$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa File: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (raw, json) Hash identifier: 1HlLCwNQIyozJV4R6Hnm8QJXf/uITnPoAyb7nipvwt4= Subject key identifier: 32:C8:1E:7F:5C:32:57:78:9E:A7:70:1B:38:22:96:E1:1A:F1:05:F7 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 19CA Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:50:38 +0000 ROA not before: Fri 20 Feb 2026 17:14:46 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 131298 IP address blocks: 2401:1c00:3080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6602 (0x19ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Feb 20 17:14:46 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a48a7e-1a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:b4:29:90:6a:b9:3c:78:4a:2a:ba:8b:06: f3:28:9f:42:cc:94:de:eb:89:fe:5f:7f:ce:14:9e: 7d:ed:64:0e:49:62:bb:50:ce:92:46:f0:c6:5e:93: 0c:2d:b6:66:cf:f6:10:50:6d:cc:4c:6e:2d:72:08: 0a:9d:4d:b1:88:d3:58:e6:e4:49:d2:5c:ad:3e:25: 4f:24:f9:db:cb:eb:c7:d7:0b:78:e6:04:39:fb:07: 1f:7c:17:9a:1d:6f:61:3b:92:67:ec:09:b5:37:57: 65:b3:cf:ea:ac:21:cd:0e:ef:c2:a3:96:aa:43:20: 11:e5:23:eb:8b:63:70:73:32:e9:7f:95:7e:62:40: 3b:b3:c4:ba:68:af:6d:4d:d3:01:99:82:6b:dc:4f: 08:31:d6:73:b0:ea:be:e8:dc:39:dc:33:06:20:2e: 09:35:ef:55:6d:be:2a:e2:24:aa:f9:eb:23:14:26: 90:f1:ec:8b:2e:95:63:27:91:b2:cd:8f:c9:ac:cf: 03:77:e7:e8:5f:05:a7:23:6c:09:6f:01:f6:21:4a: ed:5d:2d:5e:09:d0:46:43:d7:ae:6a:db:67:8f:3b: 02:f4:a0:6c:c4:b3:00:dc:4b:11:20:40:0c:c1:fe: 38:c6:98:15:ed:b9:27:77:0a:8e:fe:f8:67:07:09: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C8:1E:7F:5C:32:57:78:9E:A7:70:1B:38:22:96:E1:1A:F1:05:F7 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:1c00:3080::/48 Signature Algorithm: sha256WithRSAEncryption 63:11:36:d4:bf:d5:2d:aa:b0:94:2d:18:15:de:96:b2:4a:11: 6f:d1:c4:99:68:b5:3f:56:a1:c2:74:24:9d:04:22:ae:67:8e: a8:11:23:f0:cc:ed:bf:48:2d:a6:f0:41:00:07:c3:34:61:f2: 0e:67:c5:af:40:da:f2:44:38:15:45:18:bf:08:d2:60:f4:73: 86:29:ad:58:96:6b:3a:37:68:f8:4e:2a:e5:b5:59:a8:24:00: 6f:b5:e6:3c:5e:da:8b:cd:b9:ad:12:f8:d2:eb:e2:df:b3:7b: fc:18:ff:d7:db:3c:18:40:cc:a2:ca:a8:ae:1b:d5:7d:5b:4f: 99:c6:1a:58:28:7a:a3:0b:98:26:08:3c:8f:a7:fe:21:8d:92: 61:14:04:d4:ae:15:b9:74:0f:5d:40:14:7e:ba:52:af:1a:7d: ce:f9:90:37:9a:74:76:ef:74:c3:7e:1c:82:61:ca:db:ac:26: 1c:71:bd:c3:72:2d:d7:3e:c7:2a:c0:e6:6c:b5:10:80:85:66: af:37:be:0c:36:9c:95:4f:bf:1e:bb:3c:ba:7a:81:2f:b7:eb: 5d:1a:d1:0c:7d:83:58:87:8e:7a:d6:f6:3b:f7:66:1a:d7:b1: 50:1d:a4:a4:20:79:bb:9d:65:b6:39:93:4d:9f:8d:d8:7b:c9: 61:8a:c5:43 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICGcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjYwMjIwMTcxNDQ2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGE3ZS0xYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IK0KZBquTx4Siq6iwbzKJ9CzJTe64n+X3/OFJ597WQOSWK7UM6SRvDGXpMM LbZmz/YQUG3MTG4tcggKnU2xiNNY5uRJ0lytPiVPJPnby+vH1wt45gQ5+wcffBea HW9hO5Jn7Am1N1dls8/qrCHNDu/Co5aqQyAR5SPri2NwczLpf5V+YkA7s8S6aK9t TdMBmYJr3E8IMdZzsOq+6Nw53DMGIC4JNe9Vbb4q4iSq+esjFCaQ8eyLLpVjJ5Gy zY/JrM8Dd+foXwWnI2wJbwH2IUrtXS1eCdBGQ9euattnjzsC9KBsxLMA3EsRIEAM wf44xpgV7bkndwqO/vhnBwmP1wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDLIHn9c Mld4nqdwGzgiluEa8QX3MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvNDk5NkRCRDZG QzYxMTFFQTlCRThBQjFBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAEcADCAMA0GCSqGSIb3DQEBCwUAA4IBAQBjETbUv9UtqrCULRgV 3payShFv0cSZaLU/VqHCdCSdBCKuZ46oESPwzO2/SC2m8EEAB8M0YfIOZ8WvQNry RDgVRRi/CNJg9HOGKa1Ylms6N2j4TirltVmoJABvteY8XtqLzbmtEvjS6+Lfs3v8 GP/X2zwYQMyiyqiuG9V9W0+ZxhpYKHqjC5gmCDyPp/4hjZJhFATUrhW5dA9dQBR+ ulKvGn3O+ZA3mnR273TDfhyCYcrbrCYccb3Dci3XPscqwOZstRCAhWavN74MNpyV T78euzy6eoEvt+tdGtEMfYNYh4561vY792Ya17FQHaSkIHm7nWW2OZNNn43Ye8lh isVD -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:25 2026 by rpki-client