$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F14B18CE64C611F0A7F4DB79C4F9AE02.roa File: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (raw, json) Hash identifier: iEXGIsNYH311PJIgaH9OeoRGxcu7W7Wehcq1wxoUdGY= Subject key identifier: 5C:C0:27:C0:52:14:AC:F9:B2:C5:9B:2A:2A:30:FF:37:E3:F6:93:34 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: F9 Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F14B18CE64C611F0A7F4DB79C4F9AE02.roa Signing time: Thu 07 May 2026 06:39:54 +0000 ROA not before: Thu 07 May 2026 06:39:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9516 IP address blocks: 2401:f460:2100::/48 maxlen: 48 2401:f460:2200::/48 maxlen: 48 2401:f460:2300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: May 7 06:39:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fc33ba-d8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:ee:b2:2f:1f:2a:94:56:fe:8f:2f:d6:f2: a8:39:db:e3:12:f7:86:0e:5a:c2:fd:1f:07:9c:e6: b8:5c:cd:f4:d0:9d:b0:86:73:68:69:fe:c7:64:c8: d5:9b:10:5c:17:7f:f6:0a:56:87:10:1d:f5:fc:3f: b7:2c:3d:e7:b0:46:dd:dd:27:2a:76:64:60:69:06: d0:7a:69:ae:58:61:bd:64:69:a4:15:f2:9c:35:15: 44:3d:08:0e:ef:12:fd:20:ad:fa:f4:12:2e:0b:ff: 95:ae:1d:65:25:cc:61:bb:83:23:00:61:90:0f:33: 7c:a8:83:90:b4:35:ea:ab:53:cb:0a:bc:5d:08:a0: ab:f0:e5:ca:6b:5a:6e:b2:bd:9a:e1:4b:4c:5e:85: 5d:5c:50:aa:f6:ee:77:8e:0d:7b:d1:82:ef:b7:b6: 4a:82:14:5d:1d:8c:d3:a3:3d:a3:0f:7e:45:e8:4e: ff:0d:21:24:3e:79:18:29:f3:74:0c:24:ee:f7:b1: 09:d7:af:17:61:ee:60:8f:1b:11:43:47:95:8a:31: e1:b4:c6:a6:3b:17:e4:54:c2:d6:5b:9a:c8:cb:2b: 9b:a7:8c:03:48:28:95:aa:4f:13:50:41:59:1f:70: 95:68:03:66:06:9c:68:6c:09:14:a0:07:f7:a7:fb: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C0:27:C0:52:14:AC:F9:B2:C5:9B:2A:2A:30:FF:37:E3:F6:93:34 X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F14B18CE64C611F0A7F4DB79C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:f460:2100::/48 2401:f460:2200::/48 2401:f460:2300::/48 Signature Algorithm: sha256WithRSAEncryption 75:67:ad:c8:d3:4c:c2:4c:ad:fb:00:e5:e0:5a:36:42:5a:8d: ee:bf:d4:bf:ef:5b:f4:ff:0f:04:0f:aa:aa:78:31:12:0c:03: 9e:00:64:8b:d1:9f:e3:c2:d4:84:f7:a0:39:01:cb:da:f9:92: 4e:66:16:fd:a7:89:e5:61:7c:f2:08:3b:42:cc:60:f6:bc:dd: 86:7d:e2:a1:4a:6f:2e:31:d4:93:aa:c7:68:69:80:a2:01:2d: f8:ec:84:6d:fc:a5:2e:d9:40:65:30:66:47:d4:dd:62:05:f2: 7f:f4:e1:5e:f3:ee:2f:6e:60:47:b4:1a:e3:5b:ce:75:bd:76: 3c:99:8e:97:46:9d:ad:8b:75:94:01:f5:60:18:fc:1b:c0:46: 13:20:37:5b:26:6f:22:54:29:e5:a3:48:37:b2:01:2a:ad:2d: ce:c0:3f:69:4a:dc:3b:54:70:63:9e:6f:68:ef:7b:c7:90:cb: 24:47:65:9e:86:92:5f:ab:ed:41:6b:c6:61:51:be:db:22:7d: f2:e8:32:c7:ff:9f:83:f5:84:de:f9:40:39:4e:7b:17:69:23: 48:2e:90:79:ec:2e:ab:2e:de:c1:f7:a4:dd:d2:3a:5b:d5:21: 82:61:d5:ca:83:1b:6a:6a:0b:d0:6f:02:d5:0d:6c:3d:45:3e: 4d:8f:4d:1c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE4MEMxMTAvBgNVBAUTKDMxMjQ0MDIwMUIyRUY3NEI3Q0FDNkMzMUZCODVGNDFF OUM0Njg2QTAwHhcNMjYwNTA3MDYzOTU0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZjMzNiYS1kOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrHusi8fKpRW/o8v1vKoOdvjEveGDlrC/R8HnOa4XM300J2whnNoaf7HZMjV mxBcF3/2ClaHEB31/D+3LD3nsEbd3ScqdmRgaQbQemmuWGG9ZGmkFfKcNRVEPQgO 7xL9IK369BIuC/+Vrh1lJcxhu4MjAGGQDzN8qIOQtDXqq1PLCrxdCKCr8OXKa1pu sr2a4UtMXoVdXFCq9u53jg170YLvt7ZKghRdHYzToz2jD35F6E7/DSEkPnkYKfN0 DCTu97EJ168XYe5gjxsRQ0eVijHhtMamOxfkVMLWW5rIyyubp4wDSCiVqk8TUEFZ H3CVaANmBpxobAkUoAf3p/sEcQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFzAJ8BS FKz5ssWbKiow/zfj9pM0MB8GA1UdIwQYMBaAFDEkQCAbLvdLfKxsMfuF9B6cRoag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTgwQy9ERTk4RUFGMEZC NjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkwdDhyR3d4LTRYMEhweEdo cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE4MEMvREU5OEVBRjBGQjY1MTFFRkEzNzZFNDQ5QzRGOUFFMDIvRjE0QjE4Q0U2 NEM2MTFGMEE3RjREQjc5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh BAIAAjAbAwcAJAH0YCEAAwcAJAH0YCIAAwcAJAH0YCMAMA0GCSqGSIb3DQEBCwUA A4IBAQB1Z63I00zCTK37AOXgWjZCWo3uv9S/71v0/w8ED6qqeDESDAOeAGSL0Z/j wtSE96A5Acva+ZJOZhb9p4nlYXzyCDtCzGD2vN2GfeKhSm8uMdSTqsdoaYCiAS34 7IRt/KUu2UBlMGZH1N1iBfJ/9OFe8+4vbmBHtBrjW851vXY8mY6XRp2ti3WUAfVg GPwbwEYTIDdbJm8iVCnlo0g3sgEqrS3OwD9pStw7VHBjnm9o73vHkMskR2WehpJf q+1Ba8ZhUb7bIn3y6DLH/5+D9YTe+UA5TnsXaSNILpB57C6rLt7B96Td0jpb1SGC YdXKgxtqagvQbwLVDWw9RT5Nj00c -----END CERTIFICATE-----Generated at Wed May 13 06:29:22 2026 by rpki-client