$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/EDC1397C85F411F18488A9A174A30FBC.roa File: EDC1397C85F411F18488A9A174A30FBC.roa (raw, json) Hash identifier: kbFl5HBNjj1DSHsiPYVwn/K2tENHSOK+iNkY355z82A= Subject key identifier: 2B:D9:CB:12:FB:73:64:BD:3D:AF:8C:E0:1F:59:E2:60:8F:E0:4B:D4 Certificate issuer: /CN=A91F53E8/serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626 Certificate serial: 02 Authority key identifier: 94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/EDC1397C85F411F18488A9A174A30FBC.roa Signing time: Wed 22 Jul 2026 17:44:04 +0000 ROA not before: Wed 22 Jul 2026 17:44:03 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 149287 IP address blocks: 2001:df7:3d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53E8, serialNumber=9442F537ECCEB0320ACA12FC79C842EC0FFD0626 Validity Not Before: Jul 22 17:44:03 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a610163-0406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:19:2d:d0:55:e1:0f:e2:9b:4f:51:ca:62: 89:f4:d1:e7:85:57:b2:57:4f:bc:c4:a9:5a:19:10: c7:b3:8e:cf:6f:57:db:bb:9e:d1:13:69:98:ab:4f: a9:dc:f5:56:20:59:b9:09:a5:c9:cc:f2:55:6e:c7: ce:d6:fb:1b:d5:e7:c4:b0:f9:35:f1:d4:18:42:11: 5f:b7:0d:d5:c0:94:f4:b3:9f:b5:73:16:16:92:3a: e3:f2:dc:30:79:a9:b2:d4:d5:58:14:1f:89:40:61: 06:bc:78:c0:48:19:c2:3b:71:da:91:c6:ff:e0:b8: 79:fe:af:f3:d6:c9:6f:74:56:82:d4:3c:3e:cc:61: 2c:ed:96:e6:8f:6e:08:53:45:40:cb:a3:b9:ca:72: 18:b3:cf:ee:b0:54:da:0f:96:c8:0d:7e:a0:21:1e: e8:27:79:09:3f:a7:2c:de:97:89:e9:74:3d:48:65: 12:ad:fc:b8:90:df:ac:cc:ac:02:13:20:76:98:cb: 8a:7d:64:bb:d3:e9:65:38:dd:22:73:37:41:86:88: 0f:d2:37:77:c6:60:cf:fd:93:14:bd:66:66:45:3f: b1:eb:fb:e3:ce:18:e2:18:81:ca:c1:c3:a7:f8:31: 67:e8:88:a5:cd:f9:8d:98:cc:2f:ca:63:91:f5:57: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D9:CB:12:FB:73:64:BD:3D:AF:8C:E0:1F:59:E2:60:8F:E0:4B:D4 X509v3 Authority Key Identifier: keyid:94:42:F5:37:EC:CE:B0:32:0A:CA:12:FC:79:C8:42:EC:0F:FD:06:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/lEL1N-zOsDIKyhL8echC7A_9BiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEL1N-zOsDIKyhL8echC7A_9BiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/7805FA9C85F411F1B9A0048874A30FBC/EDC1397C85F411F18488A9A174A30FBC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df7:3d40::/48 Signature Algorithm: sha256WithRSAEncryption 70:f3:10:fa:2e:fc:7f:8e:b2:68:50:78:b1:fe:c3:67:98:9c: 3c:8a:0c:12:d8:2e:55:5e:f5:d6:cf:b5:8a:ef:e8:39:dc:15: 33:d0:64:91:6e:8c:4b:48:a9:51:b1:c2:b9:5e:aa:42:83:8f: 6f:94:60:a6:52:93:f3:fe:1c:66:b5:1f:f7:4a:5a:be:85:9d: bf:4e:b1:11:f1:af:f1:cb:ee:c4:ee:d7:c1:a7:a5:f8:2b:00: 1f:e4:1e:13:6a:01:f0:bf:de:f1:0b:81:99:66:90:c2:87:03: dd:21:61:90:a0:cc:96:20:8e:50:e5:5f:05:17:47:be:03:f5: 49:09:03:24:11:21:92:05:f4:16:4a:d4:61:a6:5a:48:a0:b9: 81:f3:9f:5d:8d:74:06:81:18:f4:a8:78:e7:ef:f6:84:1e:77: a1:6f:ab:f2:d1:7e:7c:66:4b:09:6b:7b:5c:98:fb:ac:ad:da: 81:57:47:96:46:74:ba:10:32:61:bc:1d:0f:4b:73:d1:95:21: 52:0d:75:ba:5a:c6:57:ca:88:ab:d8:82:c7:fa:dc:8f:3d:37: ff:40:9e:98:68:b5:21:1e:75:f5:31:0d:0e:96:9e:da:cf:62: 25:48:03:97:2f:d7:c1:f9:80:e8:f4:cc:39:32:9b:9e:7e:93: 24:e5:6b:43 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTNFODExMC8GA1UEBRMoOTQ0MkY1MzdFQ0NFQjAzMjBBQ0ExMkZDNzlDODQyRUMw RkZEMDYyNjAeFw0yNjA3MjIxNzQ0MDNaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjEwMTYzLTA0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaEhkt0FXhD+KbT1HKYon00eeFV7JXT7zEqVoZEMezjs9vV9u7ntETaZirT6nc 9VYgWbkJpcnM8lVux87W+xvV58Sw+TXx1BhCEV+3DdXAlPSzn7VzFhaSOuPy3DB5 qbLU1VgUH4lAYQa8eMBIGcI7cdqRxv/guHn+r/PWyW90VoLUPD7MYSztluaPbghT RUDLo7nKchizz+6wVNoPlsgNfqAhHugneQk/pyzel4npdD1IZRKt/LiQ36zMrAIT IHaYy4p9ZLvT6WU43SJzN0GGiA/SN3fGYM/9kxS9ZmZFP7Hr++POGOIYgcrBw6f4 MWfoiKXN+Y2YzC/KY5H1V0FxAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUK9nLEvtz ZL09r4zgH1niYI/gS9QwHwYDVR0jBBgwFoAUlEL1N+zOsDIKyhL8echC7A/9BiYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0U4Lzc4MDVGQTlDODVG NDExRjFCOUEwMDQ4ODc0QTMwRkJDL2xFTDFOLXpPc0RJS3loTDhlY2hDN0FfOUJp WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEVMMU4tek9zRElLeWhMOGVjaEM3QV85QmlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNFOC83ODA1RkE5Qzg1RjQxMUYxQjlBMDA0ODg3NEEzMEZCQy9FREMxMzk3Qzg1 RjQxMUYxODQ4OEE5QTE3NEEzMEZCQy5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ33PUAwDQYJKoZIhvcNAQELBQADggEBAHDzEPou/H+OsmhQeLH+ w2eYnDyKDBLYLlVe9dbPtYrv6DncFTPQZJFujEtIqVGxwrleqkKDj2+UYKZSk/P+ HGa1H/dKWr6Fnb9OsRHxr/HL7sTu18GnpfgrAB/kHhNqAfC/3vELgZlmkMKHA90h YZCgzJYgjlDlXwUXR74D9UkJAyQRIZIF9BZK1GGmWkiguYHzn12NdAaBGPSoeOfv 9oQed6Fvq/LRfnxmSwlre1yY+6yt2oFXR5ZGdLoQMmG8HQ9Lc9GVIVINdbpaxlfK iKvYgsf63I89N/9AnphotSEedfUxDQ6WntrPYiVIA5cv18H5gOj0zDkym55+kyTl a0M= -----END CERTIFICATE-----Generated at Fri Jul 24 09:59:05 2026 by rpki-client