$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/9D003F28621711E9B8C69E15C4F9AE02.roa File: 9D003F28621711E9B8C69E15C4F9AE02.roa (raw, json) Hash identifier: wH/YBuSIvwTFmyy31k9N28U8ny+6AQtP4uVAhBFpStc= Subject key identifier: 50:59:3D:66:45:78:97:5A:36:A9:1A:8F:17:A2:5B:DD:0A:40:29:B0 Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12F6 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/9D003F28621711E9B8C69E15C4F9AE02.roa Signing time: Fri 30 Oct 2026 17:33:56 +0000 ROA not before: Fri 30 Oct 2026 17:33:56 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 13335 IP address blocks: 2405:8100:52::/48 maxlen: 48 2405:8100:57::/48 maxlen: 48 2405:8100:8001::/48 maxlen: 48 2405:8100:8002::/48 maxlen: 48 2405:8100:8003::/48 maxlen: 48 2405:8100:8004::/48 maxlen: 48 2405:8100:8005::/48 maxlen: 48 2405:8100:c000::/38 maxlen: 38 2405:8100:c400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4854 (0x12f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Oct 30 17:33:56 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae4d504-1a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:26:32:00:00:dc:6e:67:33:67:6a:5a:48: 99:f2:ab:21:a7:c3:38:e5:8c:61:94:94:49:00:6c: a2:9d:d5:ab:95:88:62:61:bf:c6:fa:ec:49:d0:13: d6:84:e4:de:9c:6c:7f:80:4e:9b:fe:69:42:03:6d: 3d:21:53:8f:dc:6d:10:8c:88:08:dc:21:38:69:ce: b0:8e:09:c8:0a:86:99:92:89:ee:76:5e:c5:4c:0d: e0:74:a8:fc:35:c2:14:34:6a:f8:04:8e:b2:88:53: 28:74:db:c8:1e:df:66:1b:51:af:d9:f2:64:84:0f: 4d:44:cb:be:fd:03:e3:d9:df:96:f4:c1:78:fa:1f: 67:6d:f6:16:8e:06:82:d9:42:ce:8e:18:24:c1:f4: 57:6b:93:b0:40:4f:e4:c8:cd:fb:a2:ad:e0:fe:5c: 94:e7:7e:13:a7:54:3b:e5:c2:96:17:a5:63:77:94: 2e:e4:63:15:e1:f1:35:d2:29:d8:3d:7c:85:f8:77: a0:b5:3e:f2:2b:17:fa:c9:e9:2f:ed:89:81:34:50: 8d:cf:fc:dd:95:74:66:78:a2:e1:87:57:a6:98:1c: f2:d1:78:28:fa:4a:dd:e4:b5:16:4a:ad:66:31:e9: dd:a1:d6:82:cf:f9:e6:a1:21:ef:61:90:49:53:8c: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:59:3D:66:45:78:97:5A:36:A9:1A:8F:17:A2:5B:DD:0A:40:29:B0 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/9D003F28621711E9B8C69E15C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2405:8100:52::/48 2405:8100:57::/48 2405:8100:8001::-2405:8100:8005:ffff:ffff:ffff:ffff:ffff 2405:8100:c000::-2405:8100:c400:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2b:6b:ed:d0:10:79:fd:ec:50:3e:62:3e:a1:0e:f1:12:76:cc: d9:a1:8e:7c:99:ba:39:88:3e:cb:d9:65:e8:6f:46:6a:e4:fb: dd:84:fb:d2:c0:e3:85:f4:2e:12:7f:42:cf:0c:72:c1:e8:d8: f2:0c:99:6d:92:8a:44:f9:8d:cb:fb:df:73:04:2f:6b:47:b2: 3b:1f:d0:04:03:35:26:36:9e:8d:ed:b0:39:73:8e:da:06:14: 7b:60:e2:86:29:4e:48:c3:5d:bb:86:fa:31:24:c6:43:92:92: be:07:67:5d:27:b7:25:ff:6d:a2:47:93:c2:31:0d:f2:79:08: c4:47:c0:b6:aa:0d:fd:d5:48:43:bc:5b:62:2e:ac:91:99:bc: fa:06:37:ba:7c:be:da:f4:cb:de:fd:2d:c1:c7:65:6d:53:3e: a0:85:ae:45:83:31:d7:4f:1a:cf:13:ea:d1:0b:08:f8:d9:b4: ab:de:33:8f:fa:3e:34:36:93:92:17:d1:59:bc:02:c6:c8:d7: ac:04:e9:0e:b4:5f:47:41:ac:b7:c7:ef:fa:4c:d4:3f:49:dd: 07:97:39:1d:aa:16:cd:db:74:b5:54:7c:23:18:b3:66:0d:87: 27:85:8d:d8:83:7b:ad:17:c2:d8:22:fc:a4:7d:3a:58:78:f6: 58:6c:a1:0e -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYxMDMwMTczMzU2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU0ZDUwNC0xYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZImMgAA3G5nM2dqWkiZ8qshp8M45YxhlJRJAGyindWrlYhiYb/G+uxJ0BPW hOTenGx/gE6b/mlCA209IVOP3G0QjIgI3CE4ac6wjgnICoaZkonudl7FTA3gdKj8 NcIUNGr4BI6yiFModNvIHt9mG1Gv2fJkhA9NRMu+/QPj2d+W9MF4+h9nbfYWjgaC 2ULOjhgkwfRXa5OwQE/kyM37oq3g/lyU534Tp1Q75cKWF6Vjd5Qu5GMV4fE10inY PXyF+HegtT7yKxf6yekv7YmBNFCNz/zdlXRmeKLhh1emmBzy0Xgo+krd5LUWSq1m MendodaCz/nmoSHvYZBJU4wBrwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFFBZPWZF eJdaNqkajxeiW90KQCmwMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM3RjIvNDhFRkQxN0NGMUE3MTFFOEFBNjE0RjUxQzRGOUFFMDIvOUQwMDNGMjg2 MjE3MTFFOUI4QzY5RTE1QzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTA/ BAIAAjA5AwcAJAWBAABSAwcAJAWBAABXMBIDBwAkBYEAgAEDBwEkBYEAgAQwEQMG BiQFgQDAAwcAJAWBAMQAMA0GCSqGSIb3DQEBCwUAA4IBAQAra+3QEHn97FA+Yj6h DvESdszZoY58mbo5iD7L2WXob0Zq5PvdhPvSwOOF9C4Sf0LPDHLB6NjyDJltkopE +Y3L+99zBC9rR7I7H9AEAzUmNp6N7bA5c47aBhR7YOKGKU5Iw127hvoxJMZDkpK+ B2ddJ7cl/22iR5PCMQ3yeQjER8C2qg391UhDvFtiLqyRmbz6Bje6fL7a9Mve/S3B x2VtUz6gha5FgzHXTxrPE+rRCwj42bSr3jOP+j40NpOSF9FZvALGyNesBOkOtF9H Qay3x+/6TNQ/Sd0HlzkdqhbN23S1VHwjGLNmDYcnhY3Yg3utF8LYIvykfTpYePZY bKEO -----END CERTIFICATE-----Generated at Sat Nov 14 20:44:58 2026 by rpki-client