$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/4E7F3B4C955B11EFACD8F26CC4F9AE02.roa File: 4E7F3B4C955B11EFACD8F26CC4F9AE02.roa (raw, json) Hash identifier: kw9fZbNGZZ3kdKJfF8SYCLZeUjioT1ZZ2tfUfZYgkvw= Subject key identifier: 33:69:97:C2:CF:8E:DC:DE:65:C0:AC:13:AA:0D:6B:FD:46:88:B7:84 Certificate issuer: /CN=A91B8E70/serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D Certificate serial: 0104 Authority key identifier: 1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/4E7F3B4C955B11EFACD8F26CC4F9AE02.roa Signing time: Mon 02 Mar 2026 15:20:40 +0000 ROA not before: Thu 23 Oct 2025 08:20:27 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153378 IP address blocks: 2001:df4:8340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D Validity Not Before: Oct 23 08:20:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a5aac8-5638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:30:47:53:81:d9:0c:da:72:16:a4:20:25: 30:d6:5f:02:70:ec:a0:80:f8:de:d0:7e:75:6f:7b: 00:49:8c:c5:ed:c3:a5:e1:02:88:f9:a5:73:0e:5b: 13:ff:4f:26:de:22:4e:73:59:90:82:c3:dd:b0:b0: b2:58:a1:bf:5e:82:82:62:b6:b4:ba:2a:22:74:25: 00:1b:46:7b:5f:89:b4:e1:e0:8c:43:07:1b:03:d9: 9f:4f:d8:f7:64:d6:87:fb:22:ad:66:7d:77:bb:3e: 62:dd:fc:14:78:08:f1:46:84:8e:d4:6f:9f:3e:a1: 5b:f5:1d:59:51:d1:fb:0b:7d:e7:0e:a3:60:f5:2b: 10:61:09:2e:c4:cc:00:05:86:f8:4d:c8:42:25:be: f3:b5:7a:e3:46:f9:7a:e6:9b:46:65:20:da:f6:e6: 2f:f2:55:3a:41:b2:ee:e5:c6:05:00:ea:f6:1e:41: 42:70:83:80:69:f1:7c:57:c5:15:4d:bd:49:97:db: b9:91:16:7b:62:26:4f:b6:dd:9f:04:a7:f8:8a:dd: e7:36:8f:f2:2f:45:dc:8d:67:12:a0:5b:5d:e0:bf: 24:12:4f:48:1c:ed:38:e7:af:7f:97:89:5a:b2:f5: ea:aa:03:fd:8c:7c:87:f7:6b:93:4a:2b:02:08:9d: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:69:97:C2:CF:8E:DC:DE:65:C0:AC:13:AA:0D:6B:FD:46:88:B7:84 X509v3 Authority Key Identifier: keyid:1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/4E7F3B4C955B11EFACD8F26CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:8340::/48 Signature Algorithm: sha256WithRSAEncryption b0:fd:f6:e5:91:d8:3b:a2:ed:69:c6:10:6c:f1:19:8f:70:3e: e3:08:2b:40:dd:8b:36:f0:ab:fd:ce:2d:26:eb:49:9c:e2:3c: 5d:fb:d6:7b:0a:e3:67:d5:a6:e5:b1:1a:81:34:79:b0:2b:12: b0:98:6a:9c:c4:fe:76:d8:74:61:c7:4b:f8:8e:42:af:7b:d1: 8a:6e:91:7b:7f:a8:55:d9:06:93:ce:0a:cb:01:e8:ea:39:b6: 9e:fa:8a:c7:29:0d:de:3f:35:66:a3:63:07:2f:ff:5d:e5:d9: 12:c2:f7:78:b6:83:eb:11:55:4c:df:2f:ce:e6:6f:eb:c7:9f: d6:5e:45:c5:be:95:15:33:9c:13:dc:93:24:95:bb:8f:5e:55: 24:04:88:30:36:dd:69:c6:db:2d:68:54:18:aa:5c:56:4f:e6: ae:50:37:03:c4:6d:a2:b0:49:14:3d:e5:b3:51:9b:03:bd:55: d9:e2:3f:ae:0e:fd:a1:83:b1:12:08:a9:e7:37:44:e3:18:21: 0c:63:cf:a8:ab:8a:2c:26:97:37:d2:59:0c:ec:ef:43:16:be: c8:5a:e1:9f:c9:6d:41:a8:11:2a:c4:1c:75:4b:7c:f4:03:5f: 07:a1:62:bb:0a:1a:cd:4b:72:2f:f2:78:8d:9c:ec:80:b9:7e: d9:c6:e5:2d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFNzAxMTAvBgNVBAUTKDFFNjU2RERFQzdFOThEMjRBMTg2RkZEQjZGNTk3NzEw QUFGRjJBOEQwHhcNMjUxMDIzMDgyMDI3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YWFjOC01NjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOIwR1OB2QzachakICUw1l8CcOyggPje0H51b3sASYzF7cOl4QKI+aVzDlsT /08m3iJOc1mQgsPdsLCyWKG/XoKCYra0uioidCUAG0Z7X4m04eCMQwcbA9mfT9j3 ZNaH+yKtZn13uz5i3fwUeAjxRoSO1G+fPqFb9R1ZUdH7C33nDqNg9SsQYQkuxMwA BYb4TchCJb7ztXrjRvl65ptGZSDa9uYv8lU6QbLu5cYFAOr2HkFCcIOAafF8V8UV Tb1Jl9u5kRZ7YiZPtt2fBKf4it3nNo/yL0XcjWcSoFtd4L8kEk9IHO04569/l4la svXqqgP9jHyH92uTSisCCJ1LRQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDNpl8LP jtzeZcCsE6oNa/1GiLeEMB8GA1UdIwQYMBaAFB5lbd7H6Y0koYb/229ZdxCq/yqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8zNUM3NkM3RTk1 NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9IbVZ0M3NmcGpTU2hodl9iYjFsM0VLcl9L bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htVnQzc2ZwalNTaGh2X2JiMWwzRUtyX0tvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhFNzAvMzVDNzZDN0U5NTVBMTFFRkJEOUUwMjRBQzRGOUFFMDIvNEU3RjNCNEM5 NTVCMTFFRkFDRDhGMjZDQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9INAMA0GCSqGSIb3DQEBCwUAA4IBAQCw/fblkdg7ou1pxhBs 8RmPcD7jCCtA3Ys28Kv9zi0m60mc4jxd+9Z7CuNn1ablsRqBNHmwKxKwmGqcxP52 2HRhx0v4jkKve9GKbpF7f6hV2QaTzgrLAejqObae+orHKQ3ePzVmo2MHL/9d5dkS wvd4toPrEVVM3y/O5m/rx5/WXkXFvpUVM5wT3JMklbuPXlUkBIgwNt1pxtstaFQY qlxWT+auUDcDxG2isEkUPeWzUZsDvVXZ4j+uDv2hg7ESCKnnN0TjGCEMY8+oq4os Jpc30lkM7O9DFr7IWuGfyW1BqBEqxBx1S3z0A18HoWK7ChrNS3Iv8niNnOyAuX7Z xuUt -----END CERTIFICATE-----Generated at Thu Mar 26 04:16:13 2026 by rpki-client