$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/D4D84D08DA9211ED99CD1D28C4F9AE02.roa File: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (raw, json) Hash identifier: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck= Subject key identifier: 3B:73:F6:C9:FB:F1:C9:8C:00:5A:33:C8:13:A0:7B:41:92:1A:DB:1A Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 0254 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/D4D84D08DA9211ED99CD1D28C4F9AE02.roa Signing time: Fri 01 May 2026 03:34:25 +0000 ROA not before: Fri 01 May 2026 03:34:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151182 IP address blocks: 2001:df2:42c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: May 1 03:34:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f41f41-4c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:13:1d:74:a2:0c:37:4d:b4:fa:74:74:7c: 7c:f1:47:82:23:19:06:20:fa:1b:51:be:7c:5c:1b: ed:93:c8:f1:1d:83:56:46:4e:11:08:92:ed:39:4b: a8:ce:7e:67:e9:e7:dc:e9:77:97:24:44:18:4d:a8: 7b:bc:cb:4b:66:ed:bf:e5:b3:fa:b1:8b:9e:75:08: 53:4a:86:74:69:25:61:2f:c5:18:9a:7e:c3:ac:2f: 38:25:e2:2d:0a:d2:02:33:d2:e0:fa:6e:96:2c:01: 51:db:57:71:c1:11:6a:a3:ae:5a:22:57:b1:f4:d6: 44:36:43:ca:ca:b4:a9:ba:92:33:87:32:6f:38:a1: c6:cc:68:b5:85:26:76:ba:b7:e6:71:16:fc:00:8f: e3:d3:c9:3f:76:25:80:6b:61:82:17:77:30:cf:13: 8b:af:ea:9a:f6:a1:80:91:e1:72:a1:46:46:47:6d: e0:8d:0b:13:5e:0e:ee:f0:65:8e:f0:4d:5a:ee:72: fa:d3:7e:a9:55:80:65:3c:28:83:5f:41:5d:20:98: 1e:d0:9a:8e:d0:d6:70:ef:48:a4:ce:fb:2a:a0:b5: f1:a7:90:ca:b4:93:97:05:74:5d:c3:a2:35:79:ce: 0f:0f:54:52:26:f4:36:3d:09:f7:a6:13:12:8c:f4: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:F6:C9:FB:F1:C9:8C:00:5A:33:C8:13:A0:7B:41:92:1A:DB:1A X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/D4D84D08DA9211ED99CD1D28C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df2:42c0::/48 Signature Algorithm: sha256WithRSAEncryption b0:82:84:ad:7e:a6:79:f2:cc:d8:ab:a6:64:32:13:5a:eb:d8: 30:70:4c:a4:72:95:1c:9f:8a:ad:39:3a:ae:e3:c2:36:e1:78: df:b3:de:75:1d:00:4a:f4:91:a2:1f:5e:cf:c5:06:c0:15:f7: 86:10:ce:f1:73:79:6b:c0:f4:cb:af:20:9a:ad:19:c8:21:65: 51:ee:12:a8:a9:09:c4:1c:01:a6:35:af:ea:c9:3c:7b:cf:5e: e8:68:cf:ee:47:41:45:a1:0c:b3:f1:c3:49:82:e4:1d:54:15: 0f:e0:8e:22:52:a4:a5:c9:62:fd:35:3c:5d:59:62:9c:9b:79: 8a:01:9d:b4:b7:c6:3b:5d:b9:41:db:ac:22:7c:39:c3:41:9a: 1e:6a:99:9f:f4:80:63:99:d8:50:aa:a5:23:be:70:d0:ff:a0: b8:85:c3:ef:31:4a:07:9b:84:d0:c8:6d:cb:df:25:f5:8b:56: eb:48:6d:89:44:58:59:05:5d:78:aa:c8:bd:a8:d4:11:a9:79: 85:ce:30:81:c1:32:6b:42:df:c0:9d:d6:68:9c:19:39:67:d4: 2d:31:eb:5a:00:02:28:9d:81:76:4e:ee:1a:5f:ee:6a:f9:ca: ae:04:3a:91:a1:01:23:3b:b7:78:2b:a3:63:03:dc:2a:e2:63: 7a:ca:15:77 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjYwNTAxMDMzNDI1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY0MWY0MS00YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAus8THXSiDDdNtPp0dHx88UeCIxkGIPobUb58XBvtk8jxHYNWRk4RCJLtOUuo zn5n6efc6XeXJEQYTah7vMtLZu2/5bP6sYuedQhTSoZ0aSVhL8UYmn7DrC84JeIt CtICM9Lg+m6WLAFR21dxwRFqo65aIlex9NZENkPKyrSpupIzhzJvOKHGzGi1hSZ2 urfmcRb8AI/j08k/diWAa2GCF3cwzxOLr+qa9qGAkeFyoUZGR23gjQsTXg7u8GWO 8E1a7nL6036pVYBlPCiDX0FdIJge0JqO0NZw70ikzvsqoLXxp5DKtJOXBXRdw6I1 ec4PD1RSJvQ2PQn3phMSjPTYswIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDtz9sn7 8cmMAFozyBOge0GSGtsaMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU1RjYvQkNBNjZCN0VEQThFMTFFRDgzNUMzOTI1QzRGOUFFMDIvRDREODREMDhE QTkyMTFFRDk5Q0QxRDI4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8kLAMA0GCSqGSIb3DQEBCwUAA4IBAQCwgoStfqZ58szYq6Zk MhNa69gwcEykcpUcn4qtOTqu48I24Xjfs951HQBK9JGiH17PxQbAFfeGEM7xc3lr wPTLryCarRnIIWVR7hKoqQnEHAGmNa/qyTx7z17oaM/uR0FFoQyz8cNJguQdVBUP 4I4iUqSlyWL9NTxdWWKcm3mKAZ20t8Y7XblB26wifDnDQZoeapmf9IBjmdhQqqUj vnDQ/6C4hcPvMUoHm4TQyG3L3yX1i1brSG2JRFhZBV14qsi9qNQRqXmFzjCBwTJr Qt/AndZonBk5Z9QtMetaAAIonYF2Tu4aX+5q+cquBDqRoQEjO7d4K6NjA9wq4mN6 yhV3 -----END CERTIFICATE-----Generated at Wed May 13 05:04:13 2026 by rpki-client