$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa File: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (raw, json) Hash identifier: LUj3nw3I/55jfghfKNbIADhEH+zObxvm94ONzxqJb9g= Subject key identifier: 0D:4F:D2:59:E6:B6:01:9D:5E:4A:40:7C:FF:CA:D7:3D:24:38:37:04 Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Certificate serial: 0100 Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:33:34 +0000 ROA not before: Mon 11 Aug 2025 06:46:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135426 IP address blocks: 2401:bd60::/32 maxlen: 32 2401:bd60:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Validity Not Before: Aug 11 06:46:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5839e-f8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a3:e5:fc:b2:4c:f2:ce:3d:07:32:2b:b6:f2: fb:ab:48:6c:d3:40:fe:47:9f:ba:1c:b8:70:8d:5d: 45:f3:00:5c:32:f5:15:c9:92:a6:14:1e:48:05:dd: d4:29:57:31:c1:50:bf:34:53:a1:b7:db:02:38:11: b0:50:57:af:2f:ab:b4:5d:f5:28:50:05:33:30:33: 62:fa:c2:18:1f:40:2f:cd:4f:b9:4f:d0:8b:05:24: 6b:f9:b9:09:9d:60:70:1d:0b:b0:6a:fb:b1:30:92: 0e:81:30:24:2e:78:3b:3f:b1:0c:f9:4e:57:a6:93: 19:12:87:36:27:92:8d:bc:85:0d:9c:2b:4f:7f:f1: 94:d4:70:e4:e0:72:f2:70:a8:ae:62:0b:43:1f:9d: 48:31:2b:1f:7a:20:cb:7d:d0:62:ba:c3:68:ee:10: 8e:20:b5:43:6d:7d:44:9e:48:56:de:dc:4c:6e:74: 07:59:2e:6e:b4:19:d6:c0:ed:07:b3:6f:71:7d:1b: 35:1e:47:7c:68:d8:fd:28:24:98:b8:08:2a:4e:b5: a2:5a:1c:c1:38:37:9f:37:d6:8b:32:ba:11:e2:3e: a3:33:ac:b7:3f:56:99:3f:70:69:91:74:4a:28:4f: 45:3f:d1:51:76:a6:bc:2a:f1:dd:31:79:15:fe:a2: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4F:D2:59:E6:B6:01:9D:5E:4A:40:7C:FF:CA:D7:3D:24:38:37:04 X509v3 Authority Key Identifier: keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:bd60::/32 Signature Algorithm: sha256WithRSAEncryption 40:3e:dc:b3:e2:af:a5:8f:e9:9f:d2:22:a7:79:6a:56:f9:da: ea:3e:85:e4:7e:51:f5:29:e0:83:98:7d:e1:5a:65:eb:ac:19: e5:da:f3:07:8a:94:ee:99:b1:fc:0d:44:77:94:6f:66:7a:c3: 40:ac:93:d6:36:9c:65:4a:ba:7c:69:d4:8c:50:ff:71:3f:cd: b9:85:2d:c1:21:65:67:da:4f:e8:94:27:b7:8f:67:9e:8a:e6: 97:d8:57:c4:3d:ef:85:17:7e:ee:15:7b:d0:15:d4:a4:f2:29: 57:b8:b8:c2:a0:f8:65:42:6c:29:63:04:2d:29:c5:43:91:2b: f1:dd:43:65:be:92:ff:00:35:4c:32:74:a5:f1:c6:d4:c8:1f: 61:36:77:8a:dc:2e:ee:37:4a:06:50:d4:2d:e4:17:ea:44:cc: 35:56:f1:d9:f7:2a:8b:cb:b9:85:f5:b9:11:a1:73:a1:4d:15: 37:dc:56:20:fa:73:b8:9a:a1:d4:3c:82:67:e9:48:2c:b0:d2: 4f:bb:89:cd:90:49:10:7f:52:1f:9d:de:00:50:d4:47:ce:ab: 08:7e:30:f6:ce:e4:f0:f3:10:9a:f7:41:84:17:82:cf:c2:5d: cf:1a:3b:a8:8e:2d:1d:82:fc:04:06:a9:ee:f4:6b:65:38:30: 46:c9:3f:7c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgxMDRCOTRERTBG QTQ3NTIxMTMwHhcNMjUwODExMDY0NjU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODM5ZS1mOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj6Pl/LJM8s49BzIrtvL7q0hs00D+R5+6HLhwjV1F8wBcMvUVyZKmFB5IBd3U KVcxwVC/NFOht9sCOBGwUFevL6u0XfUoUAUzMDNi+sIYH0AvzU+5T9CLBSRr+bkJ nWBwHQuwavuxMJIOgTAkLng7P7EM+U5XppMZEoc2J5KNvIUNnCtPf/GU1HDk4HLy cKiuYgtDH51IMSsfeiDLfdBiusNo7hCOILVDbX1EnkhW3txMbnQHWS5utBnWwO0H s29xfRs1Hkd8aNj9KCSYuAgqTrWiWhzBODefN9aLMroR4j6jM6y3P1aZP3BpkXRK KE9FP9FRdqa8KvHdMXkV/qKqswIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFA1P0lnm tgGdXkpAfP/K1z0kODcEMB8GA1UdIwQYMBaAFHMX13e9qmMzzZaoEEuU3g+kdSET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85QjNEMjU0OEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6UE5scWdRUzVUZUQ2UjFJ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE5NDEvOUIzRDI1NDhBMEEwMTFFRjkwNTIzMjVGQzRGOUFFMDIvNDhBNUZDQTRB MEEyMTFFRjgxRkE2ODc2QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAG9YDANBgkqhkiG9w0BAQsFAAOCAQEAQD7cs+KvpY/pn9Iip3lq Vvna6j6F5H5R9Sngg5h94Vpl66wZ5drzB4qU7pmx/A1Ed5RvZnrDQKyT1jacZUq6 fGnUjFD/cT/NuYUtwSFlZ9pP6JQnt49nnorml9hXxD3vhRd+7hV70BXUpPIpV7i4 wqD4ZUJsKWMELSnFQ5Er8d1DZb6S/wA1TDJ0pfHG1MgfYTZ3itwu7jdKBlDULeQX 6kTMNVbx2fcqi8u5hfW5EaFzoU0VN9xWIPpzuJqh1DyCZ+lILLDST7uJzZBJEH9S H53eAFDUR86rCH4w9s7k8PMQmvdBhBeCz8Jdzxo7qI4tHYL8BAap7vRrZTgwRsk/ fA== -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:26 2026 by rpki-client