$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/4D8A57B6D2F111EFAC77C249C4F9AE02.roa File: 4D8A57B6D2F111EFAC77C249C4F9AE02.roa (raw, json) Hash identifier: SydfXxIaBM4Y/Cfe2TK/3xT5wvI3llPjBDqsTXtE7aw= Subject key identifier: 77:30:98:44:1A:AE:3A:A3:3A:F0:7F:9F:60:41:11:D5:82:0F:46:4C Certificate issuer: /CN=A9198553/serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Certificate serial: DA Authority key identifier: C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/4D8A57B6D2F111EFAC77C249C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:15:32 +0000 ROA not before: Fri 23 Jan 2026 05:25:12 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 153525 IP address blocks: 2001:df4:e9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Validity Not Before: Jan 23 05:25:12 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a41fd4-7c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:51:86:e1:52:be:59:41:54:e7:c6:77:47: 5c:08:b1:09:ed:e3:79:56:00:36:a5:f6:26:a3:59: 28:7d:88:e1:b5:9d:7b:b8:ae:94:83:84:03:12:da: 15:f2:8c:8e:bb:37:d9:cd:09:e1:65:e4:55:e9:21: 96:b6:ba:8c:94:63:bc:16:8f:e1:8b:db:3e:d7:9b: ac:98:96:e4:4b:62:27:80:40:d8:02:6a:96:8e:7a: 6a:e1:ad:e7:8a:87:84:22:d1:45:25:14:db:0f:48: 31:0f:cd:70:77:59:cc:bb:63:e1:7d:b2:ea:3b:57: 7d:1a:d9:32:f7:3b:ed:75:08:97:87:ee:81:49:cd: c3:60:5e:6b:a2:57:da:9f:b9:fd:19:d9:b4:92:6d: c9:a3:75:c0:63:43:5e:de:5a:78:f4:47:ec:34:d2: bd:42:9a:68:d8:c5:53:49:36:47:e8:7d:da:03:c0: 21:a7:37:7d:29:9d:cb:4f:fa:de:89:ee:ad:e2:bd: 0d:b2:6b:74:94:f6:94:d2:c1:0c:1e:bb:b8:aa:93: fe:e1:62:8f:fc:8f:f9:ca:90:a5:bb:ae:22:66:c1: c8:f7:13:48:a6:ca:45:7a:e5:43:2e:30:9d:dd:a2: bc:a0:9a:cf:53:e2:d1:ac:81:c8:45:88:95:15:9c: 6b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:30:98:44:1A:AE:3A:A3:3A:F0:7F:9F:60:41:11:D5:82:0F:46:4C X509v3 Authority Key Identifier: keyid:C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/4D8A57B6D2F111EFAC77C249C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:e9c0::/48 Signature Algorithm: sha256WithRSAEncryption bc:35:47:29:1b:9e:37:04:7f:fb:2c:a7:77:8d:ae:13:ed:c5: c1:8e:5a:f8:f6:f6:28:78:f2:69:28:88:89:4f:60:96:4a:bf: 48:dd:e6:83:ff:89:7f:eb:22:88:30:1e:cb:1f:25:bb:0f:68: 11:fe:bb:8b:38:8e:ef:a6:cc:6c:cb:1d:5f:42:c3:41:a6:48: 94:7b:d8:fc:95:50:63:b7:76:d9:e3:af:b5:6f:bd:3f:6f:9c: 79:b5:3f:05:7b:13:b5:57:29:ff:c4:b3:86:7e:26:d4:d2:f5: 33:66:f1:7f:19:99:cd:47:4b:21:23:f3:b0:a0:d1:86:04:bf: 76:83:ac:59:6f:dc:e8:a2:b3:dd:7e:1d:51:9b:e2:09:3c:50: 91:2f:20:b8:54:23:bf:ed:5e:55:fe:09:62:09:35:ff:d1:81: bf:4a:83:01:fe:90:f5:ce:16:96:a1:d2:7b:c2:f8:2f:10:9a: e3:78:04:4d:dc:41:94:fd:5e:be:c6:4c:b5:f6:d0:c5:b9:02: cd:a1:07:5c:e4:58:2f:a3:e8:a1:80:23:e0:b8:9e:f8:f3:01: 90:a5:3f:4d:8b:5a:cb:52:8a:ce:a9:68:b7:59:2f:a6:2c:57: 1d:af:c9:d7:0b:70:ce:30:ab:d6:71:58:8f:d3:ea:2e:4b:3d: 3c:7c:50:81 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKEMyNTU0RTkxQzcwNzBFQ0MzMUU2Mzc4RUE0M0JDRkFG M0M4MjEzQzAwHhcNMjYwMTIzMDUyNTEyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWZkNC03YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7JRhuFSvllBVOfGd0dcCLEJ7eN5VgA2pfYmo1kofYjhtZ17uK6Ug4QDEtoV 8oyOuzfZzQnhZeRV6SGWtrqMlGO8Fo/hi9s+15usmJbkS2IngEDYAmqWjnpq4a3n ioeEItFFJRTbD0gxD81wd1nMu2PhfbLqO1d9Gtky9zvtdQiXh+6BSc3DYF5rolfa n7n9Gdm0km3Jo3XAY0Ne3lp49EfsNNK9Qppo2MVTSTZH6H3aA8Ahpzd9KZ3LT/re ie6t4r0Nsmt0lPaU0sEMHru4qpP+4WKP/I/5ypClu64iZsHI9xNIpspFeuVDLjCd 3aK8oJrPU+LRrIHIRYiVFZxr5QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHcwmEQa rjqjOvB/n2BBEdWCD0ZMMB8GA1UdIwQYMBaAFMJVTpHHBw7MMeY3jqQ7z688ghPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BRTkyREMxQ0Qy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi93bFZPa2NjSERzd3g1amVPcER2UHJ6eUNF OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dsVk9rY2NIRHN3eDVqZU9wRHZQcnp5Q0U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg1NTMvQUU5MkRDMUNEMkVEMTFFRjhERUU1MTIwQzRGOUFFMDIvNEQ4QTU3QjZE MkYxMTFFRkFDNzdDMjQ5QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9OnAMA0GCSqGSIb3DQEBCwUAA4IBAQC8NUcpG543BH/7LKd3 ja4T7cXBjlr49vYoePJpKIiJT2CWSr9I3eaD/4l/6yKIMB7LHyW7D2gR/ruLOI7v psxsyx1fQsNBpkiUe9j8lVBjt3bZ46+1b70/b5x5tT8FexO1Vyn/xLOGfibU0vUz ZvF/GZnNR0shI/OwoNGGBL92g6xZb9zoorPdfh1Rm+IJPFCRLyC4VCO/7V5V/gli CTX/0YG/SoMB/pD1zhaWodJ7wvgvEJrjeARN3EGU/V6+xky19tDFuQLNoQdc5Fgv o+ihgCPguJ748wGQpT9Ni1rLUorOqWi3WS+mLFcdr8nXC3DOMKvWcViP0+ouSz08 fFCB -----END CERTIFICATE-----Generated at Fri Mar 27 06:24:34 2026 by rpki-client