$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa File: 2A67700A9B4411EFA1772153C4F9AE02.roa (raw, json) Hash identifier: JDvNYbjYgzAUv5kVDBgi2KEkPnPhEG9d4dMtXb+ev6I= Subject key identifier: 4A:FF:E7:20:07:50:05:6C:9D:0C:DE:DD:9F:DC:CF:AA:13:69:94:42 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 084F Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa Signing time: Sat 16 May 2026 21:26:07 +0000 ROA not before: Sat 16 May 2026 21:26:07 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 23686 IP address blocks: 51.162.48.0/24 maxlen: 24 51.162.49.0/24 maxlen: 24 51.162.50.0/23 maxlen: 23 51.162.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 21:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: May 16 21:26:07 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a08e0ef-f5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:79:c7:98:80:e1:e5:b9:cd:96:16:d9:16:ab: c7:2e:1f:95:6b:fa:98:54:bd:50:d6:20:02:f2:ae: 0f:b4:b2:63:c9:64:e1:e2:ae:8b:19:8a:0f:3b:76: 58:ff:21:19:e5:1b:d0:23:f5:d1:2c:6e:5f:66:f3: 9b:db:b8:dd:95:d1:bc:96:bb:21:41:2e:db:61:b1: 01:4e:1e:f5:ec:91:2b:63:cf:49:8a:c9:86:7d:2c: ff:f8:f3:0c:4c:06:e2:23:5f:ce:15:5e:be:1a:13: 2d:37:eb:82:df:77:13:25:63:c6:57:c0:b9:20:72: 96:24:00:40:7b:8a:ee:c4:ae:8e:ed:31:5e:d6:55: b8:bb:51:61:fb:19:7a:cb:cd:0e:65:d2:a5:88:74: de:4d:bf:2f:e1:e0:32:4f:73:ac:d9:6b:46:05:98: b6:4c:49:94:83:9f:f4:41:d8:b5:1b:59:78:c8:ba: 6c:88:6d:3c:19:bf:c9:3e:65:2c:96:c7:73:7b:73: 1e:48:71:b7:1f:cc:6f:83:d2:3a:a4:25:7c:5a:77: e1:ce:99:89:a3:58:80:16:b7:82:f8:a2:fd:04:0c: 0a:a9:59:0f:20:c9:1e:1b:63:4a:f3:aa:cb:2d:c6: 54:5c:bc:e3:f7:a3:6b:00:a4:d3:e5:9f:eb:46:f5: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FF:E7:20:07:50:05:6C:9D:0C:DE:DD:9F:DC:CF:AA:13:69:94:42 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 51.162.48.0/22 51.162.71.0/24 Signature Algorithm: sha256WithRSAEncryption d2:f4:1f:3b:3a:14:33:f0:71:0f:30:10:0d:ee:90:db:84:af: fc:3a:6a:a5:23:77:6f:bc:82:bb:fe:aa:65:9b:00:2f:fa:5a: 65:0a:fa:95:57:2b:8a:ed:30:30:76:d6:da:14:48:db:08:ac: 3b:4b:8f:99:a3:43:f4:9e:a2:21:bf:f6:ad:b6:d6:ed:5a:c8: 58:a0:5d:2b:a4:a4:08:fe:28:4c:5b:e0:2a:fb:14:c7:ef:69: 5c:84:c8:ca:65:ce:c0:e5:7e:59:51:67:b3:8b:7d:73:b4:3b: 5b:c4:39:84:3a:55:b9:ab:80:58:df:3a:1f:84:60:5f:60:c4: 76:73:46:30:5b:76:db:27:24:d5:ce:73:d6:89:80:e7:93:21: e6:85:e3:f2:c7:f3:62:e8:4b:91:ac:02:c4:f2:60:70:71:42: 62:5b:e8:86:2a:c8:a2:39:eb:3a:e2:d7:91:49:b8:ff:a4:05: c4:52:57:f9:88:c4:e2:60:86:f3:97:d5:0a:3c:84:22:86:0f: 53:dd:7d:1d:a2:cf:0c:d1:6c:0a:99:03:9e:7d:8a:94:1b:d2: f2:14:48:6e:4e:82:e6:2b:26:1a:be:70:59:29:ab:1d:03:9c: 72:5c:54:07:b4:05:83:c6:13:c3:64:b5:f8:52:7f:c1:bb:fa: d9:88:ce:cf -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjYwNTE2MjEyNjA3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTA4ZTBlZi1mNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63nHmIDh5bnNlhbZFqvHLh+Va/qYVL1Q1iAC8q4PtLJjyWTh4q6LGYoPO3ZY /yEZ5RvQI/XRLG5fZvOb27jdldG8lrshQS7bYbEBTh717JErY89JismGfSz/+PMM TAbiI1/OFV6+GhMtN+uC33cTJWPGV8C5IHKWJABAe4ruxK6O7TFe1lW4u1Fh+xl6 y80OZdKliHTeTb8v4eAyT3Os2WtGBZi2TEmUg5/0Qdi1G1l4yLpsiG08Gb/JPmUs lsdze3MeSHG3H8xvg9I6pCV8WnfhzpmJo1iAFreC+KL9BAwKqVkPIMkeG2NK86rL LcZUXLzj96NrAKTT5Z/rRvUCGwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEr/5yAH UAVsnQze3Z/cz6oTaZRCMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBRjEvODZEQjJDQ0MyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvMkE2NzcwMEE5 QjQ0MTFFRkExNzcyMTUzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCM6IwAwQAM6JHMA0GCSqGSIb3DQEBCwUAA4IBAQDS9B87OhQz8HEP MBAN7pDbhK/8OmqlI3dvvIK7/qplmwAv+lplCvqVVyuK7TAwdtbaFEjbCKw7S4+Z o0P0nqIhv/atttbtWshYoF0rpKQI/ihMW+Aq+xTH72lchMjKZc7A5X5ZUWezi31z tDtbxDmEOlW5q4BY3zofhGBfYMR2c0YwW3bbJyTVznPWiYDnkyHmhePyx/Ni6EuR rALE8mBwcUJiW+iGKsiiOes64teRSbj/pAXEUlf5iMTiYIbzl9UKPIQihg9T3X0d os8M0WwKmQOefYqUG9LyFEhuToLmKyYavnBZKasdA5xyXFQHtAWDxhPDZLX4Un/B u/rZiM7P -----END CERTIFICATE-----Generated at Sat Jun 6 13:18:59 2026 by rpki-client