$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/DCE70C6EF9B911ED8314C10EC4F9AE02.roa File: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (raw, json) Hash identifier: ZY3y7l0sOwn5Wj/wG0idR2yoV2IE4WMSo7bUKMPTVck= Subject key identifier: 77:91:1B:95:8E:3E:2C:76:33:C1:CB:BE:B7:EE:38:98:C3:7A:6A:98 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0407 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/DCE70C6EF9B911ED8314C10EC4F9AE02.roa Signing time: Thu 09 Jul 2026 12:23:00 +0000 ROA not before: Thu 09 Jul 2026 12:23:00 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 3573 IP address blocks: 2404:3d00:41a8::/47 maxlen: 47 2404:3d00:41c2::/47 maxlen: 47 2404:3d00:41c2::/48 maxlen: 48 2404:3d00:41c3::/48 maxlen: 48 2404:3d00:41dc::/47 maxlen: 47 2404:3d00:41dc::/48 maxlen: 48 2404:3d00:41dd::/48 maxlen: 48 2404:3d00:41e4::/47 maxlen: 47 2404:3d00:41e4::/48 maxlen: 48 2404:3d00:41e5::/48 maxlen: 48 2404:3d00:41f6::/47 maxlen: 47 2404:3d00:41f6::/48 maxlen: 48 2404:3d00:41f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Jul 9 12:23:00 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4f92a4-88aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:dd:90:c8:50:7f:43:79:46:58:cf:c9:d1: 1d:fc:4e:43:93:9f:ce:7d:15:0b:55:e8:fd:5d:60: 4a:42:07:dc:38:7a:25:66:b8:39:51:69:10:93:5c: df:f4:aa:17:09:e7:3c:3b:fc:74:64:8c:12:d0:53: f8:c0:48:43:d7:ec:4e:5c:f2:49:3c:ee:2b:b2:53: fc:a7:0e:e1:84:90:f5:50:32:ca:90:5b:67:f9:66: 6d:2f:70:a4:a2:ef:7c:66:f5:3b:e7:35:46:5a:65: 63:0e:d9:4f:e0:84:07:18:2a:96:11:5b:c6:82:b3: d9:83:d5:9c:3d:0f:b9:b4:00:e0:c8:25:ab:01:96: e7:3f:d5:c7:86:ee:66:e7:13:f0:24:aa:9d:4c:3a: 35:f8:9c:64:59:53:66:1f:9d:ac:26:56:3d:48:8c: a7:d9:f7:ea:16:31:24:57:c7:7e:75:14:78:18:4d: be:4d:55:66:da:d1:c3:c2:28:49:62:32:78:b4:e1: 09:80:a5:21:d1:7c:33:96:34:6a:10:b0:9a:f1:07: 56:2d:30:4b:a5:df:c9:6d:d2:a2:e4:a7:b5:ab:89: 44:2c:f5:4b:4a:ac:99:a7:8f:34:51:71:53:63:04: 86:e8:7f:fb:37:64:1b:84:9b:d7:0f:73:36:66:12: ea:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:91:1B:95:8E:3E:2C:76:33:C1:CB:BE:B7:EE:38:98:C3:7A:6A:98 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/DCE70C6EF9B911ED8314C10EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2404:3d00:41a8::/47 2404:3d00:41c2::/47 2404:3d00:41dc::/47 2404:3d00:41e4::/47 2404:3d00:41f6::/47 Signature Algorithm: sha256WithRSAEncryption 52:36:83:5f:04:95:5b:44:01:5a:37:1e:ae:02:e8:9e:9e:df: 30:d6:29:3e:87:8d:ec:18:e0:c3:8d:75:a3:12:f7:81:5d:42: cb:71:63:4c:cc:b4:2f:ab:4f:93:cf:94:fc:cd:c2:ff:2c:55: a6:c6:3d:5e:fc:ad:c2:7f:e6:b3:c5:06:42:ad:cf:c6:95:d3: c0:00:21:c5:a7:cf:60:c5:e4:b7:2c:a2:74:71:f1:51:52:2c: 06:62:68:16:1f:e7:85:e0:b1:e6:92:b9:a1:34:75:70:07:8a: f5:18:c4:35:ca:23:f2:59:4f:c8:7b:32:39:4f:48:ea:96:da: 04:63:6a:df:c4:6c:7b:06:31:39:5c:a6:0b:d7:44:a0:20:b2: 60:26:18:a9:04:2b:4d:85:b3:3d:52:c7:61:33:50:93:e9:b1: 0d:54:a3:4f:8b:73:3f:e6:c8:07:17:63:3f:a3:11:b4:6b:ba: 34:c1:4a:f8:5e:e2:0d:d0:04:e1:d4:f1:bb:e3:1c:64:4e:a2: 18:ec:5a:c8:07:49:a8:71:69:0d:6c:ce:78:88:44:85:60:7a: d2:71:a6:99:f9:17:de:87:fa:42:2e:0c:d6:5d:08:61:6b:99: 27:3a:c3:60:c8:64:be:28:dc:f8:c2:27:5f:4b:94:1d:0e:a7: b4:d5:af:eb -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwNzA5MTIyMzAwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmOTJhNC04OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvXdkMhQf0N5RljPydEd/E5Dk5/OfRULVej9XWBKQgfcOHolZrg5UWkQk1zf 9KoXCec8O/x0ZIwS0FP4wEhD1+xOXPJJPO4rslP8pw7hhJD1UDLKkFtn+WZtL3Ck ou98ZvU75zVGWmVjDtlP4IQHGCqWEVvGgrPZg9WcPQ+5tADgyCWrAZbnP9XHhu5m 5xPwJKqdTDo1+JxkWVNmH52sJlY9SIyn2ffqFjEkV8d+dRR4GE2+TVVm2tHDwihJ YjJ4tOEJgKUh0XwzljRqELCa8QdWLTBLpd/JbdKi5Ke1q4lELPVLSqyZp480UXFT YwSG6H/7N2QbhJvXD3M2ZhLqawIDAQABo4IChzCCAoMwHQYDVR0OBBYEFHeRG5WO Pix2M8HLvrfuOJjDemqYMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI0QUYvQ0M3QjI1NUFEQ0E5MTFFQzk0RTNFMDI5QzRGOUFFMDIvRENFNzBDNkVG OUI5MTFFRDgzMTRDMTBFQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAz BAIAAjAtAwcBJAQ9AEGoAwcBJAQ9AEHCAwcBJAQ9AEHcAwcBJAQ9AEHkAwcBJAQ9 AEH2MA0GCSqGSIb3DQEBCwUAA4IBAQBSNoNfBJVbRAFaNx6uAuient8w1ik+h43s GODDjXWjEveBXULLcWNMzLQvq0+Tz5T8zcL/LFWmxj1e/K3Cf+azxQZCrc/GldPA ACHFp89gxeS3LKJ0cfFRUiwGYmgWH+eF4LHmkrmhNHVwB4r1GMQ1yiPyWU/IezI5 T0jqltoEY2rfxGx7BjE5XKYL10SgILJgJhipBCtNhbM9UsdhM1CT6bENVKNPi3M/ 5sgHF2M/oxG0a7o0wUr4XuIN0ATh1PG74xxkTqIY7FrIB0mocWkNbM54iESFYHrS caaZ+Rfeh/pCLgzWXQhha5knOsNgyGS+KNz4widfS5QdDqe01a/r -----END CERTIFICATE-----Generated at Fri Jul 24 06:56:37 2026 by rpki-client