$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6E1C49FA031811F1BA97C916183D8C67.roa File: 6E1C49FA031811F1BA97C916183D8C67.roa (raw, json) Hash identifier: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY= Subject key identifier: 87:BE:51:63:8F:B5:55:C1:9B:84:45:AC:0B:4F:74:6C:5C:D8:22:09 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 0249 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6E1C49FA031811F1BA97C916183D8C67.roa Signing time: Wed 01 Apr 2026 11:36:36 +0000 ROA not before: Wed 01 Apr 2026 11:36:36 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 2914 IP address blocks: 185.254.241.0/24 maxlen: 24 213.139.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Apr 1 11:36:36 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69cd0344-131b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0b:01:fb:48:60:d3:3f:92:9b:e3:5c:43:3b: e2:31:84:0c:34:2a:f3:f5:ca:1e:cd:15:26:45:4f: 4a:d7:7c:11:54:7e:5f:c8:d9:ec:72:7b:f8:07:fa: 77:7d:72:72:34:fd:bf:6f:1d:2d:98:66:84:b4:5c: 01:04:33:1f:b1:ec:be:33:bf:ee:11:a5:c5:3a:a8: 95:31:4d:7e:11:d9:e4:09:0e:11:86:be:b2:de:2f: 21:81:14:4e:65:ed:07:6f:ac:f1:0d:cd:a6:14:b6: 36:c4:01:cc:0a:a6:f7:eb:44:22:04:cf:e6:fa:5d: e5:09:3c:2c:0f:e2:16:06:b6:64:85:a2:d7:4c:c4: a1:28:3b:37:99:7f:0c:39:10:4a:66:71:f4:8e:40: fc:0c:58:47:38:40:40:cc:41:c1:e6:1c:14:73:a1: 95:85:6e:4c:29:1e:b8:f6:d7:ce:ec:76:8f:3d:7b: e6:f2:ff:aa:5f:1e:16:f1:4c:ed:b0:d5:87:12:f9: b4:f2:82:3e:b7:d9:87:15:c9:ff:5e:6b:1f:79:b8: 19:d4:e5:36:5d:bc:b7:45:d2:54:c7:2a:14:27:aa: 7e:e1:34:1b:31:5a:04:95:d2:5e:7a:76:10:4d:78: 81:06:f5:16:7f:f3:9c:fb:ad:d0:10:37:a5:f8:48: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BE:51:63:8F:B5:55:C1:9B:84:45:AC:0B:4F:74:6C:5C:D8:22:09 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6E1C49FA031811F1BA97C916183D8C67.roa sbgp-ipAddrBlock: critical IPv4: 185.254.241.0/24 213.139.234.0/24 Signature Algorithm: sha256WithRSAEncryption b4:98:e1:8c:e2:00:ec:d9:e6:79:33:ce:7d:db:c9:00:2e:24: 0f:b1:90:16:95:71:b3:99:92:ff:fa:01:0a:39:c1:dd:58:27: 73:4e:05:c6:47:e3:77:eb:af:89:36:f6:a1:84:4c:fb:09:bb: a2:22:71:5e:f3:aa:2c:9f:25:3c:1d:95:f8:1c:5f:1c:be:7a: 5b:01:76:13:05:67:18:b6:30:47:91:d9:17:80:54:22:3e:20: a1:28:e2:8f:84:13:af:83:a4:c1:03:0b:7d:05:3e:af:b2:8e: cc:1e:ad:69:06:04:04:81:da:79:c6:9f:92:62:f6:ba:c1:96: 74:eb:d4:13:c7:6e:84:38:27:48:5e:fc:71:7c:ce:41:5a:77: b0:e1:32:7c:c2:ad:dc:1b:eb:c4:c0:68:32:14:b4:64:4a:c4: 3d:83:03:a3:1f:ca:de:5d:22:ed:4f:56:32:b8:87:d9:0e:ae: 4c:1f:c9:e3:3d:74:7c:96:ae:bd:71:9a:21:c4:a4:b6:f3:e7: d5:4c:bc:a5:40:e1:9c:d9:c3:94:80:b3:c5:f4:50:94:2d:11: 4c:c1:43:30:10:7d:65:56:02:28:64:fd:d2:90:88:a2:9c:30: 16:b0:ba:1d:67:83:41:1f:da:bd:eb:ff:59:19:1e:b0:76:7b: fa:83:83:fa -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjYwNDAxMTEzNjM2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNkMDM0NC0xMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywsB+0hg0z+Sm+NcQzviMYQMNCrz9coezRUmRU9K13wRVH5fyNnscnv4B/p3 fXJyNP2/bx0tmGaEtFwBBDMfsey+M7/uEaXFOqiVMU1+EdnkCQ4Rhr6y3i8hgRRO Ze0Hb6zxDc2mFLY2xAHMCqb360QiBM/m+l3lCTwsD+IWBrZkhaLXTMShKDs3mX8M ORBKZnH0jkD8DFhHOEBAzEHB5hwUc6GVhW5MKR649tfO7HaPPXvm8v+qXx4W8Uzt sNWHEvm08oI+t9mHFcn/XmsfebgZ1OU2Xby3RdJUxyoUJ6p+4TQbMVoEldJeenYQ TXiBBvUWf/Oc+63QEDel+Eg3mQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIe+UWOP tVXBm4RFrAtPdGxc2CIJMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDMvNjI5RThCMjAzQjIzMTFFRUE0M0IwMjE5QzRGOUFFMDIvNkUxQzQ5RkEw MzE4MTFGMUJBOTdDOTE2MTgzRDhDNjcucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAuf7xAwQA1YvqMA0GCSqGSIb3DQEBCwUAA4IBAQC0mOGM4gDs2eZ5 M85928kALiQPsZAWlXGzmZL/+gEKOcHdWCdzTgXGR+N366+JNvahhEz7CbuiInFe 86osnyU8HZX4HF8cvnpbAXYTBWcYtjBHkdkXgFQiPiChKOKPhBOvg6TBAwt9BT6v so7MHq1pBgQEgdp5xp+SYva6wZZ069QTx26EOCdIXvxxfM5BWnew4TJ8wq3cG+vE wGgyFLRkSsQ9gwOjH8reXSLtT1YyuIfZDq5MH8njPXR8lq69cZohxKS28+fVTLyl QOGc2cOUgLPF9FCULRFMwUMwEH1lVgIoZP3SkIiinDAWsLodZ4NBH9q96/9ZGR6w dnv6g4P6 -----END CERTIFICATE-----Generated at Mon Apr 6 15:13:51 2026 by rpki-client