$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/595774341B6211F0B9733473C4F9AE02.roa File: 595774341B6211F0B9733473C4F9AE02.roa (raw, json) Hash identifier: TViW6+JPazKkRXhQ7ni+cLWTzOT4kOhtajYLtf39390= Subject key identifier: 66:53:53:A8:6B:2A:ED:B0:0B:4F:1C:6C:FE:C8:40:66:21:A3:FD:62 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0405 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/595774341B6211F0B9733473C4F9AE02.roa Signing time: Thu 09 Jul 2026 12:14:33 +0000 ROA not before: Thu 09 Jul 2026 12:14:33 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 21433 IP address blocks: 2404:3d00:41c4::/47 maxlen: 47 2404:3d00:41c4::/48 maxlen: 48 2404:3d00:41c5::/48 maxlen: 48 2404:3d00:41ce::/47 maxlen: 47 2404:3d00:41ce::/48 maxlen: 48 2404:3d00:41cf::/48 maxlen: 48 2404:3d00:41d0::/47 maxlen: 47 2404:3d00:41d0::/48 maxlen: 48 2404:3d00:41d1::/48 maxlen: 48 2404:3d00:41d2::/47 maxlen: 47 2404:3d00:41d4::/47 maxlen: 47 2404:3d00:41d6::/47 maxlen: 47 2404:3d00:41e2::/47 maxlen: 47 2404:3d00:41e2::/48 maxlen: 48 2404:3d00:41e3::/48 maxlen: 48 2404:3d00:41e6::/47 maxlen: 47 2404:3d00:41e6::/48 maxlen: 48 2404:3d00:41e7::/48 maxlen: 48 2404:3d00:41ee::/47 maxlen: 47 2404:3d00:41ee::/48 maxlen: 48 2404:3d00:41ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Jul 9 12:14:33 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4f90a9-72b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4a:bf:65:77:ee:33:4f:63:2d:ae:f1:4d:2c: c8:55:1c:23:14:22:57:a4:f8:b8:17:3c:ee:4e:4b: c9:fe:d8:87:4a:8f:8c:11:c6:cd:39:51:29:38:2c: 7d:b2:26:cd:34:06:4b:d6:b3:01:05:72:44:d4:3f: f9:f5:7d:95:00:af:5d:9b:18:74:6c:f0:5c:a8:98: f0:19:03:5c:bd:e4:f8:24:ee:09:01:1a:20:24:44: aa:07:bd:2f:d7:16:6f:a9:c7:43:f7:24:b8:f6:96: 2d:49:d1:39:89:22:7b:0f:2a:c7:a7:8f:77:e8:56: 2c:1c:3e:84:4e:07:2c:3b:2b:97:82:65:72:46:9a: 9e:8f:4e:01:8b:4e:9b:d7:f7:73:42:9f:ce:3e:a3: 03:7b:02:52:30:0c:6d:42:ea:27:eb:a4:1c:0f:72: 28:e7:9c:fb:c4:9d:ea:13:d8:0b:e6:d6:38:06:3e: e4:22:6a:85:4d:57:72:2c:d2:75:d8:ae:b7:4a:60: 1d:da:ad:da:44:8d:5c:cf:9d:7a:4c:bb:b5:23:f1: e6:47:10:45:61:3e:c9:42:e0:77:6d:0f:3b:4b:5f: 84:97:b2:9d:1a:cb:1f:56:96:1a:1e:db:70:07:33: 98:da:85:8b:9c:c5:e4:ee:74:34:6a:95:0f:46:1a: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:53:53:A8:6B:2A:ED:B0:0B:4F:1C:6C:FE:C8:40:66:21:A3:FD:62 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/595774341B6211F0B9733473C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2404:3d00:41c4::/47 2404:3d00:41ce::-2404:3d00:41d7:ffff:ffff:ffff:ffff:ffff 2404:3d00:41e2::/47 2404:3d00:41e6::/47 2404:3d00:41ee::/47 Signature Algorithm: sha256WithRSAEncryption 99:29:05:94:dc:b5:0b:f3:76:1b:d2:72:75:2e:6c:3b:6e:d6: ad:64:04:39:3e:99:c7:df:3f:31:de:31:87:9f:3d:4f:05:7c: 78:aa:e8:64:fa:d0:29:5d:4c:5a:bf:eb:f8:31:c0:fb:e6:b3: f2:42:f9:5d:76:9c:58:1c:f2:af:97:1b:74:35:d2:6e:8c:5d: a8:e4:42:d7:49:a6:42:57:46:20:c6:3b:4d:96:57:67:81:bd: 48:b6:ae:d1:28:81:33:f2:6b:44:50:ce:b2:bb:66:a9:c8:df: 66:05:ee:6a:8b:9d:ab:b9:e9:c7:4f:f5:9f:3e:39:30:09:dd: 4f:7b:0b:a2:42:25:e2:ef:b0:c0:b2:43:5e:f1:41:c5:8a:9e: 6c:c1:ef:da:3a:10:fb:99:ef:03:47:8d:37:8a:6a:88:2a:b2: 27:b1:07:52:6b:a6:f1:d4:7c:1f:c0:9a:2b:46:9d:19:d3:ef: 05:2d:16:51:25:bc:7a:af:03:48:42:3b:4d:ba:a6:8c:d9:fd: cc:51:e8:da:df:2f:24:da:d2:81:8c:79:14:3f:29:d5:bb:86: 76:6f:83:31:3b:21:63:0a:39:21:3b:7d:ce:ef:61:f0:04:28: e6:18:0b:93:11:14:a8:ab:64:c8:ab:e8:56:c9:8a:d3:2f:b4: 81:89:ab:11 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwNzA5MTIxNDMzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmOTBhOS03MmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUq/ZXfuM09jLa7xTSzIVRwjFCJXpPi4FzzuTkvJ/tiHSo+MEcbNOVEpOCx9 sibNNAZL1rMBBXJE1D/59X2VAK9dmxh0bPBcqJjwGQNcveT4JO4JARogJESqB70v 1xZvqcdD9yS49pYtSdE5iSJ7DyrHp4936FYsHD6ETgcsOyuXgmVyRpqej04Bi06b 1/dzQp/OPqMDewJSMAxtQuon66QcD3Io55z7xJ3qE9gL5tY4Bj7kImqFTVdyLNJ1 2K63SmAd2q3aRI1cz516TLu1I/HmRxBFYT7JQuB3bQ87S1+El7KdGssfVpYaHttw BzOY2oWLnMXk7nQ0apUPRhronQIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFGZTU6hr Ku2wC08cbP7IQGYho/1iMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI0QUYvQ0M3QjI1NUFEQ0E5MTFFQzk0RTNFMDI5QzRGOUFFMDIvNTk1Nzc0MzQx QjYyMTFGMEI5NzMzNDczQzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAAjA4AwcBJAQ9AEHEMBIDBwEkBD0AQc4DBwMkBD0AQdADBwEkBD0AQeIDBwEk BD0AQeYDBwEkBD0AQe4wDQYJKoZIhvcNAQELBQADggEBAJkpBZTctQvzdhvScnUu bDtu1q1kBDk+mcffPzHeMYefPU8FfHiq6GT60CldTFq/6/gxwPvms/JC+V12nFgc 8q+XG3Q10m6MXajkQtdJpkJXRiDGO02WV2eBvUi2rtEogTPya0RQzrK7ZqnI32YF 7mqLnau56cdP9Z8+OTAJ3U97C6JCJeLvsMCyQ17xQcWKnmzB79o6EPuZ7wNHjTeK aogqsiexB1JrpvHUfB/AmitGnRnT7wUtFlElvHqvA0hCO026pozZ/cxR6NrfLyTa 0oGMeRQ/KdW7hnZvgzE7IWMKOSE7fc7vYfAEKOYYC5MRFKirZMir6FbJitMvtIGJ qxE= -----END CERTIFICATE-----Generated at Fri Jul 24 03:00:23 2026 by rpki-client