$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/B47FEDD024C411F0A4C45287C4F9AE02.roa File: B47FEDD024C411F0A4C45287C4F9AE02.roa (raw, json) Hash identifier: MojY0BL42g+25RMVkptUnRgFYNWH3XV06u/QKeiFORg= Subject key identifier: 18:57:4B:DA:C5:D2:39:E1:BC:25:1B:D0:A8:91:9B:48:11:18:D7:FD Certificate issuer: /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Certificate serial: A2 Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/B47FEDD024C411F0A4C45287C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:18:54 +0000 ROA not before: Thu 05 Feb 2026 16:26:08 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 139698 IP address blocks: 2001:df4:d540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA Validity Not Before: Feb 5 16:26:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4209e-d6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:38:ec:3b:fc:4a:0e:3f:79:55:c3:b1:06: 08:a4:a7:6d:de:da:b9:d0:d3:61:be:11:85:bb:4e: cb:ff:0e:bb:dd:fb:91:f1:87:a5:1d:ed:5f:ed:aa: 89:7f:7b:5e:3b:bd:17:9c:4b:b6:43:9d:a4:f1:64: b2:56:7a:37:f5:1d:92:64:9b:c6:97:e0:9d:c3:d4: ef:18:03:64:52:a0:bd:e1:0b:86:f3:47:e6:8f:33: e4:1d:72:35:36:b8:d5:39:c0:31:ce:c3:e2:b6:d4: 86:44:fd:f2:13:8f:c3:bf:8b:0c:53:85:5f:19:cf: 59:e9:8c:af:a0:31:5b:b0:84:70:26:30:ae:a4:93: 7c:52:28:c8:f5:21:35:4d:c0:e0:31:ca:80:37:bb: 2b:44:96:1b:f5:09:87:3d:dd:62:4e:bb:bb:47:b2: 26:87:7a:28:cb:96:03:47:7b:70:c0:d6:16:99:6c: af:32:7b:a5:b9:e2:03:90:0b:b8:3c:fc:98:d2:20: 6f:65:f2:66:5c:25:07:9b:44:36:d9:c4:ca:91:17: 70:b2:4a:e3:e3:1a:8f:e2:bc:d6:95:78:28:9c:bc: db:a6:08:9d:bb:27:d7:1c:b2:68:86:9a:66:11:a7: a6:04:c2:04:6a:54:5c:f9:b8:61:8a:1b:70:e3:d1: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:57:4B:DA:C5:D2:39:E1:BC:25:1B:D0:A8:91:9B:48:11:18:D7:FD X509v3 Authority Key Identifier: keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/B47FEDD024C411F0A4C45287C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:d540::/48 Signature Algorithm: sha256WithRSAEncryption 97:15:10:8f:02:ff:1e:4e:8e:d6:ad:15:f0:a3:a2:c3:f3:c7: 6b:84:01:f5:07:1c:6b:88:b3:4f:04:27:37:1b:4a:e1:ce:20: 4a:86:08:41:9f:94:99:61:4d:83:8c:b3:f2:b7:1c:c5:10:c9: 1e:ea:72:75:bd:62:67:1f:d0:16:dc:b7:6e:ff:d2:72:9e:52: fe:75:a8:a1:59:a3:ca:f6:f3:8f:2c:9b:4f:d6:7a:17:79:30: 12:3a:23:19:17:49:c7:80:12:90:b8:3f:c7:58:71:01:08:8b: 23:5b:a8:3d:6f:fd:3e:ba:68:fb:b4:ec:e7:91:d7:32:6f:6f: 08:c1:12:d3:ad:4a:ce:8f:e7:f1:09:9e:3f:6b:10:c2:2b:5c: 4c:f1:2c:d3:01:56:1c:3a:96:e4:03:c9:0b:f8:68:45:fd:20: c1:79:ac:25:3b:04:df:f5:3d:13:c7:06:c0:f8:91:8f:2f:04: 8a:f2:80:5a:be:1c:86:da:ac:2a:75:18:1c:24:f9:89:86:fc: fe:8d:4e:7c:3a:00:2f:9f:40:8a:18:d7:d9:b8:d8:49:b9:2a: e5:87:b3:07:00:f0:8a:cf:9b:ea:f5:08:de:be:bd:af:b8:fa: 0c:ca:1e:8a:ec:46:a4:a7:97:e5:b1:a0:fd:33:a7:44:b4:14: 47:3c:47:05 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZCNEIxMTAvBgNVBAUTKDRFRUIxREM3RDI4MjE0RDMxNkFBMzM3OEIxRTI5NUU5 MTAxQjRDQUEwHhcNMjYwMjA1MTYyNjA4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjA5ZS1kNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe047Dv8Sg4/eVXDsQYIpKdt3tq50NNhvhGFu07L/w673fuR8YelHe1f7aqJ f3teO70XnEu2Q52k8WSyVno39R2SZJvGl+Cdw9TvGANkUqC94QuG80fmjzPkHXI1 NrjVOcAxzsPittSGRP3yE4/Dv4sMU4VfGc9Z6YyvoDFbsIRwJjCupJN8UijI9SE1 TcDgMcqAN7srRJYb9QmHPd1iTru7R7Imh3ooy5YDR3twwNYWmWyvMnulueIDkAu4 PPyY0iBvZfJmXCUHm0Q22cTKkRdwskrj4xqP4rzWlXgonLzbpgiduyfXHLJohppm EaemBMIEalRc+bhhihtw49EteQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBhXS9rF 0jnhvCUb0KiRm0gRGNf9MB8GA1UdIwQYMBaAFE7rHcfSghTTFqozeLHilekQG0yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkI0Qi9DMzk5RkJDMjI0 QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9UdXNkeDlLQ0ZOTVdxak40c2VLVjZSQWJU S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZCNEIvQzM5OUZCQzIyNEMzMTFGMDk2QzY4NDgxQzRGOUFFMDIvQjQ3RkVERDAy NEM0MTFGMEE0QzQ1Mjg3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9NVAMA0GCSqGSIb3DQEBCwUAA4IBAQCXFRCPAv8eTo7WrRXw o6LD88drhAH1BxxriLNPBCc3G0rhziBKhghBn5SZYU2DjLPytxzFEMke6nJ1vWJn H9AW3Ldu/9JynlL+daihWaPK9vOPLJtP1noXeTASOiMZF0nHgBKQuD/HWHEBCIsj W6g9b/0+umj7tOznkdcyb28IwRLTrUrOj+fxCZ4/axDCK1xM8SzTAVYcOpbkA8kL +GhF/SDBeawlOwTf9T0TxwbA+JGPLwSK8oBavhyG2qwqdRgcJPmJhvz+jU58OgAv n0CKGNfZuNhJuSrlh7MHAPCKz5vq9Qjevr2vuPoMyh6K7Eakp5flsaD9M6dEtBRH PEcF -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:54 2026 by rpki-client