$ rpki-client -vvf rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/133F28C2453511F18432EE9F9F833773.roa File: 133F28C2453511F18432EE9F9F833773.roa (raw, json) Hash identifier: taFbbALsE4VldUj6KQuMU4XM/YRitztLWOBpIue59dI= Subject key identifier: B3:B9:0E:56:31:8C:BE:53:77:A6:3D:F7:C6:93:B6:21:2A:A3:CE:74 Certificate issuer: /CN=A91676C8/serialNumber=034927772E51E0855B10FD502B816F2434619BF2 Certificate serial: 03 Authority key identifier: 03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/133F28C2453511F18432EE9F9F833773.roa Signing time: Fri 01 May 2026 08:09:29 +0000 ROA not before: Fri 01 May 2026 08:09:29 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 142048 IP address blocks: 2402:5b20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 09:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676C8, serialNumber=034927772E51E0855B10FD502B816F2434619BF2 Validity Not Before: May 1 08:09:29 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f45fb8-7d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:c1:ea:10:d4:7e:b6:24:58:b7:bb:c4:8c: c8:3a:26:5d:97:d4:b8:16:24:24:dc:35:db:5b:4c: db:97:1e:93:f5:91:9e:52:3b:b1:b5:52:63:b8:8c: d6:58:fa:d6:fe:d3:7b:97:6d:d3:a4:92:fd:85:be: a5:f2:bb:bb:10:ec:a6:b5:e5:0e:3b:58:a0:2c:16: f4:ff:ff:19:03:61:bf:8c:e7:2c:1c:e7:9c:4c:a1: ec:7c:22:f0:9e:15:6c:16:eb:3d:09:3c:0e:ee:0f: 95:cf:8d:f4:d7:7f:a3:1c:17:cb:9e:51:ca:81:ec: a5:a7:27:b6:4d:29:e1:5b:61:60:72:70:07:0e:15: 7b:c0:10:0d:56:c8:55:bf:2c:37:23:fb:66:6a:fa: 7d:5a:8d:c8:12:41:df:83:00:c3:98:82:28:3c:ea: 09:4c:0d:a7:8f:24:4c:67:07:7d:9e:dd:78:ce:35: d9:ce:4b:e6:21:f8:3a:f9:4b:ae:e9:e4:52:0e:95: 34:06:17:4b:54:1b:82:96:66:e2:2a:1c:8b:87:97: dd:a9:a3:0f:83:29:8a:5b:74:f2:fc:1d:56:65:f0: d6:fb:c9:23:2e:9b:0a:d0:76:d7:f9:cc:d9:79:02: 26:6a:a4:7d:20:3c:56:48:a6:95:13:e5:78:54:49: 6c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:0E:56:31:8C:BE:53:77:A6:3D:F7:C6:93:B6:21:2A:A3:CE:74 X509v3 Authority Key Identifier: keyid:03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/133F28C2453511F18432EE9F9F833773.roa sbgp-ipAddrBlock: critical IPv6: 2402:5b20::/32 Signature Algorithm: sha256WithRSAEncryption 94:39:73:5a:bc:f2:4c:02:70:1c:24:68:f9:54:e9:0f:3d:85: 27:52:da:6a:0a:f0:c0:27:2b:5b:f3:94:28:2a:1c:3a:ca:8d: 9e:d3:8e:e5:9d:09:5a:01:68:bd:40:01:b6:85:83:ef:59:fd: 09:90:37:e6:d9:27:ba:9b:fb:45:82:42:ed:c4:4b:16:fa:e0: 4f:49:6a:ae:a9:0b:2e:1f:7e:b9:dd:3b:2b:d2:84:70:7a:32: 81:71:90:32:d0:42:59:df:9d:1b:b3:8b:e4:cf:73:f4:38:46: cc:ca:51:d9:a4:5a:0e:21:8e:25:de:cb:d9:db:15:8d:94:48: 84:af:4b:ac:e5:f2:9c:88:83:e6:ee:94:be:6c:b0:a4:1f:a5: 24:1d:d4:f6:bf:d5:12:62:bf:16:8f:61:16:1a:2c:6b:91:78: d0:c4:58:4f:b9:5d:82:5e:b5:a0:65:6f:11:f9:3d:70:2b:6b: 1d:77:93:4a:ba:73:50:7b:d6:28:1a:84:bf:fb:9a:d9:30:a0: 1b:97:0e:52:90:89:ff:2c:20:c9:87:81:90:b1:a1:44:03:10: 4c:ba:b9:ca:69:9e:34:4e:02:29:87:f8:4b:d1:8a:e0:2b:16: 70:2d:d3:79:6a:65:2a:3c:2e:06:59:9b:b7:7c:f7:9c:cf:38: d2:b9:a4:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzZDODExMC8GA1UEBRMoMDM0OTI3NzcyRTUxRTA4NTVCMTBGRDUwMkI4MTZGMjQz NDYxOUJGMjAeFw0yNjA1MDEwODA5MjlaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZjQ1ZmI4LTdkOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv+8HqENR+tiRYt7vEjMg6Jl2X1LgWJCTcNdtbTNuXHpP1kZ5SO7G1UmO4jNZY +tb+03uXbdOkkv2FvqXyu7sQ7Ka15Q47WKAsFvT//xkDYb+M5ywc55xMoex8IvCe FWwW6z0JPA7uD5XPjfTXf6McF8ueUcqB7KWnJ7ZNKeFbYWBycAcOFXvAEA1WyFW/ LDcj+2Zq+n1ajcgSQd+DAMOYgig86glMDaePJExnB32e3XjONdnOS+Yh+Dr5S67p 5FIOlTQGF0tUG4KWZuIqHIuHl92pow+DKYpbdPL8HVZl8Nb7ySMumwrQdtf5zNl5 AiZqpH0gPFZIppUT5XhUSWzjAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUs7kOVjGM vlN3pj33xpO2ISqjznQwHwYDVR0jBBgwFoAUA0kndy5R4IVbEP1QK4FvJDRhm/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NkM4LzNBNjY1MDIwNDRB MzExRjFCREU5MEEzRkIxODMzNzczL0Ewa25keTVSNElWYkVQMVFLNEZ2SkRSaG1f SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTBrbmR5NVI0SVZiRVAxUUs0RnZKRFJobV9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzZDOC8zQTY2NTAyMDQ0QTMxMUYxQkRFOTBBM0ZCMTgzMzc3My8xMzNGMjhDMjQ1 MzUxMUYxODQzMkVFOUY5RjgzMzc3My5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAlsgMA0GCSqGSIb3DQEBCwUAA4IBAQCUOXNavPJMAnAcJGj5VOkP PYUnUtpqCvDAJytb85QoKhw6yo2e047lnQlaAWi9QAG2hYPvWf0JkDfm2Se6m/tF gkLtxEsW+uBPSWquqQsuH3653Tsr0oRwejKBcZAy0EJZ350bs4vkz3P0OEbMylHZ pFoOIY4l3svZ2xWNlEiEr0us5fKciIPm7pS+bLCkH6UkHdT2v9USYr8Wj2EWGixr kXjQxFhPuV2CXrWgZW8R+T1wK2sdd5NKunNQe9YoGoS/+5rZMKAblw5SkIn/LCDJ h4GQsaFEAxBMurnKaZ40TgIph/hL0YrgKxZwLdN5amUqPC4GWZu3fPeczzjSuaRG -----END CERTIFICATE-----Generated at Wed May 13 14:03:54 2026 by rpki-client