$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/90D4C28CC2BA11EA8A079767C4F9AE02.roa File: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (raw, json) Hash identifier: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4= Subject key identifier: 46:20:01:CE:81:97:55:ED:A7:F4:F3:A9:37:12:B9:58:93:01:1D:1C Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Certificate serial: 0925 Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/90D4C28CC2BA11EA8A079767C4F9AE02.roa Signing time: Fri 06 Mar 2026 20:27:12 +0000 ROA not before: Fri 06 Mar 2026 20:27:12 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 0 IP address blocks: 2001:df0:1d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Validity Not Before: Mar 6 20:27:12 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ab38a0-cc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:37:ed:d4:cb:aa:99:f7:65:e5:60:ca:22: 54:dd:63:3f:c5:b0:4b:7c:64:d2:9c:55:8b:5b:ac: b3:f5:a5:ba:15:f0:fd:de:d4:5b:fd:16:d2:e7:0a: d7:2e:3f:18:9c:9f:2a:14:06:37:ce:ea:7a:2d:22: 15:7d:94:20:8c:fd:be:bd:41:a6:ea:6b:c8:7c:c6: 79:3b:2c:f8:e7:ff:2d:3d:a5:d0:75:e8:54:a3:10: f4:cd:fe:56:9b:1e:4e:bd:5e:e5:44:f5:63:bd:79: e1:52:cd:09:ad:3e:51:8a:1e:2e:ba:31:05:3b:88: 57:61:2a:1c:aa:0c:b8:7e:cd:b8:50:f0:2a:78:9b: e1:14:68:97:06:6b:16:71:45:8e:d3:ff:31:35:61: 0d:0b:fc:a7:ae:a5:8d:db:e4:9e:87:e2:66:d1:e1: 86:5e:d5:3b:53:57:8f:8c:34:b5:8c:a4:c5:ca:23: ca:95:19:3f:0d:14:6a:76:fe:94:5d:2f:2b:12:91: 72:e4:47:b2:e6:ed:25:45:48:45:5d:e7:81:52:c4: 9e:14:e0:97:50:77:19:5e:6c:ab:da:9b:aa:79:06: e1:54:88:8e:98:12:0e:93:63:ce:01:16:1b:27:68: 4a:42:5a:38:50:a3:83:d2:a7:bb:8d:4d:e9:fb:ff: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:20:01:CE:81:97:55:ED:A7:F4:F3:A9:37:12:B9:58:93:01:1D:1C X509v3 Authority Key Identifier: keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/90D4C28CC2BA11EA8A079767C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:1d00::/48 Signature Algorithm: sha256WithRSAEncryption 5d:1d:cd:b3:46:62:15:c4:96:8c:9c:3f:f1:8e:4a:46:4f:c1: 61:e4:fa:36:96:dc:fa:d6:44:a4:37:60:f6:1f:c2:b0:ed:81: 20:8a:df:ab:70:e7:c7:b0:37:8f:76:0e:b1:63:c9:c6:87:31: 78:af:ec:d9:03:b3:eb:e7:9c:c3:c1:de:59:a7:26:10:cd:2d: dc:18:64:6e:b4:eb:21:95:a2:22:ad:40:52:74:b6:c4:f3:33: 5e:a3:2d:33:3f:47:9b:5f:45:f7:28:e7:14:bd:ab:ed:27:2d: bd:e3:87:8f:20:5b:05:6e:ac:48:c6:1e:34:cd:56:2a:51:d2: ca:7f:4e:b1:cf:fa:26:59:32:6a:37:19:0e:75:32:91:6d:f8: f9:9e:c0:46:44:32:3e:2e:5e:dc:36:05:d5:fe:39:0f:02:f0: 82:d6:41:1c:41:63:6d:46:8f:cc:07:9f:52:f7:7d:5b:15:2d: 61:63:a4:26:ae:4a:e8:28:ed:c3:47:22:03:fb:5d:8a:34:a5: 68:87:46:10:5e:9b:43:59:18:b6:d4:6d:8a:d7:88:4d:3e:b0: 42:ba:6b:52:66:d5:6a:c3:72:7f:5c:7c:1d:80:df:01:10:9b: 21:56:9b:23:4b:eb:05:d5:a5:03:4c:72:f5:7e:65:e0:9b:21: b9:b0:c0:9c -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFRDAxMTAvBgNVBAUTKENCRTEzMUEwODNBNDU2M0M3QzQzOURCMDc5QjY0QjZB RDExMDFBN0MwHhcNMjYwMzA2MjAyNzEyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMzhhMC1jYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk837dTLqpn3ZeVgyiJU3WM/xbBLfGTSnFWLW6yz9aW6FfD93tRb/RbS5wrX Lj8YnJ8qFAY3zup6LSIVfZQgjP2+vUGm6mvIfMZ5Oyz45/8tPaXQdehUoxD0zf5W mx5OvV7lRPVjvXnhUs0JrT5Rih4uujEFO4hXYSocqgy4fs24UPAqeJvhFGiXBmsW cUWO0/8xNWENC/ynrqWN2+Seh+Jm0eGGXtU7U1ePjDS1jKTFyiPKlRk/DRRqdv6U XS8rEpFy5Eey5u0lRUhFXeeBUsSeFOCXUHcZXmyr2puqeQbhVIiOmBIOk2POARYb J2hKQlo4UKOD0qe7jU3p+//oqwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFEYgAc6B l1Xtp/TzqTcSuViTAR0cMB8GA1UdIwQYMBaAFMvhMaCDpFY8fEOdsHm2S2rREBp8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUVEMC82RUVCMTE1MEMy QjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1ZqeDhRNTJ3ZWJaTGF0RVFH bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktRXhvSU9rVmp4OFE1MndlYlpMYXRFUUdudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVFRDAvNkVFQjExNTBDMkIzMTFFQUI0ODMyNzUwQzRGOUFFMDIvOTBENEMyOEND MkJBMTFFQThBMDc5NzY3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8B0AMA0GCSqGSIb3DQEBCwUAA4IBAQBdHc2zRmIVxJaMnD/x jkpGT8Fh5Po2ltz61kSkN2D2H8Kw7YEgit+rcOfHsDePdg6xY8nGhzF4r+zZA7Pr 55zDwd5ZpyYQzS3cGGRutOshlaIirUBSdLbE8zNeoy0zP0ebX0X3KOcUvavtJy29 44ePIFsFbqxIxh40zVYqUdLKf06xz/omWTJqNxkOdTKRbfj5nsBGRDI+Ll7cNgXV /jkPAvCC1kEcQWNtRo/MB59S931bFS1hY6QmrkroKO3DRyID+12KNKVoh0YQXptD WRi21G2K14hNPrBCumtSZtVqw3J/XHwdgN8BEJshVpsjS+sF1aUDTHL1fmXgmyG5 sMCc -----END CERTIFICATE-----Generated at Thu Mar 26 05:04:37 2026 by rpki-client