$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D46B2C087F8711EC81E76A59C4F9AE02.roa File: D46B2C087F8711EC81E76A59C4F9AE02.roa (raw, json) Hash identifier: 8gFFRq3SlgMuYbFLuAKfwQbZJroeVnfvgsR2xzQ4aFU= Subject key identifier: D5:B6:6D:A6:8E:FE:0A:64:DD:AA:FD:34:1C:75:AF:9A:FF:A9:E7:0F Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 04C8 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D46B2C087F8711EC81E76A59C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:57:53 +0000 ROA not before: Fri 07 Mar 2025 00:46:02 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149476 IP address blocks: 2400:54a0::/48 maxlen: 48 2400:54a0:1004::/48 maxlen: 48 2400:54a0:1030::/48 maxlen: 48 2400:54a0:2040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Mar 7 00:46:02 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a47e21-4308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:26:79:26:57:12:d3:76:f2:6d:ac:26:3c: 99:a2:45:b6:d6:cf:6c:9e:be:3d:29:fb:cd:a3:2b: ab:06:18:96:47:36:e5:7e:c8:74:f4:80:a4:71:c0: b3:65:50:a6:f4:c5:86:b4:d3:3a:d1:0a:b1:4f:e7: 38:91:cb:2c:88:e8:6a:07:66:e2:3d:c4:33:5c:0f: cf:1c:ab:3f:93:15:ce:32:ff:43:d4:cd:53:b5:1e: 78:da:ce:79:ce:e2:02:ec:f3:0c:8e:a4:ac:78:ae: b5:39:b2:43:b3:37:0d:2a:40:24:91:dd:88:e8:63: 01:99:5f:d1:db:80:4b:c8:22:33:43:8f:b3:95:0e: 88:a5:7a:34:59:e8:e9:85:5f:d1:34:9a:6d:b2:0c: e0:15:c0:c6:81:88:b6:19:14:33:f4:e4:bf:d7:7e: e3:90:0e:c2:59:6e:58:10:4e:cc:36:18:e1:72:a3: df:3e:1e:c0:0e:20:d4:df:8f:36:0a:c3:10:a6:ce: bd:76:ce:51:e5:da:6f:a0:d5:2b:08:69:bb:3c:41: 28:80:24:52:62:4e:07:4d:bb:15:db:27:85:5b:10: ce:ec:76:ac:1a:ed:25:7f:ac:a5:32:90:2e:3a:2b: cc:f7:fd:eb:35:02:8b:db:2f:da:17:e4:57:07:16: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B6:6D:A6:8E:FE:0A:64:DD:AA:FD:34:1C:75:AF:9A:FF:A9:E7:0F X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D46B2C087F8711EC81E76A59C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:54a0::/48 2400:54a0:1004::/48 2400:54a0:1030::/48 2400:54a0:2040::/44 Signature Algorithm: sha256WithRSAEncryption 8b:a2:58:6f:c9:2e:a2:29:65:10:d5:44:71:d4:3c:15:5c:7e: 6c:47:0a:1b:83:8e:43:2c:01:e5:9f:50:ab:60:b1:57:e9:5b: b7:b8:5a:8a:e6:09:c7:6d:b5:a3:54:e4:85:01:4b:55:ce:63: dd:43:03:ce:bb:8a:cc:3f:a6:ad:99:48:83:d2:9b:93:c0:8e: c1:d4:7a:a7:23:34:09:33:10:2b:15:1e:ca:bc:db:ae:7c:e3: 87:53:eb:44:ad:e6:28:11:17:87:8c:7b:55:99:05:3a:72:ad: 17:84:03:e1:bc:0d:dc:7c:fc:d1:88:cf:25:b3:5a:88:9f:ad: 07:fa:cb:45:2a:68:d7:f7:6b:d0:02:d6:7f:63:d7:53:84:7a: d2:1d:6b:7e:3e:51:b7:12:c1:ae:2d:7e:1e:c6:d1:2c:7d:7f: ee:d4:f6:cd:70:df:fe:74:86:98:fa:86:14:55:4e:4e:98:c6: 79:44:16:3a:65:ec:a7:83:2b:dd:56:27:8c:d7:09:b8:0d:1f: dd:cb:b8:ad:07:23:99:3e:ca:43:a7:0d:74:c6:ec:23:4f:f2: c5:cc:3c:2e:74:d3:08:e4:a6:84:41:8f:2e:8d:c1:14:6a:89: 47:5e:d7:74:93:c9:bb:37:4b:20:43:a3:15:b3:c9:b0:d4:26: 6f:cb:63:66 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUwMzA3MDA0NjAyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2UyMS00MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBQmeSZXEtN28m2sJjyZokW21s9snr49KfvNoyurBhiWRzblfsh09ICkccCz ZVCm9MWGtNM60QqxT+c4kcssiOhqB2biPcQzXA/PHKs/kxXOMv9D1M1TtR542s55 zuIC7PMMjqSseK61ObJDszcNKkAkkd2I6GMBmV/R24BLyCIzQ4+zlQ6IpXo0Wejp hV/RNJptsgzgFcDGgYi2GRQz9OS/137jkA7CWW5YEE7MNhjhcqPfPh7ADiDU3482 CsMQps69ds5R5dpvoNUrCGm7PEEogCRSYk4HTbsV2yeFWxDO7HasGu0lf6ylMpAu OivM9/3rNQKL2y/aF+RXBxakhwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFNW2baaO /gpk3ar9NBx1r5r/qecPMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUxQTAvN0M1MzkxMEM3Rjg0MTFFQzgwNTE4RTUxQzRGOUFFMDIvRDQ2QjJDMDg3 Rjg3MTFFQzgxRTc2QTU5QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAAjAkAwcAJABUoAAAAwcAJABUoBAEAwcAJABUoBAwAwcEJABUoCBAMA0GCSqG SIb3DQEBCwUAA4IBAQCLolhvyS6iKWUQ1URx1DwVXH5sRwobg45DLAHln1CrYLFX 6Vu3uFqK5gnHbbWjVOSFAUtVzmPdQwPOu4rMP6atmUiD0puTwI7B1HqnIzQJMxAr FR7KvNuufOOHU+tEreYoEReHjHtVmQU6cq0XhAPhvA3cfPzRiM8ls1qIn60H+stF KmjX92vQAtZ/Y9dThHrSHWt+PlG3EsGuLX4extEsfX/u1PbNcN/+dIaY+oYUVU5O mMZ5RBY6ZeyngyvdVieM1wm4DR/dy7itByOZPspDpw10xuwjT/LFzDwudNMI5KaE QY8ujcEUaolHXtd0k8m7N0sgQ6MVs8mw1CZvy2Nm -----END CERTIFICATE-----Generated at Mon Mar 2 09:07:33 2026 by rpki-client