$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/3D04EA589D9211EF8083B245C4F9AE02.roa File: 3D04EA589D9211EF8083B245C4F9AE02.roa (raw, json) Hash identifier: N8subGTXgSFo4mT5pf8HJvgdyU5Rcsjvn4+t6H3QhDo= Subject key identifier: 21:6A:83:C9:64:84:26:06:C9:02:6E:9E:3B:76:9C:9A:8F:96:3E:FF Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 0150 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/3D04EA589D9211EF8083B245C4F9AE02.roa Signing time: Thu 23 Jul 2026 07:32:21 +0000 ROA not before: Thu 23 Jul 2026 07:32:21 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 153167 IP address blocks: 2401:b3a0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Jul 23 07:32:21 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a61c385-3ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:6f:70:e7:d7:0d:13:d7:e1:3c:20:ec:37: 86:ed:cb:b5:9c:08:2f:e5:8a:0a:ff:70:58:d4:31: 07:7c:61:80:0a:09:30:27:eb:cd:4f:d4:3c:ba:f0: b7:06:4c:f8:88:4b:33:98:e7:05:15:71:ac:62:64: 61:34:cd:3e:22:07:4d:ef:6b:88:15:4d:65:02:9f: c3:4b:1c:6b:80:3d:98:8a:73:59:fa:e8:54:d0:6f: 2d:80:5f:24:29:b8:f5:8e:10:e9:34:44:57:10:8d: c9:3e:39:c0:85:79:09:f7:5c:65:22:ed:39:37:af: 0a:eb:a9:de:18:02:b7:e6:e3:fa:95:1d:cb:16:6a: 68:82:73:e9:04:80:73:9c:ef:97:d8:0e:ec:1e:7e: 13:5f:89:39:4e:30:a5:81:31:26:d1:d5:08:b9:42: 1a:24:c2:ce:de:06:21:79:f0:3b:ce:ee:20:55:29: 1e:3a:a8:39:df:c6:85:04:51:00:67:42:60:53:ea: 10:a3:a4:de:5a:91:72:4b:07:d3:9c:e5:a2:80:2d: 82:6c:3a:a0:ec:fb:55:b3:aa:73:68:d0:d1:b0:de: 73:a0:40:56:b9:d4:fa:93:b3:f9:30:e8:93:1b:51: 03:1d:51:52:69:12:4c:02:f5:31:5f:70:34:ea:60: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6A:83:C9:64:84:26:06:C9:02:6E:9E:3B:76:9C:9A:8F:96:3E:FF X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/3D04EA589D9211EF8083B245C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:b3a0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:64:3c:41:21:64:51:3a:3c:8c:68:86:5c:66:87:e5:d5:e2: 14:4e:36:d1:0f:df:34:83:99:3c:16:35:ca:c7:63:68:2f:2e: bf:bb:29:2b:30:89:43:7f:60:a5:77:35:d8:e3:4b:08:cb:11: 32:b8:c7:67:2f:73:d9:79:fe:0f:fb:7d:05:53:54:c2:79:c1: 6c:ef:5d:c0:b2:80:b3:d1:e8:c4:7e:dd:2f:da:44:1b:1d:8d: 48:50:ad:58:74:72:bc:96:58:d5:67:25:ac:69:e3:21:33:7d: 71:73:df:10:f9:ef:b1:7a:9a:ce:05:fb:31:ab:c1:20:31:30: 70:ca:01:d0:07:05:00:ae:cb:d4:b6:9e:3e:86:cc:91:0b:94: 34:24:0b:5a:ef:aa:f0:bc:89:7e:51:b4:76:87:c8:41:ef:b3: e4:a5:11:fa:96:b4:07:c5:e1:c2:63:d0:56:03:25:15:95:b1: 11:5e:30:68:29:de:48:81:a0:99:a6:08:c3:5d:12:ef:77:a7: 52:e2:30:5d:f7:e5:ae:9d:a1:1d:88:26:e0:96:f4:1b:b2:a8: be:fe:51:60:83:31:e8:b9:38:e9:aa:4c:24:b7:74:b6:91:81: 89:94:6e:52:4b:cf:c8:0a:51:34:76:1a:8c:c6:7c:d3:45:02: 79:71:0e:e3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjYwNzIzMDczMjIxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxYzM4NS0zZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0pvcOfXDRPX4Twg7DeG7cu1nAgv5YoK/3BY1DEHfGGACgkwJ+vNT9Q8uvC3 Bkz4iEszmOcFFXGsYmRhNM0+IgdN72uIFU1lAp/DSxxrgD2YinNZ+uhU0G8tgF8k Kbj1jhDpNERXEI3JPjnAhXkJ91xlIu05N68K66neGAK35uP6lR3LFmpognPpBIBz nO+X2A7sHn4TX4k5TjClgTEm0dUIuUIaJMLO3gYhefA7zu4gVSkeOqg538aFBFEA Z0JgU+oQo6TeWpFySwfTnOWigC2CbDqg7PtVs6pzaNDRsN5zoEBWudT6k7P5MOiT G1EDHVFSaRJMAvUxX3A06mCLHQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFCFqg8lk hCYGyQJunjt2nJqPlj7/MB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOTU2RjY2MkM5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvM0QwNEVBNTg5 RDkyMTFFRjgwODNCMjQ1QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAGzoDANBgkqhkiG9w0BAQsFAAOCAQEAamQ8QSFkUTo8jGiGXGaH 5dXiFE420Q/fNIOZPBY1ysdjaC8uv7spKzCJQ39gpXc12ONLCMsRMrjHZy9z2Xn+ D/t9BVNUwnnBbO9dwLKAs9HoxH7dL9pEGx2NSFCtWHRyvJZY1WclrGnjITN9cXPf EPnvsXqazgX7MavBIDEwcMoB0AcFAK7L1LaePobMkQuUNCQLWu+q8LyJflG0dofI Qe+z5KUR+pa0B8XhwmPQVgMlFZWxEV4waCneSIGgmaYIw10S73enUuIwXfflrp2h HYgm4Jb0G7Kovv5RYIMx6Lk46apMJLd0tpGBiZRuUkvPyApRNHYajMZ800UCeXEO 4w== -----END CERTIFICATE-----Generated at Fri Jul 24 10:23:31 2026 by rpki-client