$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/74F89580380611F1BFB0A69592833773.roa File: 74F89580380611F1BFB0A69592833773.roa (raw, json) Hash identifier: n/MqiU5VgC6av3CWTkFIHhSSjgNKYqsDRi2BiUC7EzQ= Subject key identifier: BA:90:2B:BB:41:C8:7D:67:EC:09:1A:AC:46:63:CB:9B:34:73:ED:51 Certificate issuer: /CN=A91ECE92/serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Certificate serial: 02 Authority key identifier: 54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/74F89580380611F1BFB0A69592833773.roa Signing time: Tue 14 Apr 2026 13:33:01 +0000 ROA not before: Tue 14 Apr 2026 13:33:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133405 IP address blocks: 163.128.219.0/24 maxlen: 24 2001:df6:edc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE92, serialNumber=540AEBA0B607405769DE44D76B7E310BF5692172 Validity Not Before: Apr 14 13:33:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69de420d-fa34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:33:3a:2e:85:5a:d4:68:b8:5e:ed:0d:af: 74:d9:c6:1f:a9:1f:27:39:71:21:93:1b:a6:b9:5b: 29:85:ae:5c:42:ec:03:fe:6e:bf:49:cd:16:8e:50: ac:d9:89:f5:64:84:9e:20:22:8c:27:41:49:e5:5f: d8:c8:62:d0:24:57:39:11:52:a1:cc:62:47:ce:5d: dd:f6:8b:58:72:d1:de:83:76:e0:48:31:f1:76:40: 3f:4e:58:2a:b4:64:b8:29:cd:c4:cf:cb:31:1c:78: 2a:09:70:49:e2:9f:36:b6:50:9c:8c:51:82:c4:ec: f3:be:a3:51:ac:a8:9b:34:36:ff:93:09:49:77:f0: 75:1e:27:ed:49:05:c9:17:fb:ac:cf:96:32:63:da: 9e:68:04:0e:49:71:f0:6d:bb:06:0c:a0:b0:17:8b: 33:b8:39:d8:ba:82:ab:d9:9c:26:3f:72:d9:c8:23: cb:f1:17:2a:42:b0:6f:7f:c0:45:f3:89:2b:37:99: 41:4c:aa:96:5a:40:54:67:bc:3f:08:68:6c:2c:29: 22:ad:b8:1d:c0:aa:72:53:02:4f:df:3f:4f:4e:0e: 0a:0e:cd:33:bf:9b:d3:55:47:53:67:bf:0b:6c:4d: 6d:09:7e:3f:bc:9d:04:56:d8:1d:ac:49:65:c3:4e: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:2B:BB:41:C8:7D:67:EC:09:1A:AC:46:63:CB:9B:34:73:ED:51 X509v3 Authority Key Identifier: keyid:54:0A:EB:A0:B6:07:40:57:69:DE:44:D7:6B:7E:31:0B:F5:69:21:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/VArroLYHQFdp3kTXa34xC_VpIXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VArroLYHQFdp3kTXa34xC_VpIXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE92/80B9C16A380511F181A3677692833773/74F89580380611F1BFB0A69592833773.roa sbgp-ipAddrBlock: critical IPv4: 163.128.219.0/24 IPv6: 2001:df6:edc0::/48 Signature Algorithm: sha256WithRSAEncryption a3:c0:bf:c2:9e:71:48:41:38:d3:0a:0d:33:09:c1:38:0a:c1: 57:6f:4c:a6:47:26:18:54:08:76:d9:bc:22:c3:9e:83:da:50: 79:45:ca:3b:10:d9:8b:ef:00:6f:58:18:b9:03:24:2a:67:8b: 0a:75:94:35:30:e9:f4:32:bf:52:14:18:09:8e:5e:20:2d:53: 1e:7c:67:5f:eb:57:2e:76:a0:c4:bc:5e:42:67:b1:6b:da:58: 1c:89:33:5f:f5:01:97:90:f3:3d:90:72:64:10:5c:5b:ea:f0: 2e:bc:57:f0:bf:41:eb:14:96:bb:eb:a7:ac:d6:22:43:f5:d5: 2d:ab:d7:58:dd:cb:e0:1e:2e:1e:eb:f2:36:2a:ca:2e:49:2c: 78:ec:40:37:3f:da:ef:32:72:c2:0c:d0:d8:6d:07:90:5e:08: 6b:c8:a2:b0:58:f6:bf:5f:82:7b:1e:3d:6c:85:e2:30:ee:9e: d8:55:c4:d5:3b:0c:47:c1:91:61:3a:56:6e:d5:39:96:a2:8f: 2f:c3:4c:14:d2:7c:f0:7d:bb:aa:04:a5:29:c8:4b:04:bf:47: 81:d6:21:1e:ab:26:9f:b8:6f:5a:b0:c7:7d:0f:78:97:b9:8d: 54:76:c2:1c:43:8e:0a:e8:3e:78:db:d5:76:6b:43:14:61:ab: 4e:4e:81:50 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0U5MjExMC8GA1UEBRMoNTQwQUVCQTBCNjA3NDA1NzY5REU0NEQ3NkI3RTMxMEJG NTY5MjE3MjAeFw0yNjA0MTQxMzMzMDFaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZGU0MjBkLWZhMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwETM6LoVa1Gi4Xu0Nr3TZxh+pHyc5cSGTG6a5WymFrlxC7AP+br9JzRaOUKzZ ifVkhJ4gIownQUnlX9jIYtAkVzkRUqHMYkfOXd32i1hy0d6DduBIMfF2QD9OWCq0 ZLgpzcTPyzEceCoJcEninza2UJyMUYLE7PO+o1GsqJs0Nv+TCUl38HUeJ+1JBckX +6zPljJj2p5oBA5JcfBtuwYMoLAXizO4Odi6gqvZnCY/ctnII8vxFypCsG9/wEXz iSs3mUFMqpZaQFRnvD8IaGwsKSKtuB3AqnJTAk/fP09ODgoOzTO/m9NVR1Nnvwts TW0Jfj+8nQRW2B2sSWXDTibvAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUupAru0HI fWfsCRqsRmPLmzRz7VEwHwYDVR0jBBgwFoAUVArroLYHQFdp3kTXa34xC/VpIXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDRTkyLzgwQjlDMTZBMzgw NTExRjE4MUEzNjc3NjkyODMzNzczL1ZBcnJvTFlIUUZkcDNrVFhhMzR4Q19WcElY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkFycm9MWUhRRmRwM2tUWGEzNHhDX1ZwSVhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0U5Mi84MEI5QzE2QTM4MDUxMUYxODFBMzY3NzY5MjgzMzc3My83NEY4OTU4MDM4 MDYxMUYxQkZCMEE2OTU5MjgzMzc3My5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBACjgNswDwQCAAIwCQMHACABDfbtwDANBgkqhkiG9w0BAQsFAAOCAQEA o8C/wp5xSEE40woNMwnBOArBV29MpkcmGFQIdtm8IsOeg9pQeUXKOxDZi+8Ab1gY uQMkKmeLCnWUNTDp9DK/UhQYCY5eIC1THnxnX+tXLnagxLxeQmexa9pYHIkzX/UB l5DzPZByZBBcW+rwLrxX8L9B6xSWu+unrNYiQ/XVLavXWN3L4B4uHuvyNirKLkks eOxANz/a7zJywgzQ2G0HkF4Ia8iisFj2v1+Cex49bIXiMO6e2FXE1TsMR8GRYTpW btU5lqKPL8NMFNJ88H27qgSlKchLBL9HgdYhHqsmn7hvWrDHfQ94l7mNVHbCHEOO Cug+eNvVdmtDFGGrTk6BUA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:11:29 2026 by rpki-client