$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa File: FBE1E73689E311EF9021CE0CC4F9AE02.roa (raw, json) Hash identifier: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM= Subject key identifier: 36:32:9F:E2:39:62:AE:22:83:8D:CA:95:69:01:CD:D9:63:33:03:09 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 0359 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:39:45 +0000 ROA not before: Sun 27 Jul 2025 02:06:50 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135602 IP address blocks: 2001:df3:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 00:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Jul 27 02:06:50 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a46bd1-6d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:54:20:dd:51:56:f4:29:b6:f4:c0:38:a2: a4:98:26:db:6d:c0:93:d6:47:25:9e:41:27:ae:a8: 2f:f0:8d:ca:5a:c5:e7:b4:71:5f:be:81:d4:b2:e8: 40:51:e3:83:d3:ab:c9:0e:92:a6:04:3d:55:c9:46: 8b:ff:74:15:ff:f9:f6:8a:c8:dc:6d:a6:12:ed:74: 6b:c8:64:a8:b2:a7:80:fd:20:11:15:2a:59:db:9b: 48:3f:51:85:87:d4:08:7c:f3:2b:ba:de:5e:41:a6: 99:25:01:b3:40:70:51:c7:6b:bc:2a:7f:5e:c5:1a: 73:03:80:b7:6d:cc:50:a6:e1:6b:69:64:e3:09:15: 13:c1:fe:f6:3b:41:96:69:79:a8:d6:65:df:d6:c2: b2:ab:69:73:2f:a5:33:8a:6a:b4:23:f9:55:7d:0a: 4c:4c:c2:46:ba:e5:9e:d7:6a:82:23:18:cb:ba:a6: 02:b4:04:79:c4:7c:26:30:83:e1:08:3f:cf:83:56: 77:20:0f:83:3a:8b:e0:e5:0f:38:15:6f:91:f4:c8: 8f:13:cb:13:60:16:43:f5:77:0b:e8:d9:be:15:47: a8:ac:b9:43:9f:86:30:99:69:be:99:fc:2c:7b:3b: 58:5c:eb:38:20:f8:60:3f:d6:2e:e3:ab:2f:f1:ed: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:32:9F:E2:39:62:AE:22:83:8D:CA:95:69:01:CD:D9:63:33:03:09 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:200::/48 Signature Algorithm: sha256WithRSAEncryption 36:cd:e5:3c:0d:6e:b1:95:0f:c9:62:3f:89:c1:95:00:b4:e4: ff:e4:bb:60:27:ff:29:98:8a:27:f9:dc:4d:66:95:ad:88:25: 68:26:14:f0:dd:18:70:40:90:86:d9:7b:4c:05:b6:ea:61:e1: d5:5d:79:ba:84:76:d7:18:a9:5f:90:51:57:fe:9c:33:f8:3d: 7d:cc:ac:75:7e:c9:a9:66:9f:8f:61:59:a2:50:31:32:72:36: 13:2c:49:4a:6f:7c:95:f0:a5:9b:33:d6:3e:cc:da:8b:89:e1: 30:9a:81:1b:47:e5:21:a0:7a:ff:c7:74:e3:6d:35:c4:20:3a: 04:5c:02:38:12:6c:51:c8:08:3b:43:00:1e:bf:02:ac:76:24: 21:e6:b2:db:90:95:0d:fb:80:f4:7e:37:60:17:0f:fa:d2:88: 4d:4d:07:46:73:e4:01:4e:05:a6:ec:d8:df:90:f8:02:79:b5: b4:1f:ae:2a:d8:dc:55:2d:76:77:86:5d:27:35:bb:df:a9:b2: e3:a6:79:a5:e8:fd:d9:f8:8f:d4:07:28:75:44:3d:42:11:d8: b7:fd:99:77:f4:96:09:e4:c8:1f:e7:c0:4b:b3:f8:1c:8b:fe: 8b:d3:68:f2:b0:ec:4f:0b:be:9f:1c:8a:c1:05:55:0d:44:4d: 5e:ad:24:2a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUwNzI3MDIwNjUwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmJkMS02ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFlUIN1RVvQptvTAOKKkmCbbbcCT1kclnkEnrqgv8I3KWsXntHFfvoHUsuhA UeOD06vJDpKmBD1VyUaL/3QV//n2isjcbaYS7XRryGSosqeA/SARFSpZ25tIP1GF h9QIfPMrut5eQaaZJQGzQHBRx2u8Kn9exRpzA4C3bcxQpuFraWTjCRUTwf72O0GW aXmo1mXf1sKyq2lzL6Uzimq0I/lVfQpMTMJGuuWe12qCIxjLuqYCtAR5xHwmMIPh CD/Pg1Z3IA+DOovg5Q84FW+R9MiPE8sTYBZD9XcL6Nm+FUeorLlDn4YwmWm+mfws eztYXOs4IPhgP9Yu46sv8e1UFQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDYyn+I5 Yq4ig43KlWkBzdljMwMJMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0N0MvN0UwRjU4NzIwMUU5MTFFREFGOEJERTMwQzRGOUFFMDIvRkJFMUU3MzY4 OUUzMTFFRjkwMjFDRTBDQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8wIAMA0GCSqGSIb3DQEBCwUAA4IBAQA2zeU8DW6xlQ/JYj+J wZUAtOT/5LtgJ/8pmIon+dxNZpWtiCVoJhTw3RhwQJCG2XtMBbbqYeHVXXm6hHbX GKlfkFFX/pwz+D19zKx1fsmpZp+PYVmiUDEycjYTLElKb3yV8KWbM9Y+zNqLieEw moEbR+UhoHr/x3TjbTXEIDoEXAI4EmxRyAg7QwAevwKsdiQh5rLbkJUN+4D0fjdg Fw/60ohNTQdGc+QBTgWm7NjfkPgCebW0H64q2NxVLXZ3hl0nNbvfqbLjpnml6P3Z +I/UByh1RD1CEdi3/Zl39JYJ5Mgf58BLs/gci/6L02jysOxPC76fHIrBBVUNRE1e rSQq -----END CERTIFICATE-----Generated at Tue Mar 10 09:20:17 2026 by rpki-client