$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/C8E215DA72BD11F1A5B8119C6EA30FBC.roa File: C8E215DA72BD11F1A5B8119C6EA30FBC.roa (raw, json) Hash identifier: 42F8H8tLM7SW8VbxSmhfljA+OlaX9YJW6w/yvaOHuEM= Subject key identifier: 88:D2:23:4F:5D:99:6C:2D:2F:9E:14:13:E7:AA:A8:DC:17:CF:43:56 Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: D5 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/C8E215DA72BD11F1A5B8119C6EA30FBC.roa Signing time: Fri 07 Aug 2026 06:57:28 +0000 ROA not before: Fri 07 Aug 2026 06:57:28 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 147180 IP address blocks: 49.213.32.0/24 maxlen: 24 2001:df5:f9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 06:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Aug 7 06:57:28 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7581d8-b14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:65:25:ea:38:24:15:05:b5:3d:83:6b:b5: fd:ec:2e:56:60:23:7e:ce:e3:bc:e6:23:39:65:ef: 86:87:37:98:d5:49:6d:6e:6f:3d:2d:3f:72:4e:f8: f5:45:c7:d0:a5:cd:fa:de:ca:40:24:13:56:0b:fc: d8:f2:9d:8c:78:03:c1:a7:90:18:9f:c8:dd:01:55: 94:d1:99:8d:99:f7:2e:27:75:5f:a7:ec:1b:9b:69: e1:65:b9:e4:36:9d:7e:e9:51:97:e2:f3:0d:66:10: dd:00:56:40:d6:66:9c:37:9a:40:28:e7:c9:61:21: f3:9f:e2:45:42:aa:eb:9d:06:bc:c3:50:9a:30:f8: b1:42:2f:f9:78:f8:bf:bf:b0:47:d2:5c:f9:24:ad: 8a:2b:c0:e3:c2:2c:2e:37:f8:3f:6b:e8:7a:76:74: 2d:4d:a3:02:c2:fd:91:f6:b0:19:aa:0f:cc:33:42: 8c:bd:08:c3:ad:ea:eb:82:e6:f3:dc:62:27:db:f9: 68:47:15:85:4d:0a:e0:07:90:3d:09:12:c8:6a:7c: 2e:58:7d:a8:75:bf:6d:86:a2:b9:f8:54:2e:a8:df: 39:fd:de:a8:47:25:4c:0b:6b:ab:c5:57:8b:58:a5: 9b:91:27:52:ae:c4:15:a6:fa:d6:27:bc:07:fe:e2: 5a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D2:23:4F:5D:99:6C:2D:2F:9E:14:13:E7:AA:A8:DC:17:CF:43:56 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/C8E215DA72BD11F1A5B8119C6EA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 49.213.32.0/24 IPv6: 2001:df5:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 9c:b8:39:65:13:21:d6:bc:6b:8a:f5:52:72:0e:c2:90:e7:37: 5b:10:5c:28:a4:c4:73:93:c6:da:5c:30:09:c2:b0:fe:ed:e5: 3b:49:a4:d0:4f:43:51:62:ab:2d:3a:36:57:bf:c0:8e:32:18: a5:09:c1:f0:f3:8e:b1:12:ad:08:ab:87:59:0e:16:66:89:96: cb:98:29:89:3c:1a:62:a8:02:15:e0:e0:7b:11:83:d1:29:f4: 03:e8:d7:fa:0f:97:8d:2f:04:cc:7e:7d:74:0a:a5:47:62:81: 78:8e:a0:28:e5:07:34:a7:3d:1e:09:5f:76:af:92:57:4c:e7: e4:94:48:25:31:bd:8b:be:67:0a:7c:22:64:f3:30:59:59:38: 07:3b:b4:22:72:2e:3d:65:fe:a5:a9:87:df:56:69:0d:3d:52: dd:73:61:e1:b4:46:7e:71:75:0c:10:6c:01:0c:12:54:b5:81: c1:44:71:32:f1:20:32:7e:07:67:eb:38:89:b2:99:9c:8a:7a: 91:d3:0a:7b:bd:25:fb:ba:33:7e:cc:b6:27:bd:dd:4a:da:e3: 34:9c:73:73:ec:6c:94:4d:fa:08:43:ad:82:46:fa:38:fd:09: b6:fd:9f:15:8a:bc:d4:9a:2b:78:5f:46:ee:6a:3c:c7:45:9b: 7c:37:7e:f7 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwRTAxMTAvBgNVBAUTKDg5NzA3N0I3MUYyQzVBRURERTZDMURENDk1NDdEQ0M5 OTUyQ0RBQkUwHhcNMjYwODA3MDY1NzI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1ODFkOC1iMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wVlJeo4JBUFtT2Da7X97C5WYCN+zuO85iM5Ze+GhzeY1Ultbm89LT9yTvj1 RcfQpc363spAJBNWC/zY8p2MeAPBp5AYn8jdAVWU0ZmNmfcuJ3Vfp+wbm2nhZbnk Np1+6VGX4vMNZhDdAFZA1macN5pAKOfJYSHzn+JFQqrrnQa8w1CaMPixQi/5ePi/ v7BH0lz5JK2KK8DjwiwuN/g/a+h6dnQtTaMCwv2R9rAZqg/MM0KMvQjDrerrgubz 3GIn2/loRxWFTQrgB5A9CRLIanwuWH2odb9thqK5+FQuqN85/d6oRyVMC2urxVeL WKWbkSdSrsQVpvrWJ7wH/uJaPwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIjSI09d mWwtL54UE+eqqNwXz0NWMB8GA1UdIwQYMBaAFIlwd7cfLFrt3mwd1JVH3MmVLNq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDBFMC8zRkJCNUUwNDdC NTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1M2ViQjNVbFVmY3laVXMy cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQwRTAvM0ZCQjVFMDQ3QjUzMTFGMDlCNTQ4NDVGQzRGOUFFMDIvQzhFMjE1REE3 MkJEMTFGMUE1QjgxMTlDNkVBMzBGQkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAMdUgMA8EAgACMAkDBwAgAQ31+cAwDQYJKoZIhvcNAQELBQADggEB AJy4OWUTIda8a4r1UnIOwpDnN1sQXCikxHOTxtpcMAnCsP7t5TtJpNBPQ1Fiqy06 Nle/wI4yGKUJwfDzjrESrQirh1kOFmaJlsuYKYk8GmKoAhXg4HsRg9Ep9APo1/oP l40vBMx+fXQKpUdigXiOoCjlBzSnPR4JX3avkldM5+SUSCUxvYu+Zwp8ImTzMFlZ OAc7tCJyLj1l/qWph99WaQ09Ut1zYeG0Rn5xdQwQbAEMElS1gcFEcTLxIDJ+B2fr OImymZyKepHTCnu9Jfu6M37Mtie93Ura4zScc3PsbJRN+ghDrYJG+jj9Cbb9nxWK vNSaK3hfRu5qPMdFm3w3fvc= -----END CERTIFICATE-----Generated at Thu Aug 27 00:10:30 2026 by rpki-client