$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/C4A33CA4275711F0BA7C7752C4F9AE02.roa File: C4A33CA4275711F0BA7C7752C4F9AE02.roa (raw, json) Hash identifier: xVG7r2x7LJlYNff/OSjUdtTyddvWAkjEB2pAXqeQxpA= Subject key identifier: 2D:E8:45:8B:EE:D3:36:CB:A0:A6:28:FC:DB:06:FB:7B:06:A0:5F:5C Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 0102 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/C4A33CA4275711F0BA7C7752C4F9AE02.roa Signing time: Thu 09 Apr 2026 06:41:01 +0000 ROA not before: Thu 09 Apr 2026 06:41:01 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 153581 IP address blocks: 2001:df5:11c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Apr 9 06:41:01 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d749fd-d685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:39:b6:6c:35:6f:32:57:7c:a3:6c:3d:f5: e1:df:2a:13:ae:fd:1f:76:24:a7:23:bd:34:80:ab: f0:bb:09:71:99:1b:47:79:62:2f:dd:c5:28:37:a0: c9:bf:67:0d:40:ba:ff:41:34:77:f4:ba:58:a0:8d: 54:5b:5e:58:91:16:47:3b:12:57:62:e2:c9:ba:57: 18:5c:96:87:6d:76:fa:60:09:98:e6:48:7f:b1:3c: 3a:47:7b:14:00:2d:90:b5:37:06:c9:67:36:c2:cc: c0:23:57:df:23:c8:f4:34:c0:27:58:6c:94:82:0b: a8:8b:0d:2f:01:c0:63:16:50:4f:f6:58:aa:b5:84: e4:35:dc:0e:d1:fa:62:6c:db:8b:79:c2:72:56:ab: 5f:d4:19:52:e2:d2:28:ea:1c:df:5e:73:c9:05:b8: 98:fc:7a:83:eb:e9:08:45:98:32:31:96:f5:e1:e9: 34:4b:19:27:72:9f:c5:e8:d3:ab:44:e2:d9:16:d6: 2f:c5:3e:2f:39:89:79:3f:a5:47:60:d3:5b:36:f1: b0:0e:2a:47:13:c3:2d:4d:5b:66:a1:57:bd:df:7c: 3e:b3:59:64:e8:54:67:84:1d:ac:f2:af:ad:aa:ef: bc:a9:d3:c6:aa:54:4d:29:4f:ec:12:03:d7:33:15: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:45:8B:EE:D3:36:CB:A0:A6:28:FC:DB:06:FB:7B:06:A0:5F:5C X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/C4A33CA4275711F0BA7C7752C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:11c0::/48 Signature Algorithm: sha256WithRSAEncryption 46:b0:7f:0c:51:fb:b5:a2:50:e3:7a:59:97:17:d6:62:95:eb: 6b:47:c6:32:8c:55:20:56:54:17:44:50:3a:56:a4:ca:dd:ce: 0f:41:ee:42:25:14:93:33:db:94:d3:29:45:1b:fa:99:38:d9: 8c:b6:eb:c6:8d:c7:aa:45:dc:da:9f:15:73:c4:bd:e9:bb:93: 10:eb:3e:cd:dc:b5:62:be:77:d9:f4:ad:40:1a:d3:e4:ec:d5: 49:89:48:09:82:06:f2:ac:09:2e:f4:18:0a:28:e0:e4:8b:50: 34:e1:16:3b:8a:71:5b:60:58:8f:88:df:59:e8:aa:af:e2:ac: bc:32:89:44:80:6d:98:4d:79:ad:6e:3c:1e:62:92:90:18:3a: 60:4d:b0:01:92:b9:41:ff:df:e1:60:ba:fc:f9:21:08:0b:38: 1a:21:a2:4a:01:10:39:ab:80:72:07:51:ac:ca:21:32:7d:2c: de:05:0b:19:9a:3e:27:21:59:31:e3:6c:5e:82:47:f5:a4:61: 2b:0a:72:4d:79:53:5d:fd:42:09:13:61:c2:05:9b:be:4c:c4: ce:d8:90:6b:e5:34:aa:f2:78:0f:5f:aa:05:89:a2:d9:31:79: d4:f0:87:dc:66:0f:56:57:48:6d:bd:b0:ca:59:8d:80:58:69: 87:4f:ca:8c -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjYwNDA5MDY0MTAxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ3NDlmZC1kNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwno5tmw1bzJXfKNsPfXh3yoTrv0fdiSnI700gKvwuwlxmRtHeWIv3cUoN6DJ v2cNQLr/QTR39LpYoI1UW15YkRZHOxJXYuLJulcYXJaHbXb6YAmY5kh/sTw6R3sU AC2QtTcGyWc2wszAI1ffI8j0NMAnWGyUgguoiw0vAcBjFlBP9liqtYTkNdwO0fpi bNuLecJyVqtf1BlS4tIo6hzfXnPJBbiY/HqD6+kIRZgyMZb14ek0Sxkncp/F6NOr ROLZFtYvxT4vOYl5P6VHYNNbNvGwDipHE8MtTVtmoVe933w+s1lk6FRnhB2s8q+t qu+8qdPGqlRNKU/sEgPXMxWgBQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFC3oRYvu 0zbLoKYo/NsG+3sGoF9cMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRFRUIvMUVFN0ZBNjBFNUY0MTFFRkFCRDM5RDdFQzRGOUFFMDIvQzRBMzNDQTQy NzU3MTFGMEJBN0M3NzUyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9RHAMA0GCSqGSIb3DQEBCwUAA4IBAQBGsH8MUfu1olDjelmX F9ZiletrR8YyjFUgVlQXRFA6VqTK3c4PQe5CJRSTM9uU0ylFG/qZONmMtuvGjceq RdzanxVzxL3pu5MQ6z7N3LVivnfZ9K1AGtPk7NVJiUgJggbyrAku9BgKKODki1A0 4RY7inFbYFiPiN9Z6Kqv4qy8MolEgG2YTXmtbjweYpKQGDpgTbABkrlB/9/hYLr8 +SEICzgaIaJKARA5q4ByB1GsyiEyfSzeBQsZmj4nIVkx42xegkf1pGErCnJNeVNd /UIJE2HCBZu+TMTO2JBr5TSq8ngPX6oFiaLZMXnU8IfcZg9WV0htvbDKWY2AWGmH T8qM -----END CERTIFICATE-----Generated at Fri Apr 17 12:31:04 2026 by rpki-client