7wyp/HQ9LjZvyL7IdTTX0j4= Subject key identifier: 0E:AD:BD:37:D1:09:6C:15:0F:37:06:97:7B:8B:5F:AE:74:8D:3C:4C Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: CD Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:14:25 +0000 ROA not before: Fri 07 Mar 2025 15:58:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153663 IP address blocks: 2401:f460:7000::/36 maxlen: 44 2401:f460:b000::/36 maxlen: 44 2401:f460:f000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 05:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: Mar 7 15:58:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a465e1-3042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:77:66:51:17:44:9d:5b:b6:1a:f6:fe:69: 35:40:2a:7b:08:a6:a9:04:df:5d:3f:48:35:d3:dd: 95:11:97:31:53:bb:c7:ee:50:72:ea:b1:ad:11:24: 90:e8:55:22:2a:7c:58:da:b4:29:18:0f:c3:ac:13: 67:bc:37:9d:9c:3d:da:31:92:d9:ef:5d:a7:b0:28: a6:cd:f4:03:f5:7c:69:4c:27:2e:08:0e:1e:b9:10: 88:d4:10:bf:6b:7c:0d:da:71:b1:dc:b6:e8:f6:54: 6a:09:72:f1:1d:0d:99:b7:b7:a3:c3:81:9c:49:d7: b2:a8:76:9a:ff:6f:ca:f8:a1:16:e1:49:eb:84:fb: 2b:37:aa:f3:54:28:c9:43:3f:a2:1b:d9:8c:25:3d: af:de:d1:93:d0:63:f9:84:ea:50:80:2d:26:c3:8f: 28:e4:2b:5f:f8:e4:49:bf:5e:81:3e:78:91:13:c7: 96:e4:cb:49:39:56:40:91:3c:5c:7b:ff:73:d6:d3: d2:c1:06:57:8e:57:65:e7:56:2f:14:8c:fa:e2:bd: 0e:16:cb:04:c6:be:8e:a2:0d:db:91:c8:35:7b:55: 16:81:c5:e5:34:d6:cb:79:af:30:1a:a4:4f:39:0d: b9:34:26:91:95:a7:29:4e:72:5d:cc:ad:82:52:2f: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AD:BD:37:D1:09:6C:15:0F:37:06:97:7B:8B:5F:AE:74:8D:3C:4C X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:f460:7000::/36 2401:f460:b000::/36 2401:f460:f000::/36 Signature Algorithm: sha256WithRSAEncryption 42:2d:f0:78:0b:c1:5b:ae:98:e9:88:46:15:02:0e:f6:e6:46: 46:1d:b1:bd:83:ea:ac:cf:4c:f1:69:2b:7b:56:02:5d:75:3b: 85:b8:19:c3:48:00:15:69:71:1a:f9:c3:3f:54:85:a9:f4:48: 88:15:18:31:ce:be:3e:bd:88:c2:99:6c:21:92:96:2a:90:da: 03:27:73:a4:7f:63:95:21:87:2a:65:41:22:d7:41:29:8b:fc: 62:ca:46:4d:0f:9d:d7:bb:a7:2c:fb:50:c8:a4:e2:62:e2:6d: 53:7a:fe:b8:bc:34:51:76:4a:b4:a9:4f:20:8f:4c:2e:28:63: e7:2b:58:c2:6f:47:89:5c:c9:58:d1:78:c1:4c:81:56:ee:0e: 37:69:fc:31:9c:6e:51:3b:52:b9:71:8d:26:88:c6:15:87:66: c9:22:75:70:66:4f:f2:36:d1:a4:e4:40:71:ae:37:00:42:57: 31:52:a2:44:39:31:32:98:4b:ef:92:50:4d:9f:8b:27:d2:4a: 9c:36:1e:10:d1:01:55:50:00:7d:0f:5a:eb:10:d5:bb:3e:dc: 0b:73:d2:e3:14:dd:80:c9:0a:b6:99:48:eb:c4:b9:9c:4c:35: a3:3b:1d:48:f7:22:52:76:37:25:bd:27:72:ea:b5:24:86:60: 11:ed:f6:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE4MEMxMTAvBgNVBAUTKDMxMjQ0MDIwMUIyRUY3NEI3Q0FDNkMzMUZCODVGNDFF OUM0Njg2QTAwHhcNMjUwMzA3MTU1ODM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjVlMS0zMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf13ZlEXRJ1bthr2/mk1QCp7CKapBN9dP0g1092VEZcxU7vH7lBy6rGtESSQ 6FUiKnxY2rQpGA/DrBNnvDednD3aMZLZ712nsCimzfQD9XxpTCcuCA4euRCI1BC/ a3wN2nGx3Lbo9lRqCXLxHQ2Zt7ejw4GcSdeyqHaa/2/K+KEW4UnrhPsrN6rzVCjJ Qz+iG9mMJT2v3tGT0GP5hOpQgC0mw48o5Ctf+ORJv16BPniRE8eW5MtJOVZAkTxc e/9z1tPSwQZXjldl51YvFIz64r0OFssExr6Oog3bkcg1e1UWgcXlNNbLea8wGqRP OQ25NCaRlacpTnJdzK2CUi+1xQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFA6tvTfR CWwVDzcGl3uLX650jTxMMB8GA1UdIwQYMBaAFDEkQCAbLvdLfKxsMfuF9B6cRoag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTgwQy9ERTk4RUFGMEZC NjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkwdDhyR3d4LTRYMEhweEdo cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE4MEMvREU5OEVBRjBGQjY1MTFFRkEzNzZFNDQ5QzRGOUFFMDIvMDcwREIzQkFG QjZEMTFFRkE1RTM5Njc4QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAAjAYAwYEJAH0YHADBgQkAfRgsAMGBCQB9GDwMA0GCSqGSIb3DQEBCwUAA4IB AQBCLfB4C8FbrpjpiEYVAg725kZGHbG9g+qsz0zxaSt7VgJddTuFuBnDSAAVaXEa +cM/VIWp9EiIFRgxzr4+vYjCmWwhkpYqkNoDJ3Okf2OVIYcqZUEi10Epi/xiykZN D53Xu6cs+1DIpOJi4m1Tev64vDRRdkq0qU8gj0wuKGPnK1jCb0eJXMlY0XjBTIFW 7g43afwxnG5RO1K5cY0miMYVh2bJInVwZk/yNtGk5EBxrjcAQlcxUqJEOTEymEvv klBNn4sn0kqcNh4Q0QFVUAB9D1rrENW7PtwLc9LjFN2AyQq2mUjrxLmcTDWjOx1I 9yJSdjclvSdy6rUkhmAR7fbW -----END CERTIFICATE-----Generated at Tue Mar 10 20:31:57 2026 by rpki-client