$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/0FD2DB3A109C11F08D6B6B19C4F9AE02.roa File: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (raw, json) Hash identifier: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY= Subject key identifier: 68:07:E5:E8:48:C5:C9:4C:88:D7:82:19:0A:90:0B:D7:A1:04:88:FF Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0B3F Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/0FD2DB3A109C11F08D6B6B19C4F9AE02.roa Signing time: Thu 26 Mar 2026 19:24:52 +0000 ROA not before: Thu 26 Mar 2026 19:24:52 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 140224 IP address blocks: 2001:218:2004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: Mar 26 19:24:52 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c58804-e4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:da:0e:c7:85:e2:6a:b1:dc:5a:00:06:db: 60:f3:cc:1e:47:f3:ff:d4:91:8e:7b:e2:fc:34:d0: db:c4:5a:d1:9e:42:eb:36:b8:01:ca:14:ea:fb:23: 10:b2:80:ea:dd:cb:2d:2f:3c:4c:85:6d:f6:eb:41: 10:33:84:d2:22:0e:4f:f1:66:43:b0:6b:be:db:bb: f8:75:00:98:84:dd:ab:df:82:e8:61:67:38:25:e6: 7b:a1:70:5a:39:d7:59:4e:af:ad:2f:5c:6a:57:9b: 47:ea:10:58:8c:a7:ec:88:36:57:64:fa:36:45:46: b9:35:4e:29:65:26:1c:b6:d0:e1:4e:4a:9d:83:a3: 62:cc:17:6a:1d:0f:1a:44:4e:08:7f:11:21:09:a9: a2:70:7a:a2:21:0b:37:ea:f0:0a:73:32:ff:d1:85: b8:39:d9:e8:0a:bb:50:3f:d0:26:00:04:a5:f0:e2: ee:a2:bb:d0:f0:0e:db:fe:75:97:d4:e6:b8:36:30: fb:74:e7:8a:87:17:22:03:df:87:7c:99:f9:80:bf: f0:31:c6:7b:6d:2b:7b:02:3c:81:42:3f:2e:b6:3d: 0f:16:0f:66:6a:ff:b2:13:8a:bd:31:23:d2:f3:ae: 7d:9f:36:cf:cf:f2:b8:68:26:5b:08:c9:91:74:0a: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:07:E5:E8:48:C5:C9:4C:88:D7:82:19:0A:90:0B:D7:A1:04:88:FF X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/0FD2DB3A109C11F08D6B6B19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:218:2004::/48 Signature Algorithm: sha256WithRSAEncryption 86:6c:bf:c9:95:fe:8d:88:1b:6d:56:a6:97:04:0f:04:86:b1: 09:ee:bd:1f:eb:f4:a9:40:d0:65:1f:27:ba:08:f4:22:83:dd: a2:e9:32:c3:23:27:37:1e:53:80:87:b0:69:df:85:6c:2e:70: 55:3f:da:3a:aa:67:98:4d:02:66:b4:da:63:73:e2:df:e4:84: 93:dd:72:7d:e0:b4:9b:95:18:25:a6:73:5a:be:fe:28:cf:c2: 77:88:83:57:50:7b:cd:7c:83:53:ed:91:44:5c:37:ac:06:1f: 5f:37:13:25:e6:dd:c5:4d:13:13:59:ca:48:c0:e1:20:e2:30: 91:bc:33:49:6c:42:12:a1:70:c1:51:29:ad:b8:00:63:02:91: 13:48:f1:8a:54:3f:f2:c2:4b:4c:6b:10:cd:16:8b:4f:ff:63: 14:28:54:0f:7e:7a:b8:1a:79:ab:43:23:73:7c:52:7c:ad:29: cc:ca:73:a0:76:15:97:02:32:72:3f:07:a5:7c:da:27:4a:59: 20:b4:c9:50:d3:3e:f4:88:bc:69:9a:75:6d:bb:af:f7:c2:e9: 43:44:92:6f:cc:1d:b9:84:e0:b5:c4:a7:e7:5f:0e:6d:d0:44: 50:2a:46:6a:c2:93:b6:d0:d9:21:02:b0:b1:de:dd:6a:5d:5c: 89:6d:0b:18 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjYwMzI2MTkyNDUyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1ODgwNC1lNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcjaDseF4mqx3FoABttg88weR/P/1JGOe+L8NNDbxFrRnkLrNrgByhTq+yMQ soDq3cstLzxMhW3260EQM4TSIg5P8WZDsGu+27v4dQCYhN2r34LoYWc4JeZ7oXBa OddZTq+tL1xqV5tH6hBYjKfsiDZXZPo2RUa5NU4pZSYcttDhTkqdg6NizBdqHQ8a RE4IfxEhCamicHqiIQs36vAKczL/0YW4OdnoCrtQP9AmAASl8OLuorvQ8A7b/nWX 1Oa4NjD7dOeKhxciA9+HfJn5gL/wMcZ7bSt7AjyBQj8utj0PFg9mav+yE4q9MSPS 8659nzbPz/K4aCZbCMmRdArKZwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFGgH5ehI xclMiNeCGQqQC9ehBIj/MB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvMEZEMkRCM0Ex MDlDMTFGMDhENkI2QjE5QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAECGCAEMA0GCSqGSIb3DQEBCwUAA4IBAQCGbL/Jlf6NiBttVqaX BA8EhrEJ7r0f6/SpQNBlHye6CPQig92i6TLDIyc3HlOAh7Bp34VsLnBVP9o6qmeY TQJmtNpjc+Lf5IST3XJ94LSblRglpnNavv4oz8J3iINXUHvNfINT7ZFEXDesBh9f NxMl5t3FTRMTWcpIwOEg4jCRvDNJbEISoXDBUSmtuABjApETSPGKVD/ywktMaxDN FotP/2MUKFQPfnq4GnmrQyNzfFJ8rSnMynOgdhWXAjJyPwelfNonSlkgtMlQ0z70 iLxpmnVtu6/3wulDRJJvzB25hOC1xKfnXw5t0ERQKkZqwpO20NkhArCx3t1qXVyJ bQsY -----END CERTIFICATE-----Generated at Tue Mar 31 00:19:57 2026 by rpki-client