$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/128CE16E991311EF80CC5D53C4F9AE02.roa File: 128CE16E991311EF80CC5D53C4F9AE02.roa (raw, json) Hash identifier: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q= Subject key identifier: 4A:C5:B0:F7:89:8A:B1:25:A3:18:AA:B5:C3:D4:CB:40:69:6F:F8:9F Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 019C Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/128CE16E991311EF80CC5D53C4F9AE02.roa Signing time: Mon 09 Mar 2026 03:38:07 +0000 ROA not before: Mon 09 Mar 2026 03:38:07 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152336 IP address blocks: 2001:df4:8940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Mar 9 03:38:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69ae409f-8060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:a8:62:4c:16:2d:95:a2:59:a8:af:67:d8: e1:bf:b9:55:0b:b8:3a:88:00:18:77:20:10:f8:0c: a8:a7:d9:8a:e6:f7:31:48:24:0b:48:3e:e6:f8:84: d1:19:a4:e4:fd:24:2a:bb:54:81:bf:d4:d4:43:17: 11:fb:29:48:8e:c9:ed:93:9e:31:9e:fa:d0:4d:36: 39:81:fc:41:9a:74:e3:da:1b:f6:cc:ca:53:c5:6b: 3d:c4:73:d4:62:4d:4d:f3:43:3e:e3:66:d5:9e:cb: 6e:bf:67:ec:78:c8:67:a3:1c:a6:bd:8f:3d:09:57: 2b:d6:71:70:5a:6c:63:9a:72:95:4c:07:9d:d3:c6: 7e:ff:d6:5e:49:fc:ab:58:f9:e0:27:07:fe:47:f2: 7e:88:e8:c7:e2:ae:d1:21:80:17:ec:2a:3b:1b:83: d3:c5:10:5b:41:b7:19:18:cd:f0:fc:6b:50:f2:43: 4a:40:56:c8:e5:cc:59:3a:00:8d:98:e1:c7:79:eb: 43:13:26:c0:30:8b:d9:e2:ec:32:20:14:3a:9c:32: e1:c2:57:95:56:7c:ee:80:8b:c0:56:c0:3d:36:7f: ce:ec:d3:93:bf:3b:65:68:55:cb:21:3d:41:bb:c2: 00:11:63:e3:cb:cb:66:75:ca:a2:b2:a9:0b:e6:be: e5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C5:B0:F7:89:8A:B1:25:A3:18:AA:B5:C3:D4:CB:40:69:6F:F8:9F X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/128CE16E991311EF80CC5D53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:8940::/48 Signature Algorithm: sha256WithRSAEncryption 1e:d0:14:fa:7e:ea:5a:40:4e:55:44:1e:f2:dc:6b:a1:fe:e3: b1:7b:56:7e:da:e0:03:42:ea:51:1d:3c:f9:2b:4d:d8:1b:a9: 40:4b:2d:46:98:d8:47:cb:50:ca:f3:7d:4a:28:f4:eb:f8:d1: e9:6c:03:76:26:db:5e:25:0c:a1:4c:99:36:e3:c9:76:39:64: 2c:f8:90:9d:27:f1:49:6e:cc:d8:26:53:5c:99:e3:db:9c:9e: 56:f2:1d:f5:b2:74:63:70:0c:7a:61:7b:a2:0f:63:05:4e:62: 85:57:53:5f:00:04:4f:77:23:53:75:65:2b:6e:ed:47:71:76: 2a:4a:99:1c:61:2d:31:5d:89:ae:a8:4e:7a:b9:01:a9:25:99: 61:8c:3e:95:b0:d5:25:e3:cf:1c:a6:03:b6:7e:92:d6:ac:22: 35:34:63:61:e4:dc:44:3f:a1:0d:87:70:11:7c:af:4d:22:0b: 31:46:dd:ee:b5:ed:6d:cb:0c:5c:f7:84:0e:f6:66:a8:f8:90: 3f:9b:3d:da:11:a4:9c:f0:64:43:da:51:77:cb:e5:da:a6:f4: 93:07:1b:40:cf:00:a1:97:ec:80:e0:f5:24:2a:6b:e2:e4:31: 88:98:f2:84:ba:4d:30:97:b7:9a:e3:a5:09:19:7b:03:f5:fa: 96:b3:07:11 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjYwMzA5MDMzODA3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlNDA5Zi04MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfeoYkwWLZWiWaivZ9jhv7lVC7g6iAAYdyAQ+Ayop9mK5vcxSCQLSD7m+ITR GaTk/SQqu1SBv9TUQxcR+ylIjsntk54xnvrQTTY5gfxBmnTj2hv2zMpTxWs9xHPU Yk1N80M+42bVnstuv2fseMhnoxymvY89CVcr1nFwWmxjmnKVTAed08Z+/9ZeSfyr WPngJwf+R/J+iOjH4q7RIYAX7Co7G4PTxRBbQbcZGM3w/GtQ8kNKQFbI5cxZOgCN mOHHeetDEybAMIvZ4uwyIBQ6nDLhwleVVnzugIvAVsA9Nn/O7NOTvztlaFXLIT1B u8IAEWPjy8tmdcqisqkL5r7lUwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFErFsPeJ irEloxiqtcPUy0Bpb/ifMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzg4RTAvNTVFMzkyRkNCODUyMTFFRThBQ0FBOTZBQzRGOUFFMDIvMTI4Q0UxNkU5 OTEzMTFFRjgwQ0M1RDUzQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9IlAMA0GCSqGSIb3DQEBCwUAA4IBAQAe0BT6fupaQE5VRB7y 3Guh/uOxe1Z+2uADQupRHTz5K03YG6lASy1GmNhHy1DK831KKPTr+NHpbAN2Jtte JQyhTJk248l2OWQs+JCdJ/FJbszYJlNcmePbnJ5W8h31snRjcAx6YXuiD2MFTmKF V1NfAARPdyNTdWUrbu1HcXYqSpkcYS0xXYmuqE56uQGpJZlhjD6VsNUl488cpgO2 fpLWrCI1NGNh5NxEP6ENh3ARfK9NIgsxRt3ute1tywxc94QO9mao+JA/mz3aEaSc 8GRD2lF3y+XapvSTBxtAzwChl+yA4PUkKmvi5DGImPKEuk0wl7ea46UJGXsD9fqW swcR -----END CERTIFICATE-----Generated at Thu Mar 26 21:48:50 2026 by rpki-client