$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/533DC25E60B511F0AB567568C4F9AE02.roa File: 533DC25E60B511F0AB567568C4F9AE02.roa (raw, json) Hash identifier: kSmrHi9JwLiLNm5x35+feh2MNm4COGF5CeDRCfiJLgo= Subject key identifier: 0D:21:D4:2F:6F:E7:B8:5A:47:28:94:47:53:C3:88:5D:87:09:5E:0F Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Certificate serial: EA Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/533DC25E60B511F0AB567568C4F9AE02.roa Signing time: Sat 19 Sep 2026 06:56:33 +0000 ROA not before: Sat 19 Sep 2026 06:56:33 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154047 IP address blocks: 2001:df5:db40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Validity Not Before: Sep 19 06:56:33 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aae3221-757b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3a:a0:b2:0d:03:e2:d8:41:f1:51:b1:eb:a7: 22:e5:69:77:18:ca:bf:ba:76:4d:b0:72:81:07:53: f9:8e:18:12:66:cb:67:12:45:ab:64:c6:7b:ac:0f: f6:c4:e5:fb:e2:42:8d:4d:6b:ab:4e:12:dd:c9:57: 0d:c6:e7:94:88:89:02:15:03:53:d4:8b:ea:c8:b1: bf:97:92:6b:d8:6e:45:56:79:23:09:c4:15:f6:98: 9e:54:62:30:06:6c:6d:e5:88:46:9f:52:e9:31:34: 85:b4:88:d6:3a:f7:e8:5b:94:8e:6c:48:35:80:0a: d8:f6:ad:45:50:72:8b:eb:1d:09:cd:15:43:fd:ef: b6:80:f8:18:87:cd:bb:d6:31:4b:e7:30:93:0d:45: c2:f7:5d:30:7a:be:b6:d3:15:31:b8:64:c0:ce:66: 79:77:ea:33:01:10:61:89:a8:cb:bf:bc:e0:a2:da: 5b:2f:05:ff:cb:e7:a8:6e:05:0e:ad:34:2f:ba:ac: 68:88:32:63:5d:01:1a:7b:ff:e7:80:22:36:6d:e5: 6d:e5:67:c5:db:d9:5e:54:97:4a:7f:9c:0a:fd:47: 30:3c:ee:20:fa:4c:0e:8b:b9:b2:30:96:12:fa:0b: 3d:f8:af:53:a5:61:0a:bf:d7:1f:63:0f:26:03:3b: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:21:D4:2F:6F:E7:B8:5A:47:28:94:47:53:C3:88:5D:87:09:5E:0F X509v3 Authority Key Identifier: keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/533DC25E60B511F0AB567568C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:db40::/48 Signature Algorithm: sha256WithRSAEncryption 0d:1a:c4:80:2b:ee:54:eb:3c:0d:b5:e0:d8:e7:cc:db:63:c1: f6:77:fe:88:d2:f9:b0:c1:a8:09:4e:ae:38:2b:51:54:f9:94: ac:d2:73:82:74:19:a1:7c:8f:ce:9a:f8:a9:20:46:f2:ff:fb: 2e:3f:1d:0b:20:27:ad:1c:48:87:83:c3:e5:e6:b9:e3:6e:a0: 68:8b:ea:0e:07:6b:69:cd:7e:83:ab:f4:89:9f:f6:66:79:6f: 92:56:f6:39:e6:e9:49:38:bf:06:a8:7f:d2:1a:82:35:35:89: 14:5c:ef:27:b2:36:65:c8:f6:75:97:98:3d:31:16:b8:17:86: 26:9c:95:05:1e:96:1a:98:dc:a3:e4:a9:4c:4a:db:d8:5d:fb: 0f:99:6d:04:16:e8:33:b7:02:ee:a2:5a:70:9b:c4:ce:88:e4: 0b:d0:7c:4d:5f:33:08:2d:f6:55:89:e1:ca:b0:0f:e3:35:b1: 15:23:8f:d7:c5:31:69:b1:b0:9a:69:5a:8c:6e:fa:97:7f:f8: 89:80:f8:1b:f6:26:59:ae:52:62:42:72:1a:50:d7:3b:57:81: f8:29:34:2e:c3:ee:fb:d0:87:32:d8:39:33:51:d7:61:8e:62: c4:44:32:32:07:b8:87:23:e8:ed:33:8c:93:f9:f9:09:78:46: 36:e9:51:ba -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUxREUxMTAvBgNVBAUTKDY0N0U1Q0FEQ0IxRkJGN0VCQjg5OUE3MjE5QzNBMEYw M0QzRjdCMEQwHhcNMjYwOTE5MDY1NjMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFlMzIyMS03NTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Tqgsg0D4thB8VGx66ci5Wl3GMq/unZNsHKBB1P5jhgSZstnEkWrZMZ7rA/2 xOX74kKNTWurThLdyVcNxueUiIkCFQNT1IvqyLG/l5Jr2G5FVnkjCcQV9pieVGIw Bmxt5YhGn1LpMTSFtIjWOvfoW5SObEg1gArY9q1FUHKL6x0JzRVD/e+2gPgYh827 1jFL5zCTDUXC910wer620xUxuGTAzmZ5d+ozARBhiajLv7zgotpbLwX/y+eobgUO rTQvuqxoiDJjXQEae//ngCI2beVt5WfF29leVJdKf5wK/UcwPO4g+kwOi7myMJYS +gs9+K9TpWEKv9cfYw8mAzv36QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFA0h1C9v 57haRyiUR1PDiF2HCV4PMB8GA1UdIwQYMBaAFGR+XK3LH79+u4machnDoPA9P3sN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS85MDRGODcwQTYw QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYzNjdpWnB5R2NPZzhEMF9l dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUxREUvOTA0Rjg3MEE2MEI0MTFGMDhFRDdBRTYzQzRGOUFFMDIvNTMzREMyNUU2 MEI1MTFGMEFCNTY3NTY4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9dtAMA0GCSqGSIb3DQEBCwUAA4IBAQANGsSAK+5U6zwNteDY 58zbY8H2d/6I0vmwwagJTq44K1FU+ZSs0nOCdBmhfI/OmvipIEby//suPx0LICet HEiHg8Pl5rnjbqBoi+oOB2tpzX6Dq/SJn/ZmeW+SVvY55ulJOL8GqH/SGoI1NYkU XO8nsjZlyPZ1l5g9MRa4F4YmnJUFHpYamNyj5KlMStvYXfsPmW0EFugztwLuolpw m8TOiOQL0HxNXzMILfZVieHKsA/jNbEVI4/XxTFpsbCaaVqMbvqXf/iJgPgb9iZZ rlJiQnIaUNc7V4H4KTQuw+770Icy2DkzUddhjmLERDIyB7iHI+jtM4yT+fkJeEY2 6VG6 -----END CERTIFICATE-----Generated at Fri Sep 25 19:46:55 2026 by rpki-client