$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa File: 159F22549D1B11ED96607C22C4F9AE02.roa (raw, json) Hash identifier: U8acwf2BkkT2MWqZuHqyhaYsOZaXmV1y4mf2DIlSMAQ= Subject key identifier: 4B:37:CE:2A:E1:07:D4:49:BE:F9:6E:E0:0A:BA:EE:54:F8:81:B8:11 Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 10A5 Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa Signing time: Thu 04 Jun 2026 17:21:42 +0000 ROA not before: Thu 04 Jun 2026 17:21:42 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 18231 IP address blocks: 2400:f640::/32 maxlen: 32 2400:f640::/48 maxlen: 48 2400:f640::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4261 (0x10a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Jun 4 17:21:42 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a21b426-1921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:11:65:32:6f:41:c4:a5:18:66:66:5e:22: f7:62:c4:d1:1c:fe:76:a6:80:01:66:f3:75:38:d8: 44:48:1a:52:44:34:5d:2d:82:27:b2:36:d8:05:af: 83:ba:de:54:28:cf:04:39:5c:b5:49:8a:98:29:ec: bf:a5:ea:f9:6a:d0:c5:eb:cf:a4:f4:7b:ee:7f:26: 10:a8:d9:a7:5e:b9:db:24:8d:1d:df:1e:e1:af:ab: 66:ea:e2:d6:13:f9:a8:d5:3d:5d:a2:d2:f8:b5:f5: cc:fa:d3:43:88:4f:23:2e:d5:4a:37:a4:e5:32:43: 29:38:d4:a8:ad:2f:83:75:52:54:db:5e:88:5e:af: 53:d5:68:88:91:41:ff:1a:0a:3b:79:84:76:6f:f0: 86:4e:67:71:3b:f7:e9:a9:f4:50:ac:33:94:5e:4a: ec:d0:11:73:a2:50:2c:f4:db:13:f0:be:ac:79:32: 70:fc:4b:50:bc:28:9e:61:d8:25:75:ac:a9:da:8d: 12:0f:4e:74:47:7f:b7:18:3d:3b:7a:9d:57:49:82: 57:e4:35:fb:46:41:cc:51:4c:03:24:ba:05:f8:ab: b9:6e:9e:18:f5:e9:ca:c7:f2:9d:2c:05:d5:1f:57: 89:5b:58:e4:f8:6b:49:08:27:1f:f3:e4:12:80:bc: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:37:CE:2A:E1:07:D4:49:BE:F9:6E:E0:0A:BA:EE:54:F8:81:B8:11 X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/159F22549D1B11ED96607C22C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:f640::/32 Signature Algorithm: sha256WithRSAEncryption 1b:80:1d:09:cd:cb:b8:bc:3b:cd:89:14:e9:72:1c:77:18:5b: 44:59:75:b9:2c:e3:fa:e6:8f:85:b3:9d:ef:00:f6:8c:75:32: 83:2d:e3:7d:7f:db:c2:3a:86:8a:f7:fb:8d:e4:03:41:16:98: c3:06:df:21:93:ee:0d:77:f1:ee:79:e2:b4:02:c3:0a:a7:8e: e7:76:de:08:f9:7a:44:1a:2a:ff:30:37:08:ab:9d:1e:10:80: ff:8e:36:14:a1:3d:c0:8b:09:e3:d5:5c:43:e8:0d:72:19:53: 63:ff:99:31:fa:11:41:14:97:3e:28:64:72:3b:6c:1a:ca:91: 80:cc:80:66:95:1b:dd:61:fe:a1:c0:1d:72:01:4b:ca:a6:75: 99:d4:71:83:bf:17:a5:c6:2b:71:51:6f:6d:bf:27:f3:60:45: 84:4e:1b:41:de:90:b9:14:43:cb:2e:7b:b2:1e:8a:fe:ff:5f: 06:01:7f:08:82:0a:61:f3:dc:14:1c:55:28:fe:7d:11:40:16: 3a:1f:cd:25:17:cd:df:e8:bd:bd:3d:ca:2a:c9:b2:09:29:f6: 8b:71:23:34:2b:09:0a:c0:65:03:44:e4:69:4c:d1:ed:7e:cd: 46:40:a1:81:62:93:03:98:8e:d9:c4:2c:37:be:87:35:bc:7a: 01:ee:0a:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICEKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjYwNjA0MTcyMTQyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIxYjQyNi0xOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydARZTJvQcSlGGZmXiL3YsTRHP52poABZvN1ONhESBpSRDRdLYInsjbYBa+D ut5UKM8EOVy1SYqYKey/per5atDF68+k9HvufyYQqNmnXrnbJI0d3x7hr6tm6uLW E/mo1T1dotL4tfXM+tNDiE8jLtVKN6TlMkMpONSorS+DdVJU216IXq9T1WiIkUH/ Ggo7eYR2b/CGTmdxO/fpqfRQrDOUXkrs0BFzolAs9NsT8L6seTJw/EtQvCieYdgl dayp2o0SD050R3+3GD07ep1XSYJX5DX7RkHMUUwDJLoF+Ku5bp4Y9enKx/KdLAXV H1eJW1jk+GtJCCcf8+QSgLzxDQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFEs3zirh B9RJvvlu4Aq67lT4gbgRMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTc5M0EvNzZBRjMzNEM1MTY5MTFFOUE3OUMxRTgxQzRGOUFFMDIvMTU5RjIyNTQ5 RDFCMTFFRDk2NjA3QzIyQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAD2QDANBgkqhkiG9w0BAQsFAAOCAQEAG4AdCc3LuLw7zYkU6XIc dxhbRFl1uSzj+uaPhbOd7wD2jHUygy3jfX/bwjqGivf7jeQDQRaYwwbfIZPuDXfx 7nnitALDCqeO53beCPl6RBoq/zA3CKudHhCA/442FKE9wIsJ49VcQ+gNchlTY/+Z MfoRQRSXPihkcjtsGsqRgMyAZpUb3WH+ocAdcgFLyqZ1mdRxg78XpcYrcVFvbb8n 82BFhE4bQd6QuRRDyy57sh6K/v9fBgF/CIIKYfPcFBxVKP59EUAWOh/NJRfN3+i9 vT3KKsmyCSn2i3EjNCsJCsBlA0TkaUzR7X7NRkChgWKTA5iO2cQsN76HNbx6Ae4K Fw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:51:59 2026 by rpki-client