$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/4FAF60B433A411EFB7A29C24C4F9AE02.roa File: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (raw, json) Hash identifier: C9sP+OQXoUqjwX0nvcD39les7l5L0nwEam4pYcYG5MQ= Subject key identifier: A9:81:B0:3C:1A:4A:A8:67:82:0D:0E:E1:C9:FC:89:18:99:D6:A8:7A Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: 0140 Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/4FAF60B433A411EFB7A29C24C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:54:56 +0000 ROA not before: Wed 23 Jul 2025 06:13:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153037 IP address blocks: 2001:df3:fa40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Jul 23 06:13:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a596b0-5db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f7:34:d9:4c:18:91:a0:6b:e7:0a:86:5d:ef: 49:4e:5f:8b:ef:b9:95:bf:f0:0b:1f:de:90:c3:e0: 74:d8:65:9e:88:d6:f6:ee:c9:ad:b2:40:7f:88:75: 27:5d:b7:18:77:a1:0f:00:36:f1:d2:e9:7b:59:83: 50:e2:e4:ea:52:f9:4d:e0:b6:54:a6:72:ea:fd:37: 5c:9d:e8:00:1e:53:d9:4b:a7:57:7a:e9:2b:a6:0c: 8d:3e:66:68:50:88:68:4e:49:6c:d1:ec:c4:bb:87: 6d:9d:cf:a6:23:c2:d1:f9:1e:b0:0c:00:29:51:a3: b1:0e:9b:07:2a:99:9d:2b:25:77:ca:29:b0:1e:1f: 58:5a:9b:33:d6:40:62:47:49:f4:0a:4b:95:cc:33: a1:a9:1f:f7:48:12:1a:8f:53:2a:4d:96:ca:a7:71: ba:b0:ff:50:7d:f6:b9:a4:28:83:85:66:c9:3b:aa: 96:69:72:53:70:07:95:20:25:6a:3b:81:33:77:64: 5e:9d:94:6f:91:09:6d:7b:fc:67:13:0c:ab:00:fe: ee:aa:78:15:be:7f:25:64:c0:e5:cd:93:d9:50:e8: 98:65:d0:ca:c2:94:ed:9e:a6:9e:39:cc:87:0f:14: c1:3a:2f:04:76:a3:aa:02:ca:23:d2:6d:4c:1a:65: 70:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:81:B0:3C:1A:4A:A8:67:82:0D:0E:E1:C9:FC:89:18:99:D6:A8:7A X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/4FAF60B433A411EFB7A29C24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:fa40::/48 Signature Algorithm: sha256WithRSAEncryption a7:0f:d0:f7:06:6b:c3:24:b9:9e:80:32:cb:ec:5a:9b:c8:1c: c4:bd:c0:2e:14:17:3e:dc:ba:4e:ab:38:73:d6:12:9c:8c:31: e9:9a:bc:19:de:c8:b7:0a:f3:3f:11:0e:44:78:b8:4a:99:69: 88:79:88:5b:7c:eb:58:85:92:1c:c4:8c:c8:a3:bf:e2:9e:42: a9:c5:9f:99:4b:f0:2d:77:e0:f6:a1:af:39:45:89:d7:23:72: 19:5a:44:e3:a5:b1:6c:fa:52:ac:39:19:b8:a0:4c:87:2d:0e: 35:b4:cd:64:4f:44:7b:33:f3:e3:73:3d:8f:11:42:25:55:13: ae:ba:0f:11:bb:2c:8a:52:f5:c4:c3:24:24:a4:b3:59:91:f6: c5:32:49:e5:6b:81:b9:6e:42:fa:38:ad:b6:ea:04:30:c6:28: 1a:1a:d3:ac:f3:26:bb:2a:e1:29:03:49:49:07:05:ff:c7:97: d2:a6:8c:b5:b9:01:51:b2:b1:52:ba:8a:ae:29:8a:3c:c1:aa: 29:76:46:1d:4b:b3:5c:40:e9:c1:7b:6a:fb:7d:4e:1c:b6:ac: 12:93:9d:2d:41:c4:7d:9e:c5:db:b0:80:27:ca:8c:5e:bf:c3: 21:df:65:8a:44:8c:cd:ad:cf:50:5b:2e:83:d0:3b:58:07:f6: 3c:98:c0:14 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUwNzIzMDYxMzMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTZiMC01ZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvc02UwYkaBr5wqGXe9JTl+L77mVv/ALH96Qw+B02GWeiNb27smtskB/iHUn XbcYd6EPADbx0ul7WYNQ4uTqUvlN4LZUpnLq/TdcnegAHlPZS6dXeukrpgyNPmZo UIhoTkls0ezEu4dtnc+mI8LR+R6wDAApUaOxDpsHKpmdKyV3yimwHh9YWpsz1kBi R0n0CkuVzDOhqR/3SBIaj1MqTZbKp3G6sP9Qffa5pCiDhWbJO6qWaXJTcAeVICVq O4Ezd2RenZRvkQlte/xnEwyrAP7uqngVvn8lZMDlzZPZUOiYZdDKwpTtnqaeOcyH DxTBOi8EdqOqAsoj0m1MGmVw8QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKmBsDwa Sqhngg0O4cn8iRiZ1qh6MB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE2OUYvQzY2NURGMjIzM0EzMTFFRkE1QjQ5QjIzQzRGOUFFMDIvNEZBRjYwQjQz M0E0MTFFRkI3QTI5QzI0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8/pAMA0GCSqGSIb3DQEBCwUAA4IBAQCnD9D3BmvDJLmegDLL 7FqbyBzEvcAuFBc+3LpOqzhz1hKcjDHpmrwZ3si3CvM/EQ5EeLhKmWmIeYhbfOtY hZIcxIzIo7/inkKpxZ+ZS/Atd+D2oa85RYnXI3IZWkTjpbFs+lKsORm4oEyHLQ41 tM1kT0R7M/Pjcz2PEUIlVROuug8RuyyKUvXEwyQkpLNZkfbFMknla4G5bkL6OK22 6gQwxigaGtOs8ya7KuEpA0lJBwX/x5fSpoy1uQFRsrFSuoquKYo8waopdkYdS7Nc QOnBe2r7fU4ctqwSk50tQcR9nsXbsIAnyoxev8Mh32WKRIzNrc9QWy6D0DtYB/Y8 mMAU -----END CERTIFICATE-----Generated at Sat Mar 28 12:14:14 2026 by rpki-client