$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa File: 2CA96408FD8811EF9404CD48C4F9AE02.roa (raw, json) Hash identifier: 1TDI2R5MKcilPYMjg8q2DIOpJANk9e/u2LmbUXePKOw= Subject key identifier: 17:84:72:08:A8:83:69:15:9E:93:E1:49:D7:5D:17:CE:98:99:16:40 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: D3 Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa Signing time: Sat 11 Apr 2026 06:45:21 +0000 ROA not before: Sat 11 Apr 2026 06:45:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153681 IP address blocks: 163.223.60.0/23 maxlen: 24 2001:df5:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: Apr 11 06:45:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d9ee00-1704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:8e:b4:06:1d:0c:38:fd:dd:f5:7d:87:f0: a8:7c:9b:8e:01:c4:f4:b3:6c:02:b9:ff:8c:c0:e2: dd:7d:d0:a9:f7:e1:b8:b8:15:82:8b:05:44:54:a4: f8:68:c3:d3:c1:47:38:33:94:db:9d:72:0e:ed:20: 97:67:34:dc:68:a8:43:5c:41:05:61:d6:f2:e9:23: 3c:0a:4f:f3:c1:75:3c:c3:d1:c2:9c:f3:ed:56:87: 63:c3:c2:3b:6f:b8:f6:75:c6:2e:16:23:84:64:44: 94:7d:39:8e:49:a4:7d:3b:0c:9b:8f:fe:01:e6:e7: 17:c7:ac:48:d5:94:0a:09:c2:ae:b5:d3:e7:41:0d: 10:8f:e5:17:ec:ee:15:f5:b6:e8:30:b3:c9:f9:fb: 3d:e2:25:7a:d9:76:f7:0b:7f:c4:e4:ca:f0:9a:34: 63:bd:51:67:fc:a6:c9:0a:ea:a0:06:27:d6:89:e4: 5e:3f:a4:cc:dd:e0:bb:b0:88:a0:df:9d:c9:2c:8a: 0d:40:30:4f:98:39:86:7d:59:ef:2e:2e:d8:33:a0: 5e:26:56:94:b1:5e:72:88:60:2f:f8:3f:44:36:e9: 1a:48:a9:9b:f5:a8:1b:e0:06:4b:8b:2b:82:53:88: 10:de:b4:2d:2c:57:ef:ae:2f:66:c6:2d:aa:cd:83: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:84:72:08:A8:83:69:15:9E:93:E1:49:D7:5D:17:CE:98:99:16:40 X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.223.60.0/23 IPv6: 2001:df5:3440::/48 Signature Algorithm: sha256WithRSAEncryption ab:2c:df:66:2c:10:04:62:7f:50:66:95:c3:1c:1f:14:77:df: 1b:10:8d:f5:bc:81:23:1e:78:ec:60:6f:46:c7:72:a2:0e:62: 79:b4:d4:a3:d3:e1:9f:4b:7b:cb:89:4f:b0:37:d9:7c:d8:51: 95:1a:d4:0f:3f:d3:35:ea:44:6e:61:51:b8:88:b5:b3:e2:cb: 24:7c:8c:70:a1:9a:33:5c:0c:c9:75:fa:4e:55:8b:48:a5:90: 3f:9a:d9:ba:47:1f:b5:47:49:74:ae:2b:15:13:f1:20:08:b8: 74:dc:fd:ae:81:90:39:ac:dd:4c:65:2c:79:1d:ae:2e:ca:1e: e5:55:54:c3:23:36:ec:3e:2b:c7:6a:a5:63:3b:0b:bd:22:a1: 3c:00:61:16:9e:a1:36:a7:0a:f2:bb:09:25:4d:47:9d:8c:80: 8b:5d:d2:08:cb:6d:f3:4a:92:f2:2b:ed:14:f7:de:07:d2:b1: e2:e2:fe:77:a3:0d:a6:8f:87:a1:6a:f8:3c:b7:7c:a0:f9:fc: 1c:27:75:71:7f:6c:ec:32:42:28:27:b6:14:61:04:76:a3:c5: 6c:34:24:d7:b4:0e:21:08:20:49:6b:ae:b1:e5:67:c8:99:a6: 85:a0:a3:38:89:0d:4c:a3:ae:76:bb:97:f0:f9:f9:37:b5:2a: 17:c8:4b:97 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU0Q0QxMTAvBgNVBAUTKEUxNjNGMEZFNTRGMTc5QUY0QzZDMDk3MDk4RkVGQkUy RDQzODVCMTkwHhcNMjYwNDExMDY0NTIxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5ZWUwMC0xNzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvWOtAYdDDj93fV9h/CofJuOAcT0s2wCuf+MwOLdfdCp9+G4uBWCiwVEVKT4 aMPTwUc4M5TbnXIO7SCXZzTcaKhDXEEFYdby6SM8Ck/zwXU8w9HCnPPtVodjw8I7 b7j2dcYuFiOEZESUfTmOSaR9Owybj/4B5ucXx6xI1ZQKCcKutdPnQQ0Qj+UX7O4V 9bboMLPJ+fs94iV62Xb3C3/E5MrwmjRjvVFn/KbJCuqgBifWieReP6TM3eC7sIig 353JLIoNQDBPmDmGfVnvLi7YM6BeJlaUsV5yiGAv+D9ENukaSKmb9agb4AZLiyuC U4gQ3rQtLFfvri9mxi2qzYPA5wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBeEcgio g2kVnpPhSdddF86YmRZAMB8GA1UdIwQYMBaAFOFj8P5U8XmvTGwJcJj+++LUOFsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTRDRC9EMkUyQ0E3Q0ZE ODcxMUVGQjY2MjRBMjhDNEY5QUUwMi80V1B3X2xUeGVhOU1iQWx3bVA3NzR0UTRX eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU0Q0QvRDJFMkNBN0NGRDg3MTFFRkI2NjI0QTI4QzRGOUFFMDIvMkNBOTY0MDhG RDg4MTFFRjk0MDRDRDQ4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBo988MA8EAgACMAkDBwAgAQ31NEAwDQYJKoZIhvcNAQELBQADggEB AKss32YsEARif1BmlcMcHxR33xsQjfW8gSMeeOxgb0bHcqIOYnm01KPT4Z9Le8uJ T7A32XzYUZUa1A8/0zXqRG5hUbiItbPiyyR8jHChmjNcDMl1+k5Vi0ilkD+a2bpH H7VHSXSuKxUT8SAIuHTc/a6BkDms3UxlLHkdri7KHuVVVMMjNuw+K8dqpWM7C70i oTwAYRaeoTanCvK7CSVNR52MgItd0gjLbfNKkvIr7RT33gfSseLi/nejDaaPh6Fq +Dy3fKD5/BwndXF/bOwyQignthRhBHajxWw0JNe0DiEIIElrrrHlZ8iZpoWgoziJ DUyjrna7l/D5+Te1KhfIS5c= -----END CERTIFICATE-----Generated at Fri Apr 17 23:36:46 2026 by rpki-client