$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa File: 648391F4DDD311E8B6169878C4F9AE02.roa (raw, json) Hash identifier: kQPpfIOe0+wgcJB1OSWbK4K6Y/na3Zomn/R00Tk4BCA= Subject key identifier: 41:A9:22:4A:6E:3F:CF:48:6C:60:E9:F0:41:05:8E:35:53:CE:FC:B3 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2BE6 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:23:37 +0000 ROA not before: Fri 02 Jan 2026 16:13:50 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55488 IP address blocks: 49.231.27.0/24 maxlen: 24 2405:9800:c910::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11238 (0x2be6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:13:50 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a49239-ac53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:da:2d:44:e8:f4:6c:ce:3f:78:f0:21:ee: c9:2a:0e:55:b6:cb:ed:cc:50:de:5d:24:03:bf:8a: 8a:2e:ac:6e:29:04:5e:a8:cc:4a:d5:62:68:cf:6c: 07:2c:dc:88:d5:2a:f7:1b:90:eb:a1:2a:e1:df:58: 7e:5a:ea:0b:47:1a:0b:a1:3c:ad:87:00:a6:e7:a2: 74:ea:00:a2:68:98:a4:cd:e5:63:be:ae:a1:fb:b0: c1:62:f5:c9:40:f1:83:55:bc:dc:a6:82:29:d6:2e: 94:34:04:60:2b:59:e0:84:5f:a7:24:24:4b:79:3e: b2:dc:54:00:a8:3e:82:ce:22:e9:f7:03:30:df:16: 5f:59:67:b4:5f:ee:bf:0e:1b:51:ca:b6:99:a8:76: 0b:8e:98:02:21:be:3c:f4:59:ce:9c:27:e3:c7:03: ce:bd:6d:9e:42:62:21:b9:21:c0:33:33:88:c8:73: c3:1a:1c:a5:f2:69:4a:53:ce:d2:89:6a:f9:6a:07: 85:86:1e:5c:66:69:9f:6f:50:bc:b6:cc:75:0f:6d: 71:8c:24:d5:6e:b6:47:9c:f5:29:83:1a:dd:14:f3: 3c:c7:12:39:ec:40:30:7d:84:29:65:f9:ef:38:ca: 2c:f7:c8:43:d4:e9:b5:3c:c0:c4:87:d3:8e:c4:33: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:22:4A:6E:3F:CF:48:6C:60:E9:F0:41:05:8E:35:53:CE:FC:B3 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.231.27.0/24 IPv6: 2405:9800:c910::/48 Signature Algorithm: sha256WithRSAEncryption 84:92:0a:95:65:9c:6a:fb:fe:00:24:61:b8:46:20:0e:db:d4: 12:d2:ba:7a:d1:99:c6:1c:37:05:db:c2:44:04:90:8f:d1:5e: d6:c1:0d:ed:d4:1d:d0:ec:8b:ec:e9:5d:54:fe:43:ee:18:68: 74:58:55:fa:de:03:b6:ce:cf:09:27:2e:ba:fa:21:2e:1e:dc: 8e:8b:71:19:e9:52:a7:fc:b5:bc:1c:fd:19:38:99:67:b0:2a: 42:8e:1e:87:68:00:b4:aa:d0:2d:6f:c8:8e:aa:8a:93:63:68: ba:2e:3a:72:75:99:d6:73:4d:6d:04:a6:f3:33:6d:4e:94:0e: eb:d5:4d:6b:44:49:ec:f0:c7:eb:0e:ef:ec:a2:81:c5:f5:ea: ef:a3:df:96:b9:c5:74:51:79:6c:23:6b:a7:0a:0a:5e:09:ea: dc:c8:d8:da:2f:7b:21:74:48:70:5e:e2:71:0c:25:21:dd:3d: 27:1d:6d:7a:3e:45:ea:db:d1:56:7e:c4:26:2b:cc:60:cd:ab: 60:68:5d:1b:07:44:32:9a:64:d1:45:d1:24:24:b8:d9:92:a2: a2:0d:ab:97:0b:d8:42:31:41:33:89:f1:0e:7a:32:c2:63:54: 9d:d4:c8:48:a1:19:d0:f6:60:23:67:be:e1:7a:af:2e:48:d9: de:be:22:dd -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICK+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTIzOS1hYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE/aLUTo9GzOP3jwIe7JKg5VtsvtzFDeXSQDv4qKLqxuKQReqMxK1WJoz2wH LNyI1Sr3G5DroSrh31h+WuoLRxoLoTythwCm56J06gCiaJikzeVjvq6h+7DBYvXJ QPGDVbzcpoIp1i6UNARgK1nghF+nJCRLeT6y3FQAqD6CziLp9wMw3xZfWWe0X+6/ DhtRyraZqHYLjpgCIb489FnOnCfjxwPOvW2eQmIhuSHAMzOIyHPDGhyl8mlKU87S iWr5ageFhh5cZmmfb1C8tsx1D21xjCTVbrZHnPUpgxrdFPM8xxI57EAwfYQpZfnv OMos98hD1Om1PMDEh9OOxDNrNwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEGpIkpu P89IbGDp8EEFjjVTzvyzMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNjQ4MzkxRjRE REQzMTFFOEI2MTY5ODc4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAMecbMA8EAgACMAkDBwAkBZgAyRAwDQYJKoZIhvcNAQELBQADggEB AISSCpVlnGr7/gAkYbhGIA7b1BLSunrRmcYcNwXbwkQEkI/RXtbBDe3UHdDsi+zp XVT+Q+4YaHRYVfreA7bOzwknLrr6IS4e3I6LcRnpUqf8tbwc/Rk4mWewKkKOHodo ALSq0C1vyI6qipNjaLouOnJ1mdZzTW0EpvMzbU6UDuvVTWtESezwx+sO7+yigcX1 6u+j35a5xXRReWwja6cKCl4J6tzI2NoveyF0SHBe4nEMJSHdPScdbXo+Rerb0VZ+ xCYrzGDNq2BoXRsHRDKaZNFF0SQkuNmSoqINq5cL2EIxQTOJ8Q56MsJjVJ3UyEih GdD2YCNnvuF6ry5I2d6+It0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:57 2026 by rpki-client