$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/4C798C5AD5DD11EEA5B1C711C4F9AE02.roa File: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (raw, json) Hash identifier: gZMg/kdPjraT+HkFJ3M5Wuo5BFJ4/DV3UHp4Eod3HvE= Subject key identifier: BC:D9:68:E2:84:35:56:DB:43:72:1A:80:F4:32:94:AD:E9:EA:CB:86 Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 019C Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/4C798C5AD5DD11EEA5B1C711C4F9AE02.roa Signing time: Tue 07 Apr 2026 04:37:56 +0000 ROA not before: Tue 07 Apr 2026 04:37:56 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 134245 IP address blocks: 2001:df3:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Apr 7 04:37:56 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d48a24-6e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:0d:f8:50:8f:4e:ca:b4:19:13:01:56:b5: 09:e6:d1:d0:2f:c3:26:ca:19:b8:c7:73:ca:a8:db: 29:41:00:4f:24:55:a5:f8:92:66:c5:af:84:86:7e: e6:69:c3:ff:35:a5:1e:53:98:cc:e5:b8:92:15:62: b1:60:1c:2e:fd:05:80:db:f0:58:0b:51:d9:2f:30: cd:01:b1:71:0a:43:6b:a6:94:53:7f:1b:3c:95:d8: b0:f8:b7:2f:dd:49:8b:f3:f5:68:ad:1d:92:70:a4: 89:95:f0:e2:70:cd:c6:39:9d:89:ff:7f:4f:f2:ba: cf:25:0b:8f:76:80:5a:ec:fa:90:b5:e0:33:3f:8a: 0f:7a:c2:84:04:50:f9:b3:30:86:ea:44:8b:15:14: 49:ae:8f:82:85:a1:3e:16:6f:47:ec:23:77:be:08: 93:c5:56:8e:eb:cb:0f:c1:1d:a8:0f:25:33:80:56: e6:58:3b:77:df:b7:3b:66:9c:6f:69:36:27:3c:bf: c1:62:15:b8:91:8e:e1:00:14:24:d6:54:25:a1:46: 79:4d:39:53:7f:50:54:ef:62:3e:57:7e:78:0a:1a: 7a:93:83:5f:2c:6c:d9:f4:c9:a0:19:a8:f0:42:d6: c0:67:f3:2c:b4:cf:04:0b:cd:9a:cf:1a:c4:27:31: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D9:68:E2:84:35:56:DB:43:72:1A:80:F4:32:94:AD:E9:EA:CB:86 X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/4C798C5AD5DD11EEA5B1C711C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 4a:29:50:60:79:e1:91:41:08:84:b9:6a:ca:e6:04:4f:15:4a: 95:45:c8:92:b7:f3:4f:69:59:4c:41:16:c1:af:66:46:28:b8: 33:e2:37:1a:11:33:89:bf:fc:81:e0:35:46:29:b3:de:45:24: 00:c6:92:19:36:90:3d:ce:69:d2:d6:11:6b:2d:64:0b:a5:ff: fd:8a:55:84:83:09:0f:56:01:45:79:85:b6:9a:24:6e:b0:20: 61:a4:c6:14:ce:07:18:e7:1f:f3:0f:6e:03:33:fe:a1:bc:d0: 94:67:a4:b3:66:84:fe:49:0c:a7:d4:9f:d2:1d:d5:85:de:42: fb:82:e4:21:07:0b:ac:94:22:4e:e1:d0:d0:2f:13:a3:a5:91: 95:2d:c2:c8:5a:c1:51:27:3b:3d:d1:6c:c0:d4:48:cf:fb:c6: e9:e1:f4:7b:71:06:b8:10:54:7f:ea:85:3f:31:57:9b:03:55: b6:ad:47:5a:db:05:00:5d:d5:3a:30:43:55:55:99:85:e3:40: 02:8c:32:0f:11:3f:62:50:cc:ad:29:c8:c3:79:b4:ca:cf:35: 02:4e:52:9d:9b:d8:68:51:c8:48:09:7e:f2:ef:70:78:22:b6: 9e:e5:e4:95:9c:ec:75:2d:1e:ab:52:76:25:b7:b7:20:39:87: f5:e9:3b:82 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjYwNDA3MDQzNzU2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ0OGEyNC02ZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUAN+FCPTsq0GRMBVrUJ5tHQL8Mmyhm4x3PKqNspQQBPJFWl+JJmxa+Ehn7m acP/NaUeU5jM5biSFWKxYBwu/QWA2/BYC1HZLzDNAbFxCkNrppRTfxs8ldiw+Lcv 3UmL8/VorR2ScKSJlfDicM3GOZ2J/39P8rrPJQuPdoBa7PqQteAzP4oPesKEBFD5 szCG6kSLFRRJro+ChaE+Fm9H7CN3vgiTxVaO68sPwR2oDyUzgFbmWDt337c7Zpxv aTYnPL/BYhW4kY7hABQk1lQloUZ5TTlTf1BU72I+V354Chp6k4NfLGzZ9MmgGajw QtbAZ/MstM8EC82azxrEJzFuWwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFLzZaOKE NVbbQ3IagPQylK3p6suGMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwNjgvNzgxRTdEQzRENTE2MTFFRUIzNUU2QTYwQzRGOUFFMDIvNEM3OThDNUFE NUREMTFFRUE1QjFDNzExQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN84DAMA0GCSqGSIb3DQEBCwUAA4IBAQBKKVBgeeGRQQiEuWrK 5gRPFUqVRciSt/NPaVlMQRbBr2ZGKLgz4jcaETOJv/yB4DVGKbPeRSQAxpIZNpA9 zmnS1hFrLWQLpf/9ilWEgwkPVgFFeYW2miRusCBhpMYUzgcY5x/zD24DM/6hvNCU Z6SzZoT+SQyn1J/SHdWF3kL7guQhBwuslCJO4dDQLxOjpZGVLcLIWsFRJzs90WzA 1EjP+8bp4fR7cQa4EFR/6oU/MVebA1W2rUda2wUAXdU6MENVVZmF40ACjDIPET9i UMytKcjDebTKzzUCTlKdm9hoUchICX7y73B4Irae5eSVnOx1LR6rUnYlt7cgOYf1 6TuC -----END CERTIFICATE-----Generated at Fri Apr 17 15:27:15 2026 by rpki-client