$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/D0CDFEEA406E11EFA085272AC4F9AE02.roa File: D0CDFEEA406E11EFA085272AC4F9AE02.roa (raw, json) Hash identifier: 1x8IbrPB79S9fDKHEpoprdpnMZNbbRc8APbn4VWHD7c= Subject key identifier: 67:ED:D2:67:EB:F3:11:48:DA:22:7E:E4:00:4E:2D:70:32:5A:6C:B1 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 019B Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/D0CDFEEA406E11EFA085272AC4F9AE02.roa Signing time: Mon 20 Jul 2026 14:55:33 +0000 ROA not before: Mon 20 Jul 2026 14:55:33 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 152900 IP address blocks: 2401:a4a0:1::/48 maxlen: 48 2401:a4a0:2::/48 maxlen: 48 2401:a4a0:3::/48 maxlen: 48 2401:a4a0:4::/48 maxlen: 48 2401:a4a0:f::/48 maxlen: 48 2401:a4a0:a4a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Jul 20 14:55:33 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a5e36e5-90cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:77:1a:9a:7b:b6:dd:23:21:d2:8a:97:fb: 18:11:c7:7e:bb:f2:01:73:2f:05:c7:16:3f:b2:18: 49:ae:a7:79:ff:e5:14:24:0e:72:15:96:72:fe:f0: f4:d3:cc:28:51:0f:59:cd:06:ef:ec:19:5e:c6:94: b9:bd:85:95:2d:b3:6c:92:50:a8:85:2c:4a:da:2c: 65:66:59:ba:f8:3e:fd:8f:c9:8a:a1:5a:9b:54:b3: ee:59:ad:0b:f2:95:ca:8e:de:17:e6:07:c1:d0:5b: a6:ca:5d:fc:b8:95:42:ca:89:55:95:17:f6:c3:ba: 36:d4:7b:da:bc:aa:65:29:91:e1:72:05:4e:6a:26: a4:c7:cb:0c:21:d5:26:2c:a8:1d:83:5d:28:9e:6b: b7:6a:b8:b8:0d:f4:dd:3f:7c:38:db:a8:83:a4:d2: 3a:b3:d7:a6:a7:4b:e6:46:26:8b:f4:50:38:cf:02: 68:60:99:04:b5:c8:a6:a4:eb:0a:41:40:19:0d:9b: 00:57:16:5f:3e:57:d2:e7:3f:b7:d0:c3:d6:8b:f4: a5:4b:ea:8a:94:35:90:1f:82:14:6e:20:ea:eb:14: 7a:21:5d:12:33:8b:88:e5:1c:4f:63:eb:e9:0a:04: 5b:85:9e:ba:91:fa:3a:3e:7c:54:74:d8:74:2d:53: 66:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:ED:D2:67:EB:F3:11:48:DA:22:7E:E4:00:4E:2D:70:32:5A:6C:B1 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/D0CDFEEA406E11EFA085272AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:a4a0:1::-2401:a4a0:4:ffff:ffff:ffff:ffff:ffff 2401:a4a0:f::/48 2401:a4a0:a4a0::/48 Signature Algorithm: sha256WithRSAEncryption 06:fe:fd:eb:fe:59:f4:2d:e6:bb:2b:3a:29:dc:79:05:dd:f0: 72:fd:11:b5:6b:97:4f:8d:34:60:de:63:0c:fc:d4:b1:24:40: 81:53:af:bd:dd:84:d7:77:4f:4c:48:b9:a3:5f:8d:fd:0d:79: 9b:7e:7f:1f:ea:81:c9:8e:a9:29:33:b0:03:33:99:5e:28:82: e9:58:19:89:dc:38:a6:6d:22:f3:6b:93:e7:c5:ee:67:f6:0e: 0a:9c:09:ec:1e:9a:f4:5b:f2:c6:eb:1a:89:3c:cb:2f:68:bf: 3f:2a:2b:77:9c:fc:07:89:d6:e9:8f:63:38:f4:c6:e6:cf:0f: 3d:bf:8c:18:31:a8:41:86:aa:90:e3:05:25:01:56:dc:e7:7e: 7d:0d:aa:00:fa:2d:e1:33:8d:12:66:b1:79:94:88:a5:4f:ac: 16:de:d4:be:d5:8d:1f:87:86:f6:99:a8:6a:30:4e:0f:4f:dc: 2d:8d:dd:33:81:03:9a:fa:67:14:40:6f:9e:d2:db:96:3a:83: 87:9e:e6:ea:6c:cd:7d:ea:c6:74:75:25:a2:38:33:1c:8c:05: e2:1d:58:87:30:75:96:7b:37:d3:63:a5:96:09:3f:33:bc:26: 1c:27:ef:07:59:91:72:05:0f:69:2d:e0:18:08:0e:93:20:6f: 6a:15:a8:d7 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjYwNzIwMTQ1NTMzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlMzZlNS05MGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXJ3Gpp7tt0jIdKKl/sYEcd+u/IBcy8FxxY/shhJrqd5/+UUJA5yFZZy/vD0 08woUQ9ZzQbv7BlexpS5vYWVLbNsklCohSxK2ixlZlm6+D79j8mKoVqbVLPuWa0L 8pXKjt4X5gfB0Fumyl38uJVCyolVlRf2w7o21HvavKplKZHhcgVOaiakx8sMIdUm LKgdg10onmu3ari4DfTdP3w426iDpNI6s9emp0vmRiaL9FA4zwJoYJkEtcimpOsK QUAZDZsAVxZfPlfS5z+30MPWi/SlS+qKlDWQH4IUbiDq6xR6IV0SM4uI5RxPY+vp CgRbhZ66kfo6PnxUdNh0LVNmowIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFGft0mfr 8xFI2iJ+5ABOLXAyWmyxMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlFMEEvMEJEOTg1RTgzRTY5MTFFRkEyQ0U2NzZBQzRGOUFFMDIvRDBDREZFRUE0 MDZFMTFFRkEwODUyNzJBQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAAjAmMBIDBwAkAaSgAAEDBwAkAaSgAAQDBwAkAaSgAA8DBwAkAaSgpKAwDQYJ KoZIhvcNAQELBQADggEBAAb+/ev+WfQt5rsrOinceQXd8HL9EbVrl0+NNGDeYwz8 1LEkQIFTr73dhNd3T0xIuaNfjf0NeZt+fx/qgcmOqSkzsAMzmV4ogulYGYncOKZt IvNrk+fF7mf2DgqcCewemvRb8sbrGok8yy9ovz8qK3ec/AeJ1umPYzj0xubPDz2/ jBgxqEGGqpDjBSUBVtznfn0NqgD6LeEzjRJmsXmUiKVPrBbe1L7VjR+HhvaZqGow Tg9P3C2N3TOBA5r6ZxRAb57S25Y6g4ee5upszX3qxnR1JaI4MxyMBeIdWIcwdZZ7 N9NjpZYJPzO8Jhwn7wdZkXIFD2kt4BgIDpMgb2oVqNc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:11:48 2026 by rpki-client