$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/6D79D956EF8E11F0A4EF9B52626F56BC.roa File: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (raw, json) Hash identifier: 4G7rkAOPzZxy6QxlsO0//em4aGUKuTqPaZNaxC3+I/U= Subject key identifier: 24:EE:92:F3:88:5D:B6:55:51:1A:55:7F:A4:E1:9A:68:9A:EF:B1:21 Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 0151 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/6D79D956EF8E11F0A4EF9B52626F56BC.roa Signing time: Thu 23 Jul 2026 07:32:23 +0000 ROA not before: Thu 23 Jul 2026 07:32:23 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 53167 IP address blocks: 2401:b3a0:1:100::/56 maxlen: 56 2401:b3a0:1:200::/56 maxlen: 56 2401:b3a0:1:300::/56 maxlen: 56 2401:b3a0:1:400::/56 maxlen: 56 2401:b3a0:1:500::/56 maxlen: 56 2401:b3a0:1:600::/56 maxlen: 56 2401:b3a0:1:700::/56 maxlen: 56 2401:b3a0:1:800::/56 maxlen: 56 2401:b3a0:1:900::/56 maxlen: 56 2401:b3a0:1:a00::/56 maxlen: 56 2401:b3a0:1:b00::/56 maxlen: 56 2401:b3a0:1:c00::/56 maxlen: 56 2401:b3a0:1:d00::/56 maxlen: 56 2401:b3a0:1:e00::/56 maxlen: 56 2401:b3a0:1:f00::/56 maxlen: 56 2401:b3a0:1:1000::/56 maxlen: 56 2401:b3a0:1:1200::/56 maxlen: 56 2401:b3a0:1:1300::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Jul 23 07:32:23 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a61c387-7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:eb:86:81:5b:65:18:13:6c:25:1e:52:c0: 89:ce:8c:7f:14:58:90:14:b5:ee:a0:39:8b:05:3d: 0a:fb:b6:1b:d5:d8:a7:cc:15:6a:6e:e0:91:c5:e5: 71:ef:c2:0a:df:ed:7d:cb:20:45:81:e0:17:1c:7a: 84:50:a5:55:36:47:86:a6:77:18:f3:06:e0:ff:f4: 64:70:30:7d:c8:a9:f2:04:36:59:9b:86:03:8b:cb: 1a:33:ec:6a:8c:98:2f:6b:5d:35:c0:d5:98:b2:6b: 12:bb:51:df:02:09:1d:0e:ad:11:1a:96:cf:c3:13: c6:b5:b6:e6:90:d4:8c:18:31:3e:f9:87:0c:b7:93: e0:8f:be:e8:79:2c:00:9a:76:df:5d:76:a8:48:8c: 07:c9:30:0e:97:c0:f1:85:4e:99:91:e9:59:bb:72: c5:8d:64:b6:5c:f0:f6:7c:1f:34:40:87:7f:1d:3c: 7c:9a:b4:03:dd:2a:4f:0e:0c:34:51:de:e7:6f:de: 3d:10:74:9d:6a:83:08:34:2e:5f:6f:a0:c7:44:88: 25:2c:1d:7c:0c:19:ba:60:22:e1:a0:d8:10:8b:d6: cf:91:bf:bf:d0:93:ec:27:f8:6f:c7:3e:51:eb:b8: 94:45:6a:c2:7f:fc:73:d3:22:ea:39:89:e3:67:1b: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:92:F3:88:5D:B6:55:51:1A:55:7F:A4:E1:9A:68:9A:EF:B1:21 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/6D79D956EF8E11F0A4EF9B52626F56BC.roa sbgp-ipAddrBlock: critical IPv6: 2401:b3a0:1:100::-2401:b3a0:1:10ff:ffff:ffff:ffff:ffff 2401:b3a0:1:1200::/55 Signature Algorithm: sha256WithRSAEncryption af:1b:b6:ac:a5:14:f7:05:60:0c:62:40:a8:46:ab:08:b7:57: b1:5d:4a:14:df:2a:1f:6a:ad:c9:a9:c5:dd:26:c1:04:2d:24: 20:5b:5b:fa:83:6c:07:f4:40:28:91:3b:99:0c:ac:4d:9b:fb: 95:92:e8:46:c5:0d:37:90:98:87:98:7c:e8:4b:dd:03:e9:72: ba:3b:2a:3a:8a:9f:dc:c1:14:4a:9e:5d:bb:3f:8c:ab:a1:92: fd:ed:f9:24:75:ae:66:94:e9:f6:64:3e:92:44:b2:4b:45:49: 5e:27:fe:80:c6:1d:c1:66:93:2a:ad:35:d0:14:50:c6:16:59: e7:5a:f2:7e:4c:64:e3:af:fa:5f:af:b0:78:c6:55:18:60:01: e8:0a:ae:5f:c6:f4:b6:1b:f5:b6:ba:f0:0c:85:be:c0:da:b1: c4:ef:2e:90:28:f7:2e:f5:72:f3:be:ec:90:46:b9:e7:86:47: 33:71:62:c9:29:af:79:ec:54:24:e6:ff:e3:ac:ae:b9:91:f7: ec:39:9b:49:7f:d6:0f:9f:f5:81:5c:0a:a8:5c:aa:91:0a:a1: c4:89:0d:1a:12:43:5d:26:3a:ac:57:11:ca:15:2b:4a:64:51: 87:9e:1c:0a:e0:b9:7e:82:89:9f:a4:bf:36:30:6a:e5:51:8a: 82:5f:41:2e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjYwNzIzMDczMjIzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxYzM4Ny03YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoDrhoFbZRgTbCUeUsCJzox/FFiQFLXuoDmLBT0K+7Yb1dinzBVqbuCRxeVx 78IK3+19yyBFgeAXHHqEUKVVNkeGpncY8wbg//RkcDB9yKnyBDZZm4YDi8saM+xq jJgva101wNWYsmsSu1HfAgkdDq0RGpbPwxPGtbbmkNSMGDE++YcMt5Pgj77oeSwA mnbfXXaoSIwHyTAOl8DxhU6ZkelZu3LFjWS2XPD2fB80QId/HTx8mrQD3SpPDgw0 Ud7nb949EHSdaoMINC5fb6DHRIglLB18DBm6YCLhoNgQi9bPkb+/0JPsJ/hvxz5R 67iURWrCf/xz0yLqOYnjZxstBwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFCTukvOI XbZVURpVf6Thmmia77EhMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOTU2RjY2MkM5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvNkQ3OUQ5NTZF RjhFMTFGMEE0RUY5QjUyNjI2RjU2QkMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAAjAgMBQDCAAkAbOgAAEBAwgAJAGzoAABEAMIASQBs6AAARIwDQYJKoZIhvcN AQELBQADggEBAK8btqylFPcFYAxiQKhGqwi3V7FdShTfKh9qrcmpxd0mwQQtJCBb W/qDbAf0QCiRO5kMrE2b+5WS6EbFDTeQmIeYfOhL3QPpcro7KjqKn9zBFEqeXbs/ jKuhkv3t+SR1rmaU6fZkPpJEsktFSV4n/oDGHcFmkyqtNdAUUMYWWeda8n5MZOOv +l+vsHjGVRhgAegKrl/G9LYb9ba68AyFvsDascTvLpAo9y71cvO+7JBGueeGRzNx Yskpr3nsVCTm/+OsrrmR9+w5m0l/1g+f9YFcCqhcqpEKocSJDRoSQ10mOqxXEcoV K0pkUYeeHArguX6CiZ+kvzYwauVRioJfQS4= -----END CERTIFICATE-----Generated at Fri Jul 24 17:36:52 2026 by rpki-client