$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/D1FD204C43B911EDB6AA2D5FC4F9AE02.roa File: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (raw, json) Hash identifier: /7MGslQwso9cFChdoF6CBy4SyQMQh62viBjTl25dnDQ= Subject key identifier: 48:B3:C5:A6:64:54:C6:22:92:41:AD:8E:CF:24:B8:64:54:71:F0:C2 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 0288 Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/D1FD204C43B911EDB6AA2D5FC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:54:38 +0000 ROA not before: Wed 09 Apr 2025 02:07:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 2403:8300:a4e0::/48 maxlen: 48 2403:8300:a4e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Apr 9 02:07:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5a4ae-bcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:1f:b3:eb:6a:51:8c:4e:cf:39:c2:17:8a: 5f:0a:f1:c7:ff:32:dd:2a:af:ae:a3:dd:10:9e:da: 43:15:54:2f:9a:b5:9c:16:2c:c1:c4:a5:57:2a:b9: b0:6b:17:8e:d3:08:0e:4c:f9:ed:e2:c6:e9:3e:8c: 5b:cb:90:4a:a9:51:d6:cf:e3:ab:d6:dc:4e:4e:87: ce:21:4a:d0:17:a5:5a:09:8c:7b:49:d7:a9:5f:cd: 0e:d0:0a:3b:99:80:75:e2:ca:c3:1e:14:fd:2b:79: d9:d1:03:a3:ea:05:84:12:ee:60:4c:dd:6b:f1:6d: d2:14:66:44:d3:c8:ac:7c:f0:e7:0b:59:d8:a2:db: 91:46:3b:d3:26:e6:db:4c:9e:8a:ab:fc:ec:33:1c: 6e:e0:c0:a0:a1:af:4e:3a:dc:fe:f5:f1:27:94:f8: 88:1a:12:a2:e4:f2:f0:13:a9:b4:21:90:7a:bc:1b: 32:9f:81:60:b8:90:3d:04:d4:17:e0:69:47:aa:ca: 5f:44:2f:32:32:04:3d:54:50:9d:4d:ba:eb:64:c9: e2:3d:a6:8b:76:9f:1b:c6:d7:93:58:c6:ba:68:74: bc:bb:8b:27:53:80:df:2b:18:f8:37:6c:55:da:5d: 83:8d:d7:e9:16:f5:12:03:c0:62:61:f1:24:bc:5f: c2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B3:C5:A6:64:54:C6:22:92:41:AD:8E:CF:24:B8:64:54:71:F0:C2 X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/D1FD204C43B911EDB6AA2D5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2403:8300:a4e0::/47 Signature Algorithm: sha256WithRSAEncryption ac:d9:25:08:56:98:54:8a:30:13:07:6e:54:65:7c:46:48:ca: 03:1a:ad:7e:69:8d:a5:82:c6:e5:99:6d:cb:a9:bf:40:19:f3: 56:08:52:66:e4:10:d3:70:82:b2:9e:12:3f:8f:d8:70:1f:29: 97:dc:b3:2e:b8:13:e3:ee:c0:10:28:be:2c:37:00:ce:c4:8b: da:4f:7a:c2:be:9b:49:6f:2f:3b:d9:21:ca:fd:16:54:24:1e: 70:8f:57:7b:9f:f6:d1:c7:a4:ba:8d:5a:63:38:81:4d:53:65: f4:f0:b2:96:92:15:45:71:74:9d:a4:a3:0f:25:41:ae:03:4b: ce:7b:39:4b:f7:df:01:3a:8c:10:98:9e:2a:04:f7:48:a3:d1: 75:8a:9e:52:54:ab:9a:59:b4:82:18:90:15:6d:ed:b1:5e:b5: b0:a4:52:39:b3:c9:4e:ea:91:09:08:18:c6:27:3e:24:f7:f8: 6a:5c:a6:ef:5b:fc:77:21:33:60:01:59:bf:b7:5c:99:6c:b4: 4b:6e:52:4e:77:96:e8:df:07:42:2a:03:8b:cd:16:b8:bc:81: 38:08:0e:b8:7a:8f:85:4c:fe:da:f9:57:de:23:d8:42:fd:db: 1b:c2:a0:d7:42:5b:28:8f:e3:ab:4c:d7:ea:fa:52:4e:26:d0: 0f:f8:93:eb -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwNDA5MDIwNzQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTRhZS1iY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubofs+tqUYxOzznCF4pfCvHH/zLdKq+uo90QntpDFVQvmrWcFizBxKVXKrmw axeO0wgOTPnt4sbpPoxby5BKqVHWz+Or1txOTofOIUrQF6VaCYx7SdepX80O0Ao7 mYB14srDHhT9K3nZ0QOj6gWEEu5gTN1r8W3SFGZE08isfPDnC1nYotuRRjvTJubb TJ6Kq/zsMxxu4MCgoa9OOtz+9fEnlPiIGhKi5PLwE6m0IZB6vBsyn4FguJA9BNQX 4GlHqspfRC8yMgQ9VFCdTbrrZMniPaaLdp8bxteTWMa6aHS8u4snU4DfKxj4N2xV 2l2DjdfpFvUSA8BiYfEkvF/CIwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFEizxaZk VMYikkGtjs8kuGRUcfDCMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI1RjIvNEFFRUQ5MUM0M0I3MTFFRDk4RkY0NTVFQzRGOUFFMDIvRDFGRDIwNEM0 M0I5MTFFREI2QUEyRDVGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcBJAODAKTgMA0GCSqGSIb3DQEBCwUAA4IBAQCs2SUIVphUijATB25U ZXxGSMoDGq1+aY2lgsblmW3Lqb9AGfNWCFJm5BDTcIKynhI/j9hwHymX3LMuuBPj 7sAQKL4sNwDOxIvaT3rCvptJby872SHK/RZUJB5wj1d7n/bRx6S6jVpjOIFNU2X0 8LKWkhVFcXSdpKMPJUGuA0vOezlL998BOowQmJ4qBPdIo9F1ip5SVKuaWbSCGJAV be2xXrWwpFI5s8lO6pEJCBjGJz4k9/hqXKbvW/x3ITNgAVm/t1yZbLRLblJOd5bo 3wdCKgOLzRa4vIE4CA64eo+FTP7a+VfeI9hC/dsbwqDXQlsoj+OrTNfq+lJOJtAP +JPr -----END CERTIFICATE-----Generated at Thu Mar 26 01:51:11 2026 by rpki-client