$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa File: E07CB68455A211F0B55F5674C4F9AE02.roa (raw, json) Hash identifier: hj5yTQrPhUFrbe01vJX5J61j85SETSCDRpOEhmJIuBY= Subject key identifier: AF:76:71:D9:B3:5D:39:A9:8E:47:FA:51:C0:EE:3E:28:58:9F:20:20 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 02FC Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa Signing time: Thu 05 Nov 2026 03:49:24 +0000 ROA not before: Thu 05 Nov 2026 03:49:24 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 151810 IP address blocks: 2402:be0::/34 maxlen: 42 2402:be0:4000::/34 maxlen: 42 2402:be0:8000::/34 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Nov 5 03:49:24 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aebfcc4-4ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:c9:3a:3b:76:f2:09:a8:1a:53:32:3d:75: 27:2b:88:e7:a5:54:d8:5c:a3:1f:ac:e4:bb:11:5c: 0b:86:29:79:bb:e8:89:32:21:86:c5:5a:c9:d1:fd: 9e:1e:82:18:9a:8a:49:42:b7:89:6e:5e:8b:2a:fc: 38:71:07:06:51:45:6e:17:24:63:db:aa:b7:ea:50: 8a:a9:04:e0:1f:c9:06:bc:ab:18:b1:d4:ec:06:e9: c5:21:c4:9c:6c:1d:f5:c9:51:ea:f8:36:74:15:7b: 0a:56:9c:aa:27:c0:f3:ba:6a:65:11:66:7d:46:94: 18:aa:1b:f3:a7:d0:b9:5c:cb:46:38:19:09:b6:1b: 66:66:72:30:93:c2:02:18:ef:40:c4:e1:42:b8:9f: 63:b6:e0:f9:fa:1a:9d:c2:32:b3:25:57:3c:94:03: 25:8c:d5:e6:24:77:24:b5:b7:d2:1f:5c:95:d3:8f: bf:c5:9a:18:3f:b4:16:b4:d4:70:32:02:31:38:52: 3d:3d:fa:04:99:a6:51:42:f9:13:8e:a7:cb:c3:18: 32:a0:97:f4:47:0f:0c:36:b4:bf:cc:3c:63:67:6e: 88:9f:79:a9:f1:bf:ab:9b:f7:15:bc:28:86:48:b6: 73:60:f7:9e:bf:bd:0a:4f:7b:31:84:5d:3e:b3:db: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:76:71:D9:B3:5D:39:A9:8E:47:FA:51:C0:EE:3E:28:58:9F:20:20 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/E07CB68455A211F0B55F5674C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:be0::-2402:be0:bfff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 43:b3:39:98:d9:2e:ff:4b:3a:5c:ef:84:90:d8:73:4c:de:3b: 02:03:16:bb:8c:19:f0:0d:99:e3:83:32:a9:c8:19:c8:42:46: 33:bf:83:f0:1e:b9:66:c0:37:ac:e2:57:0f:0a:98:22:f5:da: 47:8f:db:31:67:15:4f:cf:86:e8:b6:7d:44:ab:94:11:f6:d6: bb:2c:fe:36:20:26:c1:96:5c:55:a5:5f:48:88:8c:13:5d:49: 95:92:22:58:2f:a3:20:e0:6d:3a:e7:e3:84:49:e0:7c:d6:dc: b2:3a:d3:32:75:13:b4:5a:fd:91:fa:80:4e:77:37:0e:67:eb: 95:99:fb:1e:bf:16:6f:21:da:07:fe:69:51:12:5c:27:16:b0: c8:f3:4b:fa:a5:de:b4:35:17:fa:db:ab:bf:26:e9:33:f6:91: c3:10:36:9b:d1:01:fc:84:35:7d:e5:5b:64:2c:5b:92:3c:f2: 13:42:94:95:ad:6f:5f:fd:f9:e4:8b:28:51:fb:65:57:3a:59: 13:b5:45:ff:35:ca:31:30:d8:1d:6b:e3:6d:07:62:1e:05:da: d0:6e:d9:17:0d:9e:55:31:16:6d:fe:b5:3d:8e:fd:80:20:1e: 3a:5c:3f:08:13:3d:b4:91:56:fa:2a:e0:b6:3c:e9:46:ab:c8: 72:fa:2f:0e -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjYxMTA1MDM0OTI0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWViZmNjNC00Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmnJOjt28gmoGlMyPXUnK4jnpVTYXKMfrOS7EVwLhil5u+iJMiGGxVrJ0f2e HoIYmopJQreJbl6LKvw4cQcGUUVuFyRj26q36lCKqQTgH8kGvKsYsdTsBunFIcSc bB31yVHq+DZ0FXsKVpyqJ8DzumplEWZ9RpQYqhvzp9C5XMtGOBkJthtmZnIwk8IC GO9AxOFCuJ9jtuD5+hqdwjKzJVc8lAMljNXmJHcktbfSH1yV04+/xZoYP7QWtNRw MgIxOFI9PfoEmaZRQvkTjqfLwxgyoJf0Rw8MNrS/zDxjZ26In3mp8b+rm/cVvCiG SLZzYPeev70KT3sxhF0+s9vWwQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFK92cdmz XTmpjkf6UcDuPihYnyAgMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvRTA3Q0I2ODQ1 NUEyMTFGMEI1NUY1Njc0QzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAAjARMA8DBQUkAgvgAwYGJAIL4IAwDQYJKoZIhvcNAQELBQADggEBAEOzOZjZ Lv9LOlzvhJDYc0zeOwIDFruMGfANmeODMqnIGchCRjO/g/AeuWbAN6ziVw8KmCL1 2keP2zFnFU/Phui2fUSrlBH21rss/jYgJsGWXFWlX0iIjBNdSZWSIlgvoyDgbTrn 44RJ4HzW3LI60zJ1E7Ra/ZH6gE53Nw5n65WZ+x6/Fm8h2gf+aVESXCcWsMjzS/ql 3rQ1F/rbq78m6TP2kcMQNpvRAfyENX3lW2QsW5I88hNClJWtb1/9+eSLKFH7ZVc6 WRO1Rf81yjEw2B1r420HYh4F2tBu2RcNnlUxFm3+tT2O/YAgHjpcPwgTPbSRVvoq 4LY86UaryHL6Lw4= -----END CERTIFICATE-----Generated at Sun Nov 15 11:48:51 2026 by rpki-client