$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/4C798C5AD5DD11EEA5B1C711C4F9AE02.roa File: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (raw, json) Hash identifier: 7o8MZ2l9kJsHLTcNTqkyLIW4uWykvkFJiEWSx8KB8XY= Subject key identifier: EC:7D:93:9D:0D:45:F8:35:B5:B1:4F:58:9E:D4:A3:DB:3D:EC:1E:70 Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 0185 Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/4C798C5AD5DD11EEA5B1C711C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:46:10 +0000 ROA not before: Mon 17 Mar 2025 04:50:55 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 134245 IP address blocks: 2001:df3:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Mar 17 04:50:55 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5a2b2-8b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:28:ac:b9:04:e9:d2:cf:4b:cc:27:a1:69: cf:63:76:45:9a:ca:e0:8f:e3:4f:44:5d:c5:7e:8e: 17:97:ff:7f:8b:95:c8:55:c6:cf:75:79:54:fa:9e: 96:e9:0e:43:bc:81:3f:73:8b:48:3c:89:d8:2f:5e: 23:e0:78:38:ef:9b:6c:57:6a:3d:5e:aa:9b:89:05: e3:3f:ae:ad:31:2e:e8:5f:57:30:96:fd:80:09:6c: 83:b4:79:00:d5:b1:f1:49:05:ba:86:c9:cb:ab:71: 14:3a:85:f8:67:46:8f:0a:1f:4c:1c:c8:09:c6:6c: ee:65:82:b0:c3:2a:0b:c8:c1:dd:7b:bd:14:36:9d: 05:42:07:54:20:66:a1:66:d3:e7:9e:bf:1e:e1:18: 9c:8c:b5:7a:ca:ad:2c:c2:70:f1:81:44:5c:fd:e3: cf:62:72:ff:f1:70:83:9c:d8:2a:e8:c4:72:18:47: 43:9e:64:82:dc:cb:70:6a:5c:ed:00:a3:5d:f5:f8: 23:68:ce:62:e6:9f:b6:c2:ef:07:5d:1a:24:a1:33: 62:d0:29:bb:88:45:f2:2b:98:a9:91:35:06:c1:da: 0e:9d:ef:e7:82:df:20:39:98:7f:22:5e:d6:39:33: ec:84:c1:9d:5f:52:49:86:ef:64:60:e6:59:51:68: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7D:93:9D:0D:45:F8:35:B5:B1:4F:58:9E:D4:A3:DB:3D:EC:1E:70 X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/4C798C5AD5DD11EEA5B1C711C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 60:12:f1:2f:22:ed:84:64:e3:1c:82:d7:85:44:52:0e:ad:0c: 83:06:25:ab:fc:7e:03:60:cb:7e:e1:1a:07:2d:6f:68:bb:0a: 71:36:8a:31:04:4c:ea:43:95:46:ae:3c:c6:36:8d:c6:c1:ae: ec:15:c2:60:38:a5:40:d2:c7:11:09:50:f8:90:d0:c2:ba:45: bf:c9:36:3c:c5:d7:64:3f:1b:e5:f1:9f:bb:59:3a:ed:80:20: d6:58:f4:e4:b4:74:bc:fc:02:9b:b9:65:02:0c:02:81:7d:b4: 7a:6a:ca:2e:0a:e8:e2:23:3b:6c:71:c2:91:5a:3a:ef:33:55: da:88:19:4b:df:7b:fe:11:0b:13:3c:d7:cc:24:c9:8e:22:d0: 91:06:e3:5b:e2:4c:9a:52:e8:3b:c1:be:0d:66:f1:5d:fc:8d: b6:56:92:48:cd:2a:de:c6:4a:29:d3:d5:76:f8:06:ea:3d:f5: ba:17:45:85:c7:e9:1f:46:95:fd:77:ef:28:06:c6:4b:ba:99: ce:1c:a6:eb:65:70:d4:aa:6c:53:7f:9a:14:b7:00:79:c0:c7: 54:1a:6c:89:9e:31:f9:41:78:73:33:b6:e4:de:bb:5e:41:e1: 57:c0:b6:df:de:b0:62:7e:6a:9a:91:2b:ec:e1:df:9b:8c:d3: 31:98:00:bd -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUwMzE3MDQ1MDU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTJiMi04YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTMorLkE6dLPS8wnoWnPY3ZFmsrgj+NPRF3Ffo4Xl/9/i5XIVcbPdXlU+p6W 6Q5DvIE/c4tIPInYL14j4Hg475tsV2o9XqqbiQXjP66tMS7oX1cwlv2ACWyDtHkA 1bHxSQW6hsnLq3EUOoX4Z0aPCh9MHMgJxmzuZYKwwyoLyMHde70UNp0FQgdUIGah ZtPnnr8e4RicjLV6yq0swnDxgURc/ePPYnL/8XCDnNgq6MRyGEdDnmSC3Mtwalzt AKNd9fgjaM5i5p+2wu8HXRokoTNi0Cm7iEXyK5ipkTUGwdoOne/ngt8gOZh/Il7W OTPshMGdX1JJhu9kYOZZUWiDtwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOx9k50N Rfg1tbFPWJ7Uo9s97B5wMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwNjgvNzgxRTdEQzRENTE2MTFFRUIzNUU2QTYwQzRGOUFFMDIvNEM3OThDNUFE NUREMTFFRUE1QjFDNzExQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN84DAMA0GCSqGSIb3DQEBCwUAA4IBAQBgEvEvIu2EZOMcgteF RFIOrQyDBiWr/H4DYMt+4RoHLW9ouwpxNooxBEzqQ5VGrjzGNo3Gwa7sFcJgOKVA 0scRCVD4kNDCukW/yTY8xddkPxvl8Z+7WTrtgCDWWPTktHS8/AKbuWUCDAKBfbR6 asouCujiIztsccKRWjrvM1XaiBlL33v+EQsTPNfMJMmOItCRBuNb4kyaUug7wb4N ZvFd/I22VpJIzSrexkop09V2+AbqPfW6F0WFx+kfRpX9d+8oBsZLupnOHKbrZXDU qmxTf5oUtwB5wMdUGmyJnjH5QXhzM7bk3rteQeFXwLbf3rBifmqakSvs4d+bjNMx mAC9 -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:31 2026 by rpki-client