$ rpki-client -vvvf rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/D9F300348D9B11F1B8EC10E14011F970.roa File: D9F300348D9B11F1B8EC10E14011F970.roa (raw, json) Hash identifier: jn7pUkPOtKls3Rk24joGYbeuhfP9/ROHUbwLSv4g/SA= Subject key identifier: F9:7F:3E:18:71:19:B4:91:36:2B:1F:A8:F7:14:8A:C9:4D:06:FA:0A Certificate issuer: /CN=A91676C8/serialNumber=034927772E51E0855B10FD502B816F2434619BF2 Certificate serial: 33 Authority key identifier: 03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/D9F300348D9B11F1B8EC10E14011F970.roa Signing time: Sat 01 Aug 2026 11:26:34 +0000 ROA not before: Sat 01 Aug 2026 11:26:34 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 154723 IP address blocks: 2402:5b20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 09:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676C8, serialNumber=034927772E51E0855B10FD502B816F2434619BF2 Validity Not Before: Aug 1 11:26:34 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a6dd7ea-bff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:eb:c9:cb:20:89:da:9c:9d:ae:a2:f2:02: 2c:0a:14:4d:9d:0b:9f:53:aa:16:ef:f3:e5:8e:f1: 7b:1c:d2:bb:fd:96:93:59:51:cb:f2:31:d1:a2:26: 3a:b0:51:db:bc:80:22:05:dd:c6:6a:8f:fa:a7:38: 40:ce:66:86:89:9a:fd:ab:3a:c1:d3:2c:20:dd:e2: ec:84:77:5d:73:5b:44:d5:09:81:61:a2:eb:9e:43: 8a:b3:47:3c:a3:8e:f1:1e:01:1d:80:f7:c2:8d:f3: 43:ef:1d:e5:08:18:76:ff:d1:3f:af:87:d3:a6:38: c7:d7:d5:69:5f:a0:a9:7d:03:bb:71:9e:ad:d3:43: c7:05:b0:88:37:86:71:b6:51:ad:11:58:34:3a:89: ca:28:e3:bd:8f:26:b6:9d:98:bb:f2:a7:92:27:fd: 4d:b9:73:e7:15:ca:66:b2:57:31:77:f3:be:ac:75: 6f:26:6d:fd:4d:58:76:22:fe:8d:4d:3b:29:4e:bc: 6e:9e:b9:99:43:27:49:52:89:66:f9:17:d5:3a:a8: 7e:56:b2:f8:55:81:52:c3:43:d1:b0:14:7a:ed:d2: 31:f7:98:c2:23:bd:e8:17:9b:dc:4a:54:e6:0f:ca: 33:a7:c4:1b:83:28:43:a5:1f:87:3f:35:c0:b7:c1: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:3E:18:71:19:B4:91:36:2B:1F:A8:F7:14:8A:C9:4D:06:FA:0A X509v3 Authority Key Identifier: keyid:03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/D9F300348D9B11F1B8EC10E14011F970.roa sbgp-ipAddrBlock: critical IPv6: 2402:5b20::/32 Signature Algorithm: sha256WithRSAEncryption 46:23:91:b2:8f:0f:ee:5b:05:c0:4f:45:a0:a6:c5:3e:ad:ea: cb:87:09:e3:77:5c:22:d8:9f:7b:1d:01:b8:31:f5:84:cb:1b: 7c:d7:98:8b:ed:0b:68:02:98:89:0f:9d:c5:3a:ab:5e:8e:62: ad:1f:1f:db:90:f1:32:d1:17:4c:02:67:7c:2d:6a:e6:21:0d: a9:cd:b6:84:d6:53:cc:42:63:32:54:67:02:59:96:bf:56:f8: b3:1c:e3:f3:3c:a9:05:a9:2b:bf:9b:d3:1f:0b:c7:a6:81:44: e0:c5:8a:d0:ef:b7:76:3d:18:d6:90:c1:2b:57:dd:82:ee:a0: 4b:28:18:21:6c:9c:a6:13:1e:d4:6f:f7:e2:0d:c9:0f:bc:60: 31:29:f5:4e:59:cb:a3:b6:44:a0:7a:06:1c:78:b3:3c:5e:db: 01:6e:67:35:28:8a:88:0d:df:d0:d6:30:84:ca:f2:ea:5b:83: e7:16:5b:18:18:9a:c3:1d:0b:60:bd:71:61:2d:43:95:63:e3: 1a:8d:d3:dc:b3:0d:95:1e:fe:bc:40:7b:9b:fb:54:c4:e4:f0: c4:0c:93:80:c4:ea:c0:6d:ce:c8:3c:5c:a3:0b:91:54:5a:7f: b2:7e:75:3c:1a:9c:b4:ae:35:6c:82:1e:72:86:6d:39:6b:27: 70:5b:9c:3b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzZDODExMC8GA1UEBRMoMDM0OTI3NzcyRTUxRTA4NTVCMTBGRDUwMkI4MTZGMjQz NDYxOUJGMjAeFw0yNjA4MDExMTI2MzRaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNmRkN2VhLWJmZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh6+vJyyCJ2pydrqLyAiwKFE2dC59Tqhbv8+WO8Xsc0rv9lpNZUcvyMdGiJjqw Udu8gCIF3cZqj/qnOEDOZoaJmv2rOsHTLCDd4uyEd11zW0TVCYFhouueQ4qzRzyj jvEeAR2A98KN80PvHeUIGHb/0T+vh9OmOMfX1WlfoKl9A7txnq3TQ8cFsIg3hnG2 Ua0RWDQ6icoo472PJradmLvyp5In/U25c+cVymayVzF3876sdW8mbf1NWHYi/o1N OylOvG6euZlDJ0lSiWb5F9U6qH5WsvhVgVLDQ9GwFHrt0jH3mMIjvegXm9xKVOYP yjOnxBuDKEOlH4c/NcC3wcWFAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQU+X8+GHEZ tJE2Kx+o9xSKyU0G+gowHwYDVR0jBBgwFoAUA0kndy5R4IVbEP1QK4FvJDRhm/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NkM4LzNBNjY1MDIwNDRB MzExRjFCREU5MEEzRkIxODMzNzczL0Ewa25keTVSNElWYkVQMVFLNEZ2SkRSaG1f SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTBrbmR5NVI0SVZiRVAxUUs0RnZKRFJobV9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzZDOC8zQTY2NTAyMDQ0QTMxMUYxQkRFOTBBM0ZCMTgzMzc3My9EOUYzMDAzNDhE OUIxMUYxQjhFQzEwRTE0MDExRjk3MC5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAlsgMA0GCSqGSIb3DQEBCwUAA4IBAQBGI5Gyjw/uWwXAT0WgpsU+ rerLhwnjd1wi2J97HQG4MfWEyxt815iL7QtoApiJD53FOqtejmKtHx/bkPEy0RdM Amd8LWrmIQ2pzbaE1lPMQmMyVGcCWZa/VvizHOPzPKkFqSu/m9MfC8emgUTgxYrQ 77d2PRjWkMErV92C7qBLKBghbJymEx7Ub/fiDckPvGAxKfVOWcujtkSgegYceLM8 XtsBbmc1KIqIDd/Q1jCEyvLqW4PnFlsYGJrDHQtgvXFhLUOVY+MajdPcsw2VHv68 QHub+1TE5PDEDJOAxOrAbc7IPFyjC5FUWn+yfnU8Gpy0rjVsgh5yhm05aydwW5w7 -----END CERTIFICATE-----Generated at Sat Oct 3 11:12:13 2026 by rpki-client