$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/A3571FDE47EC11EFB51C3666C4F9AE02.roa File: A3571FDE47EC11EFB51C3666C4F9AE02.roa (raw, json) Hash identifier: xU1zjA76l+0iM9bsFjOEAgjkfSx72d/teh/7jiFl8qs= Subject key identifier: 2D:FA:C2:05:C2:2D:C6:D6:F8:76:9F:0E:99:FF:CD:B6:EC:7F:FF:0E Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0445 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/A3571FDE47EC11EFB51C3666C4F9AE02.roa Signing time: Sat 27 Jun 2026 01:32:46 +0000 ROA not before: Sat 27 Jun 2026 01:32:46 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 58954 IP address blocks: 2407:2900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Jun 27 01:32:46 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3f283e-8879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:90:7d:da:a7:c7:49:2c:76:10:4b:1e:51:f4: 5f:8e:7b:4e:54:3e:0c:23:38:22:9d:b9:4d:69:17: 47:c3:92:95:3e:83:4b:e6:c2:08:7c:00:84:e3:ec: e1:1f:ea:f5:69:e6:fe:fc:c1:65:ad:e5:73:72:f5: 6e:0b:02:d1:4f:9b:5a:38:ee:5e:76:df:9e:a7:18: 79:92:d4:07:5a:07:77:d1:ca:01:4d:b7:94:42:06: d2:70:3f:ae:1e:0d:48:9f:2b:6f:7b:8a:73:1e:bc: 0d:ee:21:1a:a6:cc:1b:0a:ec:aa:ca:ad:73:26:e3: 12:8b:76:2c:eb:c6:d3:2e:7e:58:0d:d7:89:ab:bb: f4:ea:72:f9:1c:f7:2e:95:77:ee:ad:d6:71:2e:52: 89:b1:53:f2:9c:ed:34:09:0d:ca:02:4b:28:f7:bb: ca:6b:04:f2:71:eb:35:31:d7:85:62:cd:4b:9b:14: 94:bc:d0:1f:c8:21:76:29:4c:14:b4:be:fd:cf:cc: 39:05:b0:c9:15:ff:4c:a1:d2:a2:b1:36:10:6f:ce: ed:0a:3d:fa:e6:62:c9:96:98:b9:f2:7b:64:7f:ba: 21:64:29:a1:a5:be:ed:f5:d8:49:69:bd:69:7d:23: 90:e4:67:34:f4:ed:11:29:53:ca:6d:35:92:f4:2c: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FA:C2:05:C2:2D:C6:D6:F8:76:9F:0E:99:FF:CD:B6:EC:7F:FF:0E X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/A3571FDE47EC11EFB51C3666C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2407:2900::/32 Signature Algorithm: sha256WithRSAEncryption 05:62:04:88:ab:20:b4:11:94:73:5a:95:b2:5c:59:82:b5:f1: 05:40:83:a6:98:1f:e1:d9:e6:d7:4d:5c:61:3b:5d:d9:1c:92: 79:ac:bc:64:a1:1a:ff:d2:d7:94:aa:44:86:49:00:d7:4c:49: 8c:1b:a6:e9:f0:2a:47:83:61:6e:13:b6:ce:1a:f5:2a:8b:80: 1a:61:9c:57:81:c5:49:bf:96:70:4b:c0:e2:16:f8:af:55:e7: 09:dc:88:37:e2:3f:5c:ac:d4:eb:8a:0f:07:19:ca:bb:84:ba: f8:91:d3:be:5f:ff:c1:c9:83:38:1e:44:07:d3:6e:54:34:6e: 36:e1:36:04:d4:15:fa:28:ff:31:2f:e7:f0:4a:aa:5e:27:53: 5e:43:42:e8:ee:77:01:ff:ec:56:a4:85:6d:78:19:95:21:c6: 26:b1:b7:b2:1a:1e:b7:c8:97:8a:d8:c5:75:0b:9b:f1:04:b5: 5e:ab:ff:25:b5:88:df:12:ca:ef:e7:28:94:19:d3:1d:1a:f9: 77:77:2e:cf:32:b7:13:15:68:68:db:e8:59:49:ed:50:59:19: 22:d7:f1:7d:3e:8d:2b:bb:dc:54:90:03:81:5a:13:9a:c5:bc: ac:60:14:62:33:57:ce:5f:17:8d:e5:8f:a8:58:1b:e5:92:6b: 87:3f:22:e4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjYwNjI3MDEzMjQ2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNmMjgzZS04ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JB92qfHSSx2EEseUfRfjntOVD4MIzginblNaRdHw5KVPoNL5sIIfACE4+zh H+r1aeb+/MFlreVzcvVuCwLRT5taOO5edt+epxh5ktQHWgd30coBTbeUQgbScD+u Hg1Inytve4pzHrwN7iEapswbCuyqyq1zJuMSi3Ys68bTLn5YDdeJq7v06nL5HPcu lXfurdZxLlKJsVPynO00CQ3KAkso97vKawTyces1MdeFYs1LmxSUvNAfyCF2KUwU tL79z8w5BbDJFf9ModKisTYQb87tCj365mLJlpi58ntkf7ohZCmhpb7t9dhJab1p fSOQ5Gc09O0RKVPKbTWS9CyqjQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFC36wgXC LcbW+HafDpn/zbbsf/8OMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvQTM1NzFGREU0 N0VDMTFFRkI1MUMzNjY2QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAcpADANBgkqhkiG9w0BAQsFAAOCAQEABWIEiKsgtBGUc1qVslxZ grXxBUCDppgf4dnm101cYTtd2RySeay8ZKEa/9LXlKpEhkkA10xJjBum6fAqR4Nh bhO2zhr1KouAGmGcV4HFSb+WcEvA4hb4r1XnCdyIN+I/XKzU64oPBxnKu4S6+JHT vl//wcmDOB5EB9NuVDRuNuE2BNQV+ij/MS/n8EqqXidTXkNC6O53Af/sVqSFbXgZ lSHGJrG3shoet8iXitjFdQub8QS1Xqv/JbWI3xLK7+colBnTHRr5d3cuzzK3ExVo aNvoWUntUFkZItfxfT6NK7vcVJADgVoTmsW8rGAUYjNXzl8XjeWPqFgb5ZJrhz8i 5A== -----END CERTIFICATE-----Generated at Fri Jul 24 10:08:00 2026 by rpki-client