$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/D40428EC3D5511F18320D810A8833773.roa File: D40428EC3D5511F18320D810A8833773.roa (raw, json) Hash identifier: GiqC1fPItzwUUjM6WaOHq6c0vxZNE0S017OV+sd3TxQ= Subject key identifier: 47:41:27:01:C9:E9:D7:7E:16:34:F5:EE:B1:21:3F:AD:0E:AE:67:E4 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0BE3 Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/D40428EC3D5511F18320D810A8833773.roa Signing time: Tue 28 Apr 2026 19:25:12 +0000 ROA not before: Tue 28 Apr 2026 19:25:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135155 IP address blocks: 146.196.48.0/22 maxlen: 22 146.196.48.0/24 maxlen: 24 146.196.49.0/24 maxlen: 24 146.196.50.0/24 maxlen: 24 146.196.51.0/24 maxlen: 24 2407:5f80::/32 maxlen: 32 2407:5f80::/36 maxlen: 36 2407:5f80:1000::/36 maxlen: 36 2407:5f80:2000::/36 maxlen: 36 2407:5f80:3000::/36 maxlen: 36 2407:5f80:4000::/36 maxlen: 36 2407:5f80:5000::/36 maxlen: 36 2407:5f80:6000::/36 maxlen: 36 2407:5f80:7000::/36 maxlen: 36 2407:5f80:8000::/36 maxlen: 36 2407:5f80:9000::/36 maxlen: 36 2407:5f80:a000::/36 maxlen: 36 2407:5f80:b000::/36 maxlen: 36 2407:5f80:c000::/36 maxlen: 36 2407:5f80:d000::/36 maxlen: 36 2407:5f80:e000::/36 maxlen: 36 2407:5f80:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Apr 28 19:25:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f10997-a1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:3c:8a:61:69:61:cd:63:00:16:5c:ff:a3: 78:bd:4b:89:a9:31:0a:f1:43:6e:7e:e2:aa:39:dc: 1c:99:a7:35:4e:1c:bd:8f:f4:9d:fa:4a:ea:9c:c6: 9f:d2:76:63:2b:5a:52:2d:ad:13:c4:7d:b6:c7:96: 22:f4:8e:57:26:93:f3:e2:76:f5:cc:93:a0:2e:a5: 19:38:f6:6a:59:39:ef:2d:66:e4:83:7b:d7:c5:8b: 42:be:68:48:51:0b:ed:c2:3b:71:0d:5e:d3:47:8f: fc:fb:ae:8c:c1:ff:dd:dd:12:96:2c:65:e1:01:9b: fa:f1:a2:2b:8a:e8:45:5b:f3:4f:1b:1b:2b:49:12: 31:03:3a:7b:31:fb:1e:8f:9d:e8:a6:fe:fc:7b:fc: 37:b0:a1:55:55:ae:ce:eb:76:47:09:d9:31:18:0b: 49:bc:43:ef:79:13:21:01:87:90:0a:5b:84:38:de: 34:8a:6d:0e:4d:07:ae:06:04:aa:8f:04:68:15:a2: 6c:76:15:03:82:c5:8f:61:50:cf:65:2e:35:b4:d0: 82:a3:76:16:12:bf:b4:6b:86:23:dd:ff:45:3e:3b: 10:77:71:a7:8e:01:b1:59:ff:6f:87:33:59:bd:f6: 77:55:be:fb:8b:dc:9f:41:bf:14:a4:67:0f:6d:80: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:41:27:01:C9:E9:D7:7E:16:34:F5:EE:B1:21:3F:AD:0E:AE:67:E4 X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/D40428EC3D5511F18320D810A8833773.roa sbgp-ipAddrBlock: critical IPv4: 146.196.48.0/22 IPv6: 2407:5f80::/32 Signature Algorithm: sha256WithRSAEncryption 49:4e:c5:de:f5:50:a2:2c:2d:f8:2f:52:1b:e3:e7:80:40:01: a7:76:3b:65:a3:ee:bd:30:ac:4a:b2:98:db:1f:35:f1:36:6d: dc:eb:40:d4:22:0a:a0:d7:87:5b:5a:a7:83:25:fc:05:45:69: 66:7b:38:73:bb:b3:18:cb:13:8d:65:1d:da:17:68:77:22:49: 39:17:13:33:cb:81:f6:f8:ef:c8:b4:a7:13:f2:e1:de:15:c2: 40:76:db:54:ff:e8:60:e0:df:9f:f8:c2:e5:0f:cb:23:ca:07: b6:94:f7:e0:df:dd:93:d6:8a:ef:71:02:a5:43:3c:9c:50:aa: 12:62:78:79:15:9d:ea:65:e1:05:ba:39:94:c2:a7:36:36:95: 15:de:80:7d:33:4c:87:84:6e:52:d1:c4:8e:07:53:66:37:40: 2b:ca:12:d3:89:e7:55:10:7f:19:ff:c8:d8:4e:03:92:18:04: 4d:25:ea:8f:1a:08:d2:f5:12:03:99:c6:af:77:e3:4c:3e:5e: 2c:dd:f0:ca:9c:d6:73:73:06:0a:10:a1:9f:fd:57:67:9a:ea: 9b:c7:1a:98:b5:07:af:04:e9:d1:72:a2:a1:64:73:47:ed:05: fe:7a:a9:94:c1:99:fa:b6:c4:68:bb:35:38:20:1c:7c:48:1f: 2e:19:c4:87 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjYwNDI4MTkyNTExWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxMDk5Ny1hMWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zM8imFpYc1jABZc/6N4vUuJqTEK8UNufuKqOdwcmac1Thy9j/Sd+krqnMaf 0nZjK1pSLa0TxH22x5Yi9I5XJpPz4nb1zJOgLqUZOPZqWTnvLWbkg3vXxYtCvmhI UQvtwjtxDV7TR4/8+66Mwf/d3RKWLGXhAZv68aIriuhFW/NPGxsrSRIxAzp7Mfse j53opv78e/w3sKFVVa7O63ZHCdkxGAtJvEPveRMhAYeQCluEON40im0OTQeuBgSq jwRoFaJsdhUDgsWPYVDPZS41tNCCo3YWEr+0a4Yj3f9FPjsQd3GnjgGxWf9vhzNZ vfZ3Vb77i9yfQb8UpGcPbYBWjQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEdBJwHJ 6dd+FjT17rEhP60OrmfkMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA2RjIvOEI4QzRERDIzRjQ3MTFFQThFNURBODdDQzRGOUFFMDIvRDQwNDI4RUMz RDU1MTFGMTgzMjBEODEwQTg4MzM3NzMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCksQwMA0EAgACMAcDBQAkB1+AMA0GCSqGSIb3DQEBCwUAA4IBAQBJ TsXe9VCiLC34L1Ib4+eAQAGndjtlo+69MKxKspjbHzXxNm3c60DUIgqg14dbWqeD JfwFRWlmezhzu7MYyxONZR3aF2h3Ikk5FxMzy4H2+O/ItKcT8uHeFcJAdttU/+hg 4N+f+MLlD8sjyge2lPfg392T1orvcQKlQzycUKoSYnh5FZ3qZeEFujmUwqc2NpUV 3oB9M0yHhG5S0cSOB1NmN0AryhLTiedVEH8Z/8jYTgOSGARNJeqPGgjS9RIDmcav d+NMPl4s3fDKnNZzcwYKEKGf/VdnmuqbxxqYtQevBOnRcqKhZHNH7QX+eqmUwZn6 tsRouzU4IBx8SB8uGcSH -----END CERTIFICATE-----Generated at Wed May 13 05:25:53 2026 by rpki-client