$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/2BF1D5F07E3511EE8CB63458C4F9AE02.roa File: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (raw, json) Hash identifier: I+xSYvR5vfpxBiIRAe84JarFe3Ja6Qu8IKK38QKP4g4= Subject key identifier: 00:FB:B3:2A:D7:4F:6B:E1:B6:C0:AC:E0:1E:2E:22:BF:9C:5E:B2:67 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 0489 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/2BF1D5F07E3511EE8CB63458C4F9AE02.roa Signing time: Wed 13 May 2026 00:30:26 +0000 ROA not before: Wed 13 May 2026 00:30:26 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136251 IP address blocks: 210.79.61.0/24 maxlen: 24 210.79.62.0/24 maxlen: 24 210.79.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: May 13 00:30:26 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a03c622-8d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:09:dc:0f:2f:80:72:72:b2:55:05:5f:3e: 2a:ae:9e:6b:07:14:5d:86:bf:a3:24:c6:f0:1f:a7: 5a:35:2a:e0:1b:16:c9:f5:90:20:e7:28:c4:66:e9: fb:a2:3d:f9:35:5b:59:51:91:dd:b7:ae:32:53:cf: 1b:39:5c:9a:46:1a:34:c0:89:3c:7c:b2:09:c4:16: 0d:4d:3b:fd:a1:8b:cd:5e:d0:ef:16:32:5c:ce:70: ff:fc:cc:74:66:72:a7:6a:3e:cf:ca:20:ab:ae:40: d5:73:c9:64:ac:4c:21:10:b2:92:ff:10:27:c9:d8: 77:28:db:65:44:27:7b:9b:c6:1a:c8:c9:7b:4a:e7: be:82:b4:a3:bf:3e:8b:81:0a:5c:90:86:ba:f0:b1: 64:6f:81:91:11:d1:1b:93:fb:2a:13:a4:3b:f6:2f: 57:d1:e5:05:4a:c1:0a:97:a5:ee:10:8a:f0:c2:a9: 28:fb:b3:71:0e:bd:1b:9e:e4:7c:2f:2c:e7:3f:9e: 1e:9c:84:8c:48:9b:b8:3f:3b:49:3e:91:73:c5:6e: 4c:b1:02:9c:ae:d8:a7:c1:0c:e3:21:d5:fb:6c:be: 62:10:ae:de:59:f3:84:04:a6:6f:95:9d:b1:fe:a7: 6f:1d:9d:30:9f:73:9a:47:1c:63:71:ec:d0:e6:b4: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FB:B3:2A:D7:4F:6B:E1:B6:C0:AC:E0:1E:2E:22:BF:9C:5E:B2:67 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/2BF1D5F07E3511EE8CB63458C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.79.61.0-210.79.63.255 Signature Algorithm: sha256WithRSAEncryption 95:44:2e:7c:60:c3:fa:c9:fe:a6:ab:24:b0:d2:56:40:87:85: 30:20:3b:0a:f3:ed:dd:f1:7f:68:d1:4b:f6:05:fd:82:9d:18: 96:63:88:b7:5a:b3:d4:38:a3:ce:93:00:2f:eb:35:87:29:1b: 77:d8:26:2b:7b:dd:ec:a7:29:85:6c:85:77:cf:e5:df:f4:37: 33:e9:46:db:fd:9a:ca:de:b1:99:b1:d4:aa:ed:a5:a7:d3:ed: 0d:eb:ac:35:52:ca:5b:38:88:b8:cd:d0:56:3c:5f:11:69:6e: 3e:b6:f4:ee:3a:bd:65:7c:04:a7:40:64:04:16:a9:3f:85:ef: 2f:42:43:8d:f7:7e:17:27:c1:01:bb:4a:b4:b4:72:ba:a8:90: 0d:83:8c:91:0f:1b:82:7a:35:fa:c4:5a:de:5c:b2:a9:d0:55: c9:10:41:e7:1c:b7:57:81:81:fb:ef:55:5b:a7:2b:7a:a5:10: ba:c9:5e:80:2f:cd:99:53:35:90:e1:82:4a:a8:5e:36:ef:a0: 7f:90:a5:13:2a:e7:0f:6e:91:78:5a:22:09:6b:83:fe:ec:35: 7a:03:ab:49:4a:81:b7:a4:eb:79:49:8f:a0:c1:8d:f6:48:ad: 60:71:80:38:68:aa:2a:44:05:30:d9:6d:26:22:f2:1c:2f:c7: b5:c2:24:8d -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjYwNTEzMDAzMDI2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAzYzYyMi04ZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rYJ3A8vgHJyslUFXz4qrp5rBxRdhr+jJMbwH6daNSrgGxbJ9ZAg5yjEZun7 oj35NVtZUZHdt64yU88bOVyaRho0wIk8fLIJxBYNTTv9oYvNXtDvFjJcznD//Mx0 ZnKnaj7PyiCrrkDVc8lkrEwhELKS/xAnydh3KNtlRCd7m8YayMl7Sue+grSjvz6L gQpckIa68LFkb4GREdEbk/sqE6Q79i9X0eUFSsEKl6XuEIrwwqko+7NxDr0bnuR8 LyznP54enISMSJu4PztJPpFzxW5MsQKcrtinwQzjIdX7bL5iEK7eWfOEBKZvlZ2x /qdvHZ0wn3OaRxxjcezQ5rRbCQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFAD7syrX T2vhtsCs4B4uIr+cXrJnMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYzQTYvMEQzOUM0RTQ5QTlCMTFFQzgyQzcwQjIwQzRGOUFFMDIvMkJGMUQ1RjA3 RTM1MTFFRThDQjYzNDU4QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBADSTz0DBAbSTwAwDQYJKoZIhvcNAQELBQADggEBAJVELnxgw/rJ /qarJLDSVkCHhTAgOwrz7d3xf2jRS/YF/YKdGJZjiLdas9Q4o86TAC/rNYcpG3fY Jit73eynKYVshXfP5d/0NzPpRtv9msresZmx1KrtpafT7Q3rrDVSyls4iLjN0FY8 XxFpbj629O46vWV8BKdAZAQWqT+F7y9CQ433fhcnwQG7SrS0crqokA2DjJEPG4J6 NfrEWt5csqnQVckQQecct1eBgfvvVVunK3qlELrJXoAvzZlTNZDhgkqoXjbvoH+Q pRMq5w9ukXhaIglrg/7sNXoDq0lKgbek63lJj6DBjfZIrWBxgDhoqipEBTDZbSYi 8hwvx7XCJI0= -----END CERTIFICATE-----Generated at Wed May 13 07:29:24 2026 by rpki-client