$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/A6AB9D38335211F1960FCBDEC6833773.roa File: A6AB9D38335211F1960FCBDEC6833773.roa (raw, json) Hash identifier: eXxCFDfnDfAFb+VxnPASq3AvIfkbg/uecOo6gz8yP10= Subject key identifier: 2F:1E:CE:20:D8:90:5F:79:7C:0E:18:03:58:3C:E3:4F:14:AE:AC:DD Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Certificate serial: 01C4 Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/A6AB9D38335211F1960FCBDEC6833773.roa Signing time: Fri 01 May 2026 04:37:37 +0000 ROA not before: Fri 01 May 2026 04:37:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153473 IP address blocks: 2401:8ea0:1000::/36 maxlen: 36 2401:8ea0:2000::/35 maxlen: 35 2401:8ea0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Validity Not Before: May 1 04:37:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f42e11-a775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b6:75:f5:9f:b5:c9:23:d0:11:27:49:95:c4: d5:d9:09:67:cc:6b:4a:16:38:55:3d:01:d1:9a:67: ea:0a:3d:a7:58:d5:ae:18:64:ee:b1:de:83:66:e8: 07:8e:8f:42:33:fe:35:1e:57:99:ce:55:e6:31:54: 56:a3:7f:0e:42:e6:08:19:7c:f4:7d:a2:c2:1b:41: 0e:96:fe:91:89:e3:70:41:95:db:8a:c4:f1:dd:6d: a0:97:3c:a2:2f:af:e7:a1:db:d2:af:ff:62:b9:fc: 2a:f6:09:7a:c4:17:78:c1:0b:65:8c:98:93:0d:dc: cf:81:47:9b:fe:03:69:a3:4d:36:0a:bf:75:92:7e: cd:b7:ab:dc:b7:65:bc:e5:a4:a9:c8:8b:ae:f8:d9: 03:9d:57:53:d9:05:30:2e:66:1c:c8:58:08:c0:ae: c8:f0:92:be:18:f5:7c:f4:a3:c5:b4:24:df:6e:6d: 17:01:dd:10:22:0f:ea:a6:a6:9a:2f:3c:ea:1f:55: e0:a9:b9:e1:ee:1a:de:d4:2c:31:b3:1b:b4:a6:44: 83:7b:ba:a3:28:85:b1:3b:21:08:42:fc:a0:cf:2f: a3:61:92:96:84:e7:d0:13:4e:7b:9f:2e:ca:4c:e3: 62:88:9b:5b:bd:6a:cc:59:36:de:78:05:01:79:3c: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1E:CE:20:D8:90:5F:79:7C:0E:18:03:58:3C:E3:4F:14:AE:AC:DD X509v3 Authority Key Identifier: keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/A6AB9D38335211F1960FCBDEC6833773.roa sbgp-ipAddrBlock: critical IPv6: 2401:8ea0:1000::-2401:8ea0:3fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1c:c1:a0:25:a8:00:4f:cf:5e:13:73:40:1d:c5:38:0a:27:34: 32:18:1a:6b:77:33:81:79:64:74:60:28:6a:ec:28:fb:f1:b9: 8c:9e:0f:28:70:01:d8:dd:e5:7e:a6:ed:eb:03:6b:e0:04:b5: f1:bd:9c:59:48:85:a2:a4:43:b0:9c:63:8d:91:2c:97:bf:98: 2a:bb:8f:59:ea:ec:e5:ae:84:f0:75:79:f4:41:ab:27:a0:fe: e2:13:b0:c8:d8:97:85:9d:f3:f3:32:cf:1e:a6:c0:21:c7:91: ed:f3:29:fc:29:5c:62:b7:25:3e:6e:1a:e3:9a:95:73:a9:51: df:38:81:93:a2:14:b8:92:1a:14:23:06:d1:05:83:37:30:8d: d7:4a:ba:41:cd:cf:7e:c4:55:7e:ec:7a:b9:e3:81:56:59:5c: 3f:ff:4c:35:e8:0b:c1:c5:e4:dc:0e:f0:93:e3:98:ae:2b:12: eb:36:b0:4f:f6:17:62:90:99:50:93:73:7e:3d:4b:71:65:f7: 79:df:26:7d:d3:c0:12:b9:3b:c3:00:72:07:44:51:76:cb:af: 72:e7:47:23:26:b5:27:3a:0a:bc:2b:e1:94:f9:49:92:59:68: 61:a9:0a:13:57:3b:fd:74:e9:81:ec:51:ee:64:06:f9:f3:02: 42:45:1e:82 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4 MDg2OEZCRDkwHhcNMjYwNTAxMDQzNzM3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY0MmUxMS1hNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87Z19Z+1ySPQESdJlcTV2QlnzGtKFjhVPQHRmmfqCj2nWNWuGGTusd6DZugH jo9CM/41HleZzlXmMVRWo38OQuYIGXz0faLCG0EOlv6RieNwQZXbisTx3W2glzyi L6/nodvSr/9iufwq9gl6xBd4wQtljJiTDdzPgUeb/gNpo002Cr91kn7Nt6vct2W8 5aSpyIuu+NkDnVdT2QUwLmYcyFgIwK7I8JK+GPV89KPFtCTfbm0XAd0QIg/qpqaa LzzqH1Xgqbnh7hre1Cwxsxu0pkSDe7qjKIWxOyEIQvygzy+jYZKWhOfQE057ny7K TONiiJtbvWrMWTbeeAUBeTxuBwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFC8eziDY kF95fA4YA1g8408UrqzdMB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2 NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ4NDkvMDg3RDNFRThFNjZEMTFFRThBMzFBOTYwQzRGOUFFMDIvQTZBQjlEMzgz MzUyMTFGMTk2MEZDQkRFQzY4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASMBADBgQkAY6gEAMGBiQBjqAAMA0GCSqGSIb3DQEBCwUAA4IBAQAcwaAl qABPz14Tc0AdxTgKJzQyGBprdzOBeWR0YChq7Cj78bmMng8ocAHY3eV+pu3rA2vg BLXxvZxZSIWipEOwnGONkSyXv5gqu49Z6uzlroTwdXn0QasnoP7iE7DI2JeFnfPz Ms8epsAhx5Ht8yn8KVxityU+bhrjmpVzqVHfOIGTohS4khoUIwbRBYM3MI3XSrpB zc9+xFV+7Hq544FWWVw//0w16AvBxeTcDvCT45iuKxLrNrBP9hdikJlQk3N+PUtx Zfd53yZ908ASuTvDAHIHRFF2y69y50cjJrUnOgq8K+GU+UmSWWhhqQoTVzv9dOmB 7FHuZAb58wJCRR6C -----END CERTIFICATE-----Generated at Wed May 13 04:00:20 2026 by rpki-client