$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/408045262AAA11EE86A2063BC4F9AE02.roa File: 408045262AAA11EE86A2063BC4F9AE02.roa (raw, json) Hash identifier: xh8ZzkScwUoVrKvZnOf/z0vy2KKYFXPO6zuhnInuTK4= Subject key identifier: F7:D0:8F:FF:D3:34:BB:6F:30:B4:43:22:FF:89:1A:19:A4:49:8F:DC Certificate issuer: /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Certificate serial: 0412 Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/408045262AAA11EE86A2063BC4F9AE02.roa Signing time: Fri 19 Jun 2026 00:29:33 +0000 ROA not before: Fri 19 Jun 2026 00:29:33 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 140043 IP address blocks: 2001:df0:ac40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB527, serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Validity Not Before: Jun 19 00:29:33 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a348d6d-61a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:4e:2a:fc:eb:45:29:40:78:78:1b:96:00: 82:a8:52:32:59:ca:81:65:f1:9b:f9:34:2f:36:f4: e4:bf:cf:53:25:bc:ba:01:6f:e6:e3:5d:f7:ac:7e: e9:5b:28:8b:ae:0d:47:c0:d5:9d:db:a2:d3:49:4d: fd:9b:12:02:f5:63:0b:c2:bd:81:a7:36:df:84:dd: 48:29:07:7a:be:3c:61:ac:68:f3:73:b1:9f:22:01: 00:c9:bd:45:68:c6:6d:73:42:09:7b:c6:fb:44:fb: 32:3a:d3:71:fe:23:12:21:be:dd:11:2e:4f:78:ac: 6d:40:d7:21:65:51:04:7c:46:4c:90:7e:68:53:eb: 7f:fe:7a:93:11:b2:0e:0a:f0:7c:55:8a:ac:3c:51: 49:46:f6:d7:f7:a4:fb:41:19:fc:d1:88:33:13:aa: fb:29:82:3c:33:ea:a4:5c:5c:d6:d7:08:57:7e:9b: f8:f2:1d:36:fe:37:78:b0:9e:f6:ca:dc:7e:30:be: 14:34:ff:80:06:a8:ca:de:35:b9:a1:7b:0c:f2:a8: 85:f7:4b:5f:96:98:64:a5:9c:cd:99:6d:09:6d:45: 27:94:24:2d:21:43:65:bd:8c:be:77:40:26:aa:af: 92:6c:39:2b:66:e0:39:1b:80:49:81:5e:d7:12:9c: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D0:8F:FF:D3:34:BB:6F:30:B4:43:22:FF:89:1A:19:A4:49:8F:DC X509v3 Authority Key Identifier: keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/408045262AAA11EE86A2063BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:ac40::/48 Signature Algorithm: sha256WithRSAEncryption be:93:62:56:98:73:4a:f0:f3:0c:5b:fc:98:4b:0f:f8:42:05: b1:1b:ce:1f:10:35:4f:bb:94:85:da:41:69:38:cc:d2:9b:11: e6:2e:4c:a4:93:82:6b:20:26:2e:2e:cc:68:06:c5:b6:a3:06: 4c:66:fd:5b:c7:62:aa:01:c0:a6:c2:7c:07:28:69:bc:80:9f: 2a:eb:79:68:79:d9:81:e4:1a:2c:87:ec:27:dc:b6:a6:06:5c: 63:7d:28:ed:3d:2e:c6:c0:6e:28:54:b2:ce:d1:55:a3:33:ee: ff:ba:57:7f:eb:c2:14:a6:54:b7:1e:99:d3:2c:7e:10:50:12: 02:bc:4c:78:3d:26:29:7a:81:d6:a4:af:38:59:69:0a:93:dd: ca:f6:14:04:01:e5:64:ff:52:4d:ff:8e:a1:63:19:4e:53:a6: 67:b1:1f:4f:e8:87:f2:8e:f4:60:f0:43:eb:4b:09:83:db:42: 83:0a:a5:84:ba:0c:ef:45:f7:a6:b0:c9:15:ac:e7:fc:c9:4d: bb:9e:a1:42:fa:20:0a:9d:e5:6d:81:71:db:f8:46:b9:ef:ac: 5e:df:df:29:b5:80:4f:91:62:ef:09:c8:da:dd:25:a7:db:f4: 15:44:cc:92:a5:47:3e:02:16:6c:de:33:d6:4f:10:d6:17:1b: eb:d8:bd:1f -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI1MjcxMTAvBgNVBAUTKDg3NkEwNzlENDQ0RjUyQzY0RDYwNjA0Q0NDNzRGOTVG MDhBREE1NDcwHhcNMjYwNjE5MDAyOTMzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM0OGQ2ZC02MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGJOKvzrRSlAeHgblgCCqFIyWcqBZfGb+TQvNvTkv89TJby6AW/m4133rH7p WyiLrg1HwNWd26LTSU39mxIC9WMLwr2BpzbfhN1IKQd6vjxhrGjzc7GfIgEAyb1F aMZtc0IJe8b7RPsyOtNx/iMSIb7dES5PeKxtQNchZVEEfEZMkH5oU+t//nqTEbIO CvB8VYqsPFFJRvbX96T7QRn80YgzE6r7KYI8M+qkXFzW1whXfpv48h02/jd4sJ72 ytx+ML4UNP+ABqjK3jW5oXsM8qiF90tflphkpZzNmW0JbUUnlCQtIUNlvYy+d0Am qq+SbDkrZuA5G4BJgV7XEpxOdwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPfQj//T NLtvMLRDIv+JGhmkSY/cMB8GA1UdIwQYMBaAFIdqB51ET1LGTWBgTMx0+V8IraVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjUyNy9ERDFBRTJGNkMy QUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVzWk5ZR0JNekhUNVh3aXRw VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyb0huVVJQVXNaTllHQk16SFQ1WHdpdHBVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI1MjcvREQxQUUyRjZDMkFBMTFFQ0FGNUY5Rjc2QzRGOUFFMDIvNDA4MDQ1MjYy QUFBMTFFRTg2QTIwNjNCQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8KxAMA0GCSqGSIb3DQEBCwUAA4IBAQC+k2JWmHNK8PMMW/yY Sw/4QgWxG84fEDVPu5SF2kFpOMzSmxHmLkykk4JrICYuLsxoBsW2owZMZv1bx2Kq AcCmwnwHKGm8gJ8q63loedmB5Bosh+wn3LamBlxjfSjtPS7GwG4oVLLO0VWjM+7/ uld/68IUplS3HpnTLH4QUBICvEx4PSYpeoHWpK84WWkKk93K9hQEAeVk/1JN/46h YxlOU6ZnsR9P6IfyjvRg8EPrSwmD20KDCqWEugzvRfemsMkVrOf8yU27nqFC+iAK neVtgXHb+Ea576xe398ptYBPkWLvCcja3SWn2/QVRMySpUc+AhZs3jPWTxDWFxvr 2L0f -----END CERTIFICATE-----Generated at Thu Jul 23 23:57:26 2026 by rpki-client