$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa File: E07CB68455A211F0B55F5674C4F9AE02.roa (raw, json) Hash identifier: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0= Subject key identifier: 10:B2:9E:05:7F:45:78:30:F9:8B:0B:DA:E7:AB:25:46:64:64:70:C9 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 0272 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:53:09 +0000 ROA not before: Mon 03 Nov 2025 03:48:06 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151810 IP address blocks: 2402:be0::/34 maxlen: 42 2402:be0:4000::/34 maxlen: 42 2402:be0:8000::/34 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 02:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Nov 3 03:48:06 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47d05-58ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:0a:87:15:b1:af:5c:46:58:b3:4a:88:cb: 72:b2:a9:fd:93:8a:6d:0e:92:2d:44:3c:67:1e:c9: d8:f4:ea:78:de:aa:eb:2b:17:0a:68:e1:be:74:07: 24:47:08:0b:88:01:98:ad:fa:1c:06:d5:50:b6:8f: 07:4f:04:64:18:3f:73:a6:0b:3f:61:b0:9b:50:c1: 68:66:21:5e:00:53:9a:9b:7a:c3:af:19:51:db:09: a1:27:f7:e1:d3:43:0b:82:ad:9f:ba:38:69:60:db: 6b:2e:a5:7d:d4:a8:01:d4:f7:56:2b:72:64:c1:ec: d6:13:f1:f1:4c:da:af:09:5d:bd:30:c6:ee:99:c4: 18:c7:1e:58:20:cd:0a:08:bd:a8:6d:1a:c6:d5:7f: 7d:5d:e8:1e:e1:f3:a7:f7:d3:27:7a:11:ba:6b:a9: e6:96:79:3b:ba:4d:dd:e6:85:e8:bb:a5:e8:75:41: ce:b2:f0:68:1b:14:74:ff:68:bc:a2:d8:c3:a3:b4: f3:9a:57:82:bd:22:f9:0f:97:e0:e1:73:5e:76:b7: fe:a0:95:94:5f:1a:93:97:b8:8f:1e:f3:af:ce:5c: b0:b6:67:96:de:51:6c:d9:e9:63:08:54:27:9e:68: 9a:7f:b6:b3:40:37:49:45:9b:bb:ae:17:b5:e3:f5: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B2:9E:05:7F:45:78:30:F9:8B:0B:DA:E7:AB:25:46:64:64:70:C9 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:be0::-2402:be0:bfff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 12:03:f8:36:e5:49:5b:3a:b3:94:db:c0:e6:2a:0e:1f:85:3f: 08:7e:f3:1a:6c:95:bc:69:d8:19:ae:08:fa:09:07:34:2f:10: 1c:b1:73:37:62:49:89:a0:bd:1c:7a:94:36:d6:3b:17:15:d2: 35:32:f0:dc:e4:f5:1e:d1:35:ac:55:a9:5c:4d:bf:c1:4c:b4: aa:c2:72:3c:bb:04:07:00:98:d1:c7:b0:f4:9e:2f:70:e9:9c: 27:dd:1d:83:9c:a3:19:01:88:85:11:ce:2c:e8:74:cf:22:4f: 53:14:84:2d:01:92:ea:98:ba:ad:e6:df:98:22:d6:cd:76:9e: 1d:7e:cd:f6:ca:6e:b5:15:41:e6:5c:fd:ed:a2:11:95:52:b0: 32:0e:65:24:32:c0:8d:48:db:b7:5e:16:50:34:b7:58:8c:3d: 38:fb:25:8c:cb:41:eb:c5:ac:19:e5:31:c1:e8:cf:e1:df:58: 95:ab:5f:d2:83:82:d6:4e:0b:f4:ed:41:95:90:67:11:7e:51: 4a:a3:7b:61:6d:fa:51:cb:4e:c7:31:be:40:06:35:65:6a:b2: 8d:7d:da:c5:47:c3:7a:74:fc:45:7b:9d:a4:0d:9e:af:84:5f: 0e:60:97:4a:98:aa:ca:59:54:d6:ce:f6:e4:f4:8b:d1:d6:b9: 87:fd:cc:f8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUxMTAzMDM0ODA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2QwNS01OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWsKhxWxr1xGWLNKiMtysqn9k4ptDpItRDxnHsnY9Op43qrrKxcKaOG+dAck RwgLiAGYrfocBtVQto8HTwRkGD9zpgs/YbCbUMFoZiFeAFOam3rDrxlR2wmhJ/fh 00MLgq2fujhpYNtrLqV91KgB1PdWK3JkwezWE/HxTNqvCV29MMbumcQYxx5YIM0K CL2obRrG1X99Xege4fOn99MnehG6a6nmlnk7uk3d5oXou6XodUHOsvBoGxR0/2i8 otjDo7TzmleCvSL5D5fg4XNedrf+oJWUXxqTl7iPHvOvzlywtmeW3lFs2eljCFQn nmiaf7azQDdJRZu7rhe14/U+MwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFBCyngV/ RXgw+YsL2uerJUZkZHDJMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvRTA3Q0I2ODQ1 NUEyMTFGMEI1NUY1Njc0QzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAAjARMA8DBQUkAgvgAwYGJAIL4IAwDQYJKoZIhvcNAQELBQADggEBABID+Dbl SVs6s5TbwOYqDh+FPwh+8xpslbxp2BmuCPoJBzQvEByxczdiSYmgvRx6lDbWOxcV 0jUy8Nzk9R7RNaxVqVxNv8FMtKrCcjy7BAcAmNHHsPSeL3DpnCfdHYOcoxkBiIUR zizodM8iT1MUhC0BkuqYuq3m35gi1s12nh1+zfbKbrUVQeZc/e2iEZVSsDIOZSQy wI1I27deFlA0t1iMPTj7JYzLQevFrBnlMcHoz+HfWJWrX9KDgtZOC/TtQZWQZxF+ UUqje2Ft+lHLTscxvkAGNWVqso192sVHw3p0/EV7naQNnq+EXw5gl0qYqspZVNbO 9uT0i9HWuYf9zPg= -----END CERTIFICATE-----Generated at Mon Mar 16 00:11:12 2026 by rpki-client