$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/3E672F9E85C311F1878E643E64A30FBC.roa File: 3E672F9E85C311F1878E643E64A30FBC.roa (raw, json) Hash identifier: SDFzHjKlSA+J3jNSgDos6IoR8Z+MiDeNOuMMu5stO6M= Subject key identifier: 48:94:6F:AF:E2:A7:38:44:84:BA:59:BB:97:B7:61:8A:DA:7B:AC:C8 Certificate issuer: /CN=A91A29D7/serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402 Certificate serial: 8F Authority key identifier: 16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/3E672F9E85C311F1878E643E64A30FBC.roa Signing time: Wed 22 Jul 2026 11:48:24 +0000 ROA not before: Wed 22 Jul 2026 11:48:24 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152648 IP address blocks: 2001:df6:3340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29D7, serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402 Validity Not Before: Jul 22 11:48:24 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a60ae08-fa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:dc:94:0d:d0:38:ba:0c:46:13:09:42:85:08: 75:f6:cc:f7:5a:2b:a6:5b:a0:5b:61:40:cd:fc:c0: a4:4a:c3:8e:6c:93:3e:09:8c:d1:18:a5:ef:1a:78: 56:40:c0:3b:38:6f:91:20:29:f8:8b:fa:aa:ae:05: 52:9a:e2:e2:0c:c8:31:b0:6a:13:b3:9b:15:6c:24: 76:5f:63:0c:a5:3f:93:f2:cb:9e:60:d5:86:df:bb: 38:fa:1c:0f:f7:ad:b5:b0:1f:1d:f2:91:2b:80:c0: 0c:ad:32:e7:d5:97:8a:36:40:0a:76:db:f3:64:33: dc:c7:cc:10:a7:2a:38:fa:fd:c3:5c:11:1e:62:ac: 45:bf:59:ce:30:63:33:8b:54:d2:4f:52:5f:45:e3: df:6c:dd:d5:a9:a9:dd:d1:f7:51:30:dd:cf:0c:44: c1:a1:37:5e:a5:11:10:78:8d:71:8f:b0:68:36:60: 71:67:1b:84:86:a9:79:80:34:64:69:e2:ed:21:da: 21:ec:1e:9a:0e:e7:2d:09:0e:82:de:78:9f:0c:22: 3b:52:11:be:d3:2e:d1:f6:ac:03:6b:c0:fb:6a:64: fc:b0:31:d0:e1:33:ce:32:00:6d:38:22:d1:fb:ff: 6c:82:8e:68:48:d1:49:fe:3d:a0:c3:28:a9:13:62: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:6F:AF:E2:A7:38:44:84:BA:59:BB:97:B7:61:8A:DA:7B:AC:C8 X509v3 Authority Key Identifier: keyid:16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/3E672F9E85C311F1878E643E64A30FBC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:3340::/48 Signature Algorithm: sha256WithRSAEncryption 1f:0b:73:83:84:5f:d6:1c:2f:ca:72:b3:af:2b:48:ef:d0:e3: 30:af:7f:28:56:24:96:a8:6a:12:8c:18:4d:3d:44:37:df:b5: bf:21:5b:40:81:77:29:2c:cd:ec:59:47:9e:79:2f:09:57:46: da:72:81:ea:f1:71:30:b2:5a:4b:37:5c:9a:b4:26:d9:e5:44: 7e:1a:f0:11:bc:6c:e1:ff:ff:0e:3e:c1:04:0e:f6:af:39:a1: 45:cd:71:dd:06:ad:14:88:3d:3f:3a:ef:e2:02:93:01:ae:4c: 5b:1b:88:41:e2:56:5d:74:df:67:d2:8a:62:6e:77:c0:84:21: a3:8c:10:da:ad:7e:46:02:35:c6:03:17:45:65:8e:d4:eb:23: 37:5a:cb:6f:78:84:3f:d7:67:b7:a6:c7:f5:01:da:f1:b2:37: 27:92:c7:83:6d:4a:e0:7f:68:5a:98:72:43:7f:b1:a4:ff:23: 0d:38:6a:e9:36:5d:a0:f9:5d:54:78:88:d7:c9:bb:f1:6c:2a: 18:e9:28:69:82:69:fb:a9:3c:16:8f:a6:20:94:52:6d:50:de: 3e:e8:56:f4:16:c6:97:26:a6:cc:4b:4d:8f:c3:b7:03:18:98: f1:db:0c:f2:e3:07:d1:69:07:ec:45:6a:9e:86:f8:f4:cb:48: 2f:cf:d0:87 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5RDcxMTAvBgNVBAUTKDE2QUM5M0Q4RDEwNjYyMTFGMDg0MTE2QUQ0MkE0MzQ0 RUQ1MUM0MDIwHhcNMjYwNzIyMTE0ODI0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwYWUwOC1mYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA99yUDdA4ugxGEwlChQh19sz3WiumW6BbYUDN/MCkSsOObJM+CYzRGKXvGnhW QMA7OG+RICn4i/qqrgVSmuLiDMgxsGoTs5sVbCR2X2MMpT+T8sueYNWG37s4+hwP 9621sB8d8pErgMAMrTLn1ZeKNkAKdtvzZDPcx8wQpyo4+v3DXBEeYqxFv1nOMGMz i1TST1JfRePfbN3Vqand0fdRMN3PDETBoTdepREQeI1xj7BoNmBxZxuEhql5gDRk aeLtIdoh7B6aDuctCQ6C3nifDCI7UhG+0y7R9qwDa8D7amT8sDHQ4TPOMgBtOCLR +/9sgo5oSNFJ/j2gwyipE2Is4QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFEiUb6/i pzhEhLpZu5e3YYrae6zIMB8GA1UdIwQYMBaAFBask9jRBmIR8IQRatQqQ0TtUcQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlENy9GQjU2MEI0RUFE NzMxMUYwQUY2NTAyNTRDNEY5QUUwMi9GcXlUMk5FR1loSHdoQkZxMUNwRFJPMVJ4 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxeVQyTkVHWWhId2hCRnExQ3BEUk8xUnhBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTI5RDcvRkI1NjBCNEVBRDczMTFGMEFGNjUwMjU0QzRGOUFFMDIvM0U2NzJGOUU4 NUMzMTFGMTg3OEU2NDNFNjRBMzBGQkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9jNAMA0GCSqGSIb3DQEBCwUAA4IBAQAfC3ODhF/WHC/KcrOv K0jv0OMwr38oViSWqGoSjBhNPUQ337W/IVtAgXcpLM3sWUeeeS8JV0bacoHq8XEw slpLN1yatCbZ5UR+GvARvGzh//8OPsEEDvavOaFFzXHdBq0UiD0/Ou/iApMBrkxb G4hB4lZddN9n0opibnfAhCGjjBDarX5GAjXGAxdFZY7U6yM3WstveIQ/12e3psf1 AdrxsjcnkseDbUrgf2hamHJDf7Gk/yMNOGrpNl2g+V1UeIjXybvxbCoY6Shpgmn7 qTwWj6YglFJtUN4+6Fb0FsaXJqbMS02Pw7cDGJjx2wzy4wfRaQfsRWqehvj0y0gv z9CH -----END CERTIFICATE-----Generated at Fri Jul 24 05:46:06 2026 by rpki-client