$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa File: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (raw, json) Hash identifier: 1xxchiebCxLNftly6au7Pkd2xXnWXWVrUcEG++FarVw= Subject key identifier: AC:B4:46:19:C2:F5:9C:54:CC:7D:8A:70:F5:19:8C:4E:0A:81:DB:E4 Certificate issuer: /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422 Certificate serial: 0120 Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:51:24 +0000 ROA not before: Sun 19 Oct 2025 09:12:22 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153320 IP address blocks: 2401:c120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422 Validity Not Before: Oct 19 09:12:22 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a5a3ec-8453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:62:d3:e4:24:3b:cd:e7:2c:1b:11:2b:47: c9:bc:c1:f7:9b:27:2b:af:fd:93:2f:d2:ba:5b:04: b5:5c:68:ab:ee:35:7b:9c:9f:0f:b0:ce:e4:99:39: 99:e8:6a:bb:3e:77:dd:22:56:c9:c0:d2:9c:66:a8: 4c:58:b5:e3:8e:92:c0:c0:3d:77:47:ae:aa:e0:36: 74:53:29:12:56:0e:28:0b:3d:e2:fe:7f:62:42:80: 43:07:44:32:09:50:95:9c:0c:aa:1f:33:f1:5a:19: 3b:f9:64:db:b9:50:0d:d9:e5:2b:84:fc:5d:cd:ec: c4:1a:0c:a5:48:28:1f:a3:39:d0:4e:34:06:85:92: 96:bd:c1:41:97:38:99:64:6b:88:41:6c:75:df:fa: 10:66:29:39:21:4f:b2:4d:81:69:51:21:b3:8c:ab: 43:1e:22:6c:df:a5:5c:dd:1b:76:44:b7:eb:3a:e2: 87:36:0b:c8:c3:9d:ad:69:0d:34:ef:75:5a:d2:3c: f2:81:fd:fb:60:c1:0a:ed:41:bd:53:e0:e6:a5:b5: d0:10:8a:10:25:01:de:67:5a:dd:e5:88:a2:f1:1d: bf:83:40:30:58:83:e8:ff:5b:c7:e7:ec:6b:2e:73: 6c:b2:09:47:1f:7c:ba:8f:b1:06:bf:f1:53:6c:8d: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B4:46:19:C2:F5:9C:54:CC:7D:8A:70:F5:19:8C:4E:0A:81:DB:E4 X509v3 Authority Key Identifier: keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:c120::/32 Signature Algorithm: sha256WithRSAEncryption 89:13:d3:f8:ea:cb:f6:18:a6:ff:de:03:c8:c9:98:f0:4a:f4: 17:8e:f7:da:f6:44:a1:24:c9:a8:55:b7:10:f0:10:5b:2d:75: d4:ca:8d:b3:84:d1:3a:df:57:98:aa:0f:78:9d:be:1a:bf:59: 4e:8e:9c:c6:6d:b5:e4:12:aa:56:2a:d9:5a:6a:85:4f:ff:4b: cb:09:69:fb:e1:ee:af:ea:89:c8:b5:34:88:46:37:42:49:8c: 07:47:9b:09:9b:4f:ab:18:97:21:31:4b:17:a3:64:f1:3c:67: 12:7f:1f:c1:8f:9a:de:7a:88:d1:b0:19:f0:7b:ae:39:fb:8e: 0c:47:32:1b:5e:22:57:ef:ca:c0:b5:e7:d0:56:91:ec:19:58: 71:c1:f8:4e:fd:31:03:10:3b:66:21:3a:54:ee:c7:0c:ea:9c: 66:af:12:46:7e:72:56:60:29:8d:e7:a0:20:a1:d4:33:c6:d0: b4:13:ce:e1:da:bc:bf:3e:9d:c1:84:c1:a6:75:e1:39:64:21: 45:ec:32:75:7c:5c:82:d9:3b:3a:c9:a3:b2:26:b6:fb:dd:ec: 41:d7:f8:ac:80:02:c8:46:8b:6d:c2:b0:03:ce:f5:c3:c8:08: b8:d1:e0:37:03:07:e5:83:09:bb:da:dc:f3:14:2f:6d:3f:49: f8:bc:e6:93 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDI5MDM3QkJGOTJGMkIwRjRDMzMwQTFDREQ0QTc2MjU2 Q0Q3QTU0MjIwHhcNMjUxMDE5MDkxMjIyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTNlYy04NDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDVi0+QkO83nLBsRK0fJvMH3mycrr/2TL9K6WwS1XGir7jV7nJ8PsM7kmTmZ 6Gq7PnfdIlbJwNKcZqhMWLXjjpLAwD13R66q4DZ0UykSVg4oCz3i/n9iQoBDB0Qy CVCVnAyqHzPxWhk7+WTbuVAN2eUrhPxdzezEGgylSCgfoznQTjQGhZKWvcFBlziZ ZGuIQWx13/oQZik5IU+yTYFpUSGzjKtDHiJs36Vc3Rt2RLfrOuKHNgvIw52taQ00 73Va0jzygf37YMEK7UG9U+DmpbXQEIoQJQHeZ1rd5Yii8R2/g0AwWIPo/1vH5+xr LnNssglHH3y6j7EGv/FTbI0tPwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFKy0RhnC 9ZxUzH2KcPUZjE4KgdvkMB8GA1UdIwQYMBaAFCkDe7+S8rD0wzChzdSnYlbNelQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS80MzY3QzIwRTZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9LUU43djVMeXNQVERNS0hOMUtkaVZzMTZW Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRTjd2NUx5c1BURE1LSE4xS2RpVnMxNlZDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlCODkvNDM2N0MyMEU2QzE4MTFFRkFCNkI2OTBDQzRGOUFFMDIvMjAyNUJENkM2 QzMzMTFFRjk5RTBFRjM0QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAHBIDANBgkqhkiG9w0BAQsFAAOCAQEAiRPT+OrL9him/94DyMmY 8Er0F4732vZEoSTJqFW3EPAQWy111MqNs4TROt9XmKoPeJ2+Gr9ZTo6cxm215BKq VirZWmqFT/9Lywlp++Hur+qJyLU0iEY3QkmMB0ebCZtPqxiXITFLF6Nk8TxnEn8f wY+a3nqI0bAZ8HuuOfuODEcyG14iV+/KwLXn0FaR7BlYccH4Tv0xAxA7ZiE6VO7H DOqcZq8SRn5yVmApjeegIKHUM8bQtBPO4dq8vz6dwYTBpnXhOWQhRewydXxcgtk7 Osmjsia2+93sQdf4rIACyEaLbcKwA871w8gIuNHgNwMH5YMJu9rc8xQvbT9J+Lzm kw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:20 2026 by rpki-client