$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa File: C3D424C4F4F611F0B230A1D14E6F56BC.roa (raw, json) Hash identifier: eIWV2PVAmeguQkSyB8K0knff+OjMcoKXdZxZHafjh0o= Subject key identifier: E7:ED:5D:C5:94:32:14:10:E0:4F:B7:05:C3:C3:D6:DA:88:CD:E6:25 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 09B0 Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa Signing time: Tue 14 Apr 2026 17:22:02 +0000 ROA not before: Tue 14 Apr 2026 17:22:02 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138619 IP address blocks: 2001:df6:7bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2480 (0x9b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Apr 14 17:22:02 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69de77ba-ddd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:1d:a0:77:a9:46:a9:fa:a8:62:62:ea:61: 30:8e:55:96:27:d2:39:ee:69:cd:65:76:0d:80:49: 19:fb:c2:d4:76:79:f8:4f:fd:f0:ba:7f:99:64:ce: f0:52:ba:00:6c:76:51:19:fc:ce:76:13:ee:e5:0e: c6:f7:46:2f:6f:df:2f:4f:6f:ad:22:cc:aa:64:59: a7:fc:8a:ed:fa:fc:d4:db:a9:9a:b0:b7:24:1e:6d: 3e:5b:d2:48:de:fd:9b:28:e9:4c:2d:33:5a:90:4f: cd:38:47:57:9a:48:af:f1:d8:eb:cf:41:50:1e:1b: fe:95:ff:02:2e:c9:aa:08:1d:ef:db:96:e1:bc:04: f1:67:69:41:2f:b0:90:33:57:82:10:50:14:e9:14: 21:45:c7:91:74:59:83:9f:2e:b0:81:a0:ec:42:91: 4f:d6:88:a5:1a:a4:1a:7e:ec:99:eb:7d:ae:71:15: 5e:7c:2e:59:f1:45:fd:d8:8c:5e:2b:fc:cf:8a:e5: 63:a7:b1:c0:d8:f0:81:22:fd:04:b1:3d:d1:da:69: e4:ea:89:01:88:ec:5b:16:5b:d6:c7:39:71:7b:e1: 4a:07:7a:f0:bc:d8:65:fb:48:d2:58:19:fb:24:fc: 67:1b:59:00:ad:4e:55:20:cb:ea:cb:ad:82:e0:80: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:ED:5D:C5:94:32:14:10:E0:4F:B7:05:C3:C3:D6:DA:88:CD:E6:25 X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 96:93:40:ca:4f:93:9f:6d:9c:f2:d3:80:b7:6a:5b:53:17:db: 1e:98:a5:3d:01:aa:ed:9c:65:54:46:c6:38:f7:8a:75:c9:1b: a1:bb:fe:c2:17:ab:12:23:2a:6d:37:44:71:bd:cc:34:82:76: 9f:7f:0a:2b:0b:5c:5b:ad:66:38:f6:9d:92:f9:91:bb:f7:83: d0:cc:c7:35:6b:cf:0a:72:14:9b:74:fe:42:a8:8b:9a:ed:bf: df:8c:51:72:a8:b8:0e:1b:69:28:4e:45:a6:d2:9f:da:71:e4: 0b:42:b5:f1:4d:67:ba:06:0a:d8:fd:53:64:9f:a8:74:d6:de: e7:bf:e9:cf:d5:3d:33:c5:d3:15:d2:ba:af:39:41:b9:e5:c4: a4:74:b7:e8:82:91:0d:a5:1e:2c:8c:f5:84:da:75:84:b7:ce: fb:69:f9:88:f5:55:b6:fc:1f:c3:d0:f5:c4:4b:0b:50:81:e9: dd:65:ef:f6:27:34:51:fc:92:6a:6f:71:f9:67:a2:78:e1:77: db:f4:ca:3f:56:70:d7:c2:04:52:15:e0:db:ce:bd:1d:3b:20: 42:4d:5a:2b:4c:00:89:63:2f:a0:93:ee:14:93:af:66:ce:67: da:ce:8d:d4:a7:0e:f4:9a:c0:62:e0:78:dc:9c:06:ab:af:06: e3:1b:55:d8 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjYwNDE0MTcyMjAyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWRlNzdiYS1kZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMQdoHepRqn6qGJi6mEwjlWWJ9I57mnNZXYNgEkZ+8LUdnn4T/3wun+ZZM7w UroAbHZRGfzOdhPu5Q7G90Yvb98vT2+tIsyqZFmn/Irt+vzU26masLckHm0+W9JI 3v2bKOlMLTNakE/NOEdXmkiv8djrz0FQHhv+lf8CLsmqCB3v25bhvATxZ2lBL7CQ M1eCEFAU6RQhRceRdFmDny6wgaDsQpFP1oilGqQafuyZ632ucRVefC5Z8UX92Ixe K/zPiuVjp7HA2PCBIv0EsT3R2mnk6okBiOxbFlvWxzlxe+FKB3rwvNhl+0jSWBn7 JPxnG1kArU5VIMvqy62C4ICG8wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOftXcWU MhQQ4E+3BcPD1tqIzeYlMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUwNzMvNDNGMTYyNjQzMzk1MTFFOUJGQjFDMjFBQzRGOUFFMDIvQzNENDI0QzRG NEY2MTFGMEIyMzBBMUQxNEU2RjU2QkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9nvAMA0GCSqGSIb3DQEBCwUAA4IBAQCWk0DKT5OfbZzy04C3 altTF9semKU9AartnGVURsY494p1yRuhu/7CF6sSIyptN0Rxvcw0gnaffworC1xb rWY49p2S+ZG794PQzMc1a88KchSbdP5CqIua7b/fjFFyqLgOG2koTkWm0p/aceQL QrXxTWe6BgrY/VNkn6h01t7nv+nP1T0zxdMV0rqvOUG55cSkdLfogpENpR4sjPWE 2nWEt877afmI9VW2/B/D0PXESwtQgendZe/2JzRR/JJqb3H5Z6J44Xfb9Mo/VnDX wgRSFeDbzr0dOyBCTVorTACJYy+gk+4Uk69mzmfazo3Upw70msBi4HjcnAarrwbj G1XY -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:50 2026 by rpki-client