$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/7020A3F6FB6411F0B417A8544B6F56BC.roa File: 7020A3F6FB6411F0B417A8544B6F56BC.roa (raw, json) Hash identifier: 4UhFxMbmNDYDd2dRJ6HbabaSlexlrVw5pQFQ3FGsJWs= Subject key identifier: 17:B8:FD:98:BA:CB:5F:62:A7:35:9B:D1:2A:64:CA:5C:3D:AA:6A:48 Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 012B Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/7020A3F6FB6411F0B417A8544B6F56BC.roa Signing time: Thu 01 Oct 2026 07:54:02 +0000 ROA not before: Thu 01 Oct 2026 07:54:02 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 40676 IP address blocks: 2001:df0:a880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Oct 1 07:54:02 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6abe119a-132d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:ca:4d:b2:b5:cf:35:bd:0b:bc:4f:4c:a2: 11:7d:39:d9:c4:21:2c:aa:49:ee:ba:26:ad:26:43: 56:0d:28:20:b8:2e:c3:af:df:3c:9d:18:42:6e:b1: 55:20:28:20:ea:a3:27:6c:fc:c5:ed:2e:c8:ab:1d: 4a:3f:47:c2:cf:40:65:7a:d6:73:b4:2a:56:eb:fd: 8d:52:2e:1b:ce:96:00:02:de:f2:9c:17:9f:de:9c: 82:33:2b:c5:35:33:e9:24:8c:07:6e:2e:73:f0:40: 0e:68:51:1b:7e:b4:2b:60:2c:2f:1b:ca:02:a0:47: ee:29:86:52:75:c3:04:60:7e:0e:4f:2a:98:b3:0f: a3:26:d4:97:d5:ca:a5:26:c5:ee:7f:fc:c7:82:36: 1f:f4:ed:dd:7e:bf:25:99:40:2f:d2:89:fa:d1:b6: 6d:2b:08:39:5b:cd:1d:93:69:8f:34:34:a2:28:84: 95:49:ae:b9:66:44:16:f6:cf:70:bc:5d:9a:31:20: 17:7c:c7:17:79:ee:42:1b:f3:0b:47:09:3e:9f:95: e7:a1:fd:72:e9:d5:06:25:89:c9:ed:79:68:cd:be: 56:40:bd:c1:10:53:c0:7b:08:46:1c:17:e0:7b:ef: 00:7a:6a:e0:a0:ee:a7:ff:76:0c:ee:48:b2:e4:d8: 69:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:FD:98:BA:CB:5F:62:A7:35:9B:D1:2A:64:CA:5C:3D:AA:6A:48 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/7020A3F6FB6411F0B417A8544B6F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:a880::/48 Signature Algorithm: sha256WithRSAEncryption da:64:28:e9:1e:ee:41:1f:f9:10:63:a3:e3:f5:31:69:25:ee: 98:9c:fd:41:08:d6:18:fd:4f:ab:bb:0d:99:77:a2:89:fc:7e: fd:09:3b:fe:47:99:e9:8c:e1:68:0a:22:f6:5a:e4:a6:93:72: d8:3a:d3:36:ae:e0:d3:05:2f:a5:0d:a1:9f:8e:48:83:b7:5f: 0b:c3:d9:51:91:de:e0:f6:8f:bd:96:2d:a3:6e:73:4b:33:26: 2c:14:d8:ff:df:fb:84:f1:80:41:bb:16:81:41:1d:c2:ab:ca: 4e:a5:5a:be:4b:0a:7f:8b:18:0a:f2:80:aa:0c:3a:2c:b3:2d: 0f:fd:b2:45:16:44:f9:d3:d4:1d:f7:9c:b6:8a:4a:29:67:07: 39:bd:78:a6:ec:e0:52:d1:28:94:8a:d4:0f:04:40:b9:d0:b1: 64:07:cd:ac:e7:88:fd:53:0a:13:60:75:89:a4:d4:82:9d:26: f5:6b:c7:96:f0:b4:5a:a4:f8:e2:67:20:22:c2:24:61:c8:22: cf:a4:5c:d8:a3:ea:92:f6:cf:4c:e9:9d:f3:45:a1:b3:c5:4e: ac:29:96:74:46:56:1c:f7:08:b8:fb:f3:90:1c:16:d7:0e:49: c9:22:4f:e6:97:92:2c:0b:66:f4:ef:1f:6f:cc:c8:c7:d2:8b: 02:1c:10:1f -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjExMTAvBgNVBAUTKEFFRTE3RERCOEM2QjM1OTk2NDYxODdEMDgxRTdDOEY3 OTg4M0UxOUQwHhcNMjYxMDAxMDc1NDAyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJlMTE5YS0xMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lPKTbK1zzW9C7xPTKIRfTnZxCEsqknuuiatJkNWDSgguC7Dr988nRhCbrFV ICgg6qMnbPzF7S7Iqx1KP0fCz0BletZztCpW6/2NUi4bzpYAAt7ynBef3pyCMyvF NTPpJIwHbi5z8EAOaFEbfrQrYCwvG8oCoEfuKYZSdcMEYH4OTyqYsw+jJtSX1cql JsXuf/zHgjYf9O3dfr8lmUAv0on60bZtKwg5W80dk2mPNDSiKISVSa65ZkQW9s9w vF2aMSAXfMcXee5CG/MLRwk+n5Xnof1y6dUGJYnJ7Xlozb5WQL3BEFPAewhGHBfg e+8AemrgoO6n/3YM7kiy5NhpXwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBe4/Zi6 y19ipzWb0Spkylw9qmpIMB8GA1UdIwQYMBaAFK7hfduMazWZZGGH0IHnyPeYg+Gd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyMS8zM0VBQUM2ODJE MDMxMUYwODNFQkIzN0FDNEY5QUUwMi9ydUY5MjR4ck5abGtZWWZRZ2VmSTk1aUQ0 WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkIyMjEvMzNFQUFDNjgyRDAzMTFGMDgzRUJCMzdBQzRGOUFFMDIvNzAyMEEzRjZG QjY0MTFGMEI0MTdBODU0NEI2RjU2QkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8KiAMA0GCSqGSIb3DQEBCwUAA4IBAQDaZCjpHu5BH/kQY6Pj 9TFpJe6YnP1BCNYY/U+ruw2Zd6KJ/H79CTv+R5npjOFoCiL2WuSmk3LYOtM2ruDT BS+lDaGfjkiDt18Lw9lRkd7g9o+9li2jbnNLMyYsFNj/3/uE8YBBuxaBQR3Cq8pO pVq+Swp/ixgK8oCqDDossy0P/bJFFkT509Qd95y2ikopZwc5vXim7OBS0SiUitQP BEC50LFkB82s54j9UwoTYHWJpNSCnSb1a8eW8LRapPjiZyAiwiRhyCLPpFzYo+qS 9s9M6Z3zRaGzxU6sKZZ0RlYc9wi4+/OQHBbXDknJIk/ml5IsC2b07x9vzMjH0osC HBAf -----END CERTIFICATE-----Generated at Sat Oct 3 11:13:56 2026 by rpki-client