$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/3D3827F2D6EE11EFB955866CC4F9AE02.roa File: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (raw, json) Hash identifier: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c= Subject key identifier: 37:CD:D6:48:D5:D4:FA:6C:F4:20:59:0B:D9:D8:49:3F:70:CA:6F:84 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: D8 Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/3D3827F2D6EE11EFB955866CC4F9AE02.roa Signing time: Mon 09 Mar 2026 05:42:28 +0000 ROA not before: Mon 09 Mar 2026 05:42:28 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 153530 IP address blocks: 2001:df4:f140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Validity Not Before: Mar 9 05:42:28 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ae5dc4-cc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:ec:27:be:f8:38:2a:34:1d:be:d0:21:d6: 38:48:55:0a:e5:be:17:6c:1e:e3:53:d0:8b:8d:8c: d1:33:bd:bd:3e:f5:1e:e4:e6:cd:7f:08:48:94:55: 97:7f:aa:34:fb:d3:39:f3:e3:3d:37:c2:2c:a2:fa: e8:af:4f:55:89:a5:41:77:0f:94:26:c3:b4:88:3d: 1e:31:2c:be:54:1f:4b:2f:14:c6:36:e7:b5:7f:bf: f3:36:b3:b0:8a:f7:bf:42:b7:96:66:21:71:fa:28: 39:72:19:51:c7:00:d0:aa:c8:41:49:a5:18:c2:df: fd:23:7f:83:5c:fe:00:50:cc:a1:0e:17:02:d6:7c: 71:92:64:4f:ae:ff:70:b9:31:ae:e7:05:03:53:4f: f6:67:bf:0c:cd:91:a0:d4:c4:5d:f7:7e:44:4e:ae: 40:4c:ed:fa:d3:ee:a8:5b:a6:42:d3:1e:0b:46:78: 5d:07:58:f3:ff:f7:32:39:f4:64:47:13:64:f2:24: 6a:4d:e8:13:4a:bf:c8:c8:93:02:a2:35:ff:60:f5: aa:72:6d:7f:f3:4f:96:fb:77:17:b5:f6:84:8e:34: 5b:d3:54:03:bb:6e:97:3c:d7:b6:58:37:e5:63:4d: 77:49:88:11:b4:11:dc:f4:ac:c9:e5:f8:01:d7:e9: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:D6:48:D5:D4:FA:6C:F4:20:59:0B:D9:D8:49:3F:70:CA:6F:84 X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/3D3827F2D6EE11EFB955866CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:f140::/48 Signature Algorithm: sha256WithRSAEncryption 00:58:4e:c9:f0:26:b8:2f:f7:60:1b:6f:44:d2:47:a7:98:c4: fb:ce:06:f8:a6:36:77:3a:5c:66:2c:f0:e7:56:c4:32:fd:1f: ff:42:51:76:96:58:a9:c2:ab:ac:9f:75:e2:b7:cf:88:a6:0b: 96:b5:4e:ee:ff:d1:45:ca:e5:d9:c1:4c:a0:0d:11:81:f4:45: 98:01:91:cb:cd:28:8a:cd:8b:a0:f1:c6:2d:6a:89:61:cb:c2: a2:06:30:93:98:ba:9e:7b:02:a7:50:4c:97:3a:9c:c9:82:b2: 0f:6f:30:68:a5:44:10:da:36:5b:cc:57:7d:b1:7a:b7:e1:8a: 6c:4c:68:66:4d:38:4a:d6:76:80:4f:1f:e3:00:f9:32:5c:44: 62:2f:2d:21:68:da:4e:fb:64:6e:9a:06:cb:09:bc:c6:10:ab: 34:64:d3:95:d8:35:72:b3:5f:f7:4a:3f:4e:f1:1d:f3:54:03: 21:e4:aa:86:88:56:6a:ee:45:23:b4:a0:ea:94:b1:1a:21:00: a8:14:dc:71:2b:c9:2f:ce:63:83:44:51:9b:1a:86:71:3e:6b: bf:3b:23:6a:b1:d3:1a:b0:23:bf:30:74:9c:6a:ab:d3:b3:bb: 38:f4:f1:eb:74:da:e4:2f:9e:d4:f2:1a:e0:32:fb:d8:b9:99: 29:d7:98:74 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNjMxMTAvBgNVBAUTKDZDQjM4MjBEQTVBNEE4NEIyRDk0MDlCREYwN0YyNTQ1 RkU2RDBCMTEwHhcNMjYwMzA5MDU0MjI4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlNWRjNC1jYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBvsJ774OCo0Hb7QIdY4SFUK5b4XbB7jU9CLjYzRM729PvUe5ObNfwhIlFWX f6o0+9M58+M9N8Isovror09ViaVBdw+UJsO0iD0eMSy+VB9LLxTGNue1f7/zNrOw ive/QreWZiFx+ig5chlRxwDQqshBSaUYwt/9I3+DXP4AUMyhDhcC1nxxkmRPrv9w uTGu5wUDU0/2Z78MzZGg1MRd935ETq5ATO360+6oW6ZC0x4LRnhdB1jz//cyOfRk RxNk8iRqTegTSr/IyJMCojX/YPWqcm1/80+W+3cXtfaEjjRb01QDu26XPNe2WDfl Y013SYgRtBHc9KzJ5fgB1+mrpwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDfN1kjV 1Pps9CBZC9nYST9wym+EMB8GA1UdIwQYMBaAFGyzgg2lpKhLLZQJvfB/JUX+bQsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82QzBGOTYxMEQ2 RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FFc3RsQW05OEg4bFJmNXRD eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IwNjMvNkMwRjk2MTBENkVEMTFFRjlEOUJGMzZBQzRGOUFFMDIvM0QzODI3RjJE NkVFMTFFRkI5NTU4NjZDQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9PFAMA0GCSqGSIb3DQEBCwUAA4IBAQAAWE7J8Ca4L/dgG29E 0kenmMT7zgb4pjZ3OlxmLPDnVsQy/R//QlF2llipwqusn3Xit8+IpguWtU7u/9FF yuXZwUygDRGB9EWYAZHLzSiKzYug8cYtaolhy8KiBjCTmLqeewKnUEyXOpzJgrIP bzBopUQQ2jZbzFd9sXq34YpsTGhmTThK1naATx/jAPkyXERiLy0haNpO+2RumgbL CbzGEKs0ZNOV2DVys1/3Sj9O8R3zVAMh5KqGiFZq7kUjtKDqlLEaIQCoFNxxK8kv zmODRFGbGoZxPmu/OyNqsdMasCO/MHScaqvTs7s49PHrdNrkL57U8hrgMvvYuZkp 15h0 -----END CERTIFICATE-----Generated at Fri Mar 27 04:48:21 2026 by rpki-client