$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/06FA5A64774011F0BE2D3736C4F9AE02.roa File: 06FA5A64774011F0BE2D3736C4F9AE02.roa (raw, json) Hash identifier: aA9cK/N/lAbMkkVhRCBwbPPBYdEHxyo7VEBog7rBFOw= Subject key identifier: 10:AF:97:A1:86:81:67:0E:BC:3D:1C:B2:4B:81:3D:ED:C4:21:CE:09 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 043B Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/06FA5A64774011F0BE2D3736C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:11:23 +0000 ROA not before: Tue 12 Aug 2025 05:48:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 64.25.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Aug 12 05:48:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5a89b-9c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:ac:e6:19:90:2b:57:cb:1e:3f:9b:d8:c4: ec:be:89:d7:70:71:e7:73:2b:7a:39:2d:9e:16:eb: 8a:2b:45:d4:df:49:f2:ac:d5:b1:f5:06:45:c3:9c: c0:55:d7:c0:3c:8b:62:8c:ca:15:96:9c:0e:4b:cd: 07:9e:30:95:0d:a6:c1:23:e4:cb:4d:28:38:f6:30: 67:8a:68:d4:bc:59:7b:b8:47:84:8d:2f:62:a8:62: 89:8c:d4:1f:a5:7a:0f:dd:16:b2:c8:02:d9:5f:73: 3e:5c:a2:97:ca:97:01:3d:06:6f:4b:b3:6f:6c:29: 98:0f:a3:dd:b5:8b:47:9b:fd:3b:0c:ef:fa:4d:32: bc:fd:5f:9e:e9:4e:fc:a5:83:ae:ed:3d:ab:58:2a: 3e:a0:8a:67:6b:46:39:7c:88:e3:c3:0c:8f:dc:56: 64:e4:fc:2f:1c:d4:ab:2d:0d:ba:17:7d:b0:c7:e3: f6:14:8c:6d:d6:ff:0c:e8:1b:65:5c:37:6d:ae:9d: 3b:8c:58:b5:9b:fd:2e:42:b4:b6:fd:db:57:87:46: bf:0d:1c:2c:48:55:18:25:17:4f:85:f3:27:c9:36: 19:8f:62:a6:96:ac:2f:ab:4e:21:b8:d3:09:0d:12: 33:87:97:e3:3b:86:a2:07:d8:19:ce:11:e6:ad:e8: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AF:97:A1:86:81:67:0E:BC:3D:1C:B2:4B:81:3D:ED:C4:21:CE:09 X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/06FA5A64774011F0BE2D3736C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 64.25.42.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:2d:f2:f2:64:de:65:7e:b6:d0:62:5c:92:a4:93:17:89:21: 46:c6:22:a7:10:65:87:9f:33:57:86:a3:cd:60:7a:a7:74:2c: f1:f0:92:f2:9a:9f:bb:3d:1f:00:20:93:73:bc:00:16:be:2d: f6:7a:65:e6:1b:c5:d2:46:ab:cc:87:6c:6a:a7:aa:8d:33:b2: eb:77:f5:85:d1:c1:c8:ff:be:3b:02:01:00:50:25:aa:5e:f6: e0:c1:84:0b:9f:9d:58:e5:bf:ee:fa:c1:2f:e2:8f:f9:ee:b8: 26:1b:07:fe:0a:c3:13:ba:04:66:58:9a:be:07:a2:43:0e:d0: 20:e4:c5:0e:ed:45:4f:d2:af:6a:dc:92:13:b2:63:0e:bd:41: f4:4e:89:d2:7b:1c:73:93:e2:f5:11:a0:93:f7:0c:2a:6a:e4: 04:2e:0a:cd:4b:04:55:ae:ce:80:4a:59:72:59:42:b2:19:66: 08:a3:11:4b:ce:72:f2:71:f0:ea:9c:3d:e2:39:d0:a9:6d:85: 06:ca:8b:83:42:85:8d:84:3f:e1:9d:b9:94:25:8b:b3:73:38: fb:8d:16:bd:75:84:bc:dc:47:67:a7:be:57:38:4b:5b:da:a7: 9a:f0:89:52:ff:75:71:9b:70:e2:19:d2:36:8b:ff:6f:04:b1: 11:c5:fe:b0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjUwODEyMDU0ODUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTg5Yi05YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEOs5hmQK1fLHj+b2MTsvonXcHHncyt6OS2eFuuKK0XU30nyrNWx9QZFw5zA VdfAPItijMoVlpwOS80HnjCVDabBI+TLTSg49jBnimjUvFl7uEeEjS9iqGKJjNQf pXoP3RayyALZX3M+XKKXypcBPQZvS7NvbCmYD6PdtYtHm/07DO/6TTK8/V+e6U78 pYOu7T2rWCo+oIpna0Y5fIjjwwyP3FZk5PwvHNSrLQ26F32wx+P2FIxt1v8M6Btl XDdtrp07jFi1m/0uQrS2/dtXh0a/DRwsSFUYJRdPhfMnyTYZj2Kmlqwvq04huNMJ DRIzh5fjO4aiB9gZzhHmregQXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBCvl6GG gWcOvD0cskuBPe3EIc4JMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQyQzUvMUY0MDRFMzBBNEU5MTFFQ0FGM0ZCMTUyQzRGOUFFMDIvMDZGQTVBNjQ3 NzQwMTFGMEJFMkQzNzM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBQBkqMA0GCSqGSIb3DQEBCwUAA4IBAQA9LfLyZN5lfrbQYlySpJMX iSFGxiKnEGWHnzNXhqPNYHqndCzx8JLymp+7PR8AIJNzvAAWvi32emXmG8XSRqvM h2xqp6qNM7Lrd/WF0cHI/747AgEAUCWqXvbgwYQLn51Y5b/u+sEv4o/57rgmGwf+ CsMTugRmWJq+B6JDDtAg5MUO7UVP0q9q3JITsmMOvUH0TonSexxzk+L1EaCT9wwq auQELgrNSwRVrs6ASllyWUKyGWYIoxFLznLycfDqnD3iOdCpbYUGyouDQoWNhD/h nbmUJYuzczj7jRa9dYS83Ednp75XOEtb2qea8IlS/3Vxm3DiGdI2i/9vBLERxf6w -----END CERTIFICATE-----Generated at Thu Mar 26 01:54:53 2026 by rpki-client