$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa File: CA9C62B6011911F0A7636250C4F9AE02.roa (raw, json) Hash identifier: FHAY3Htwxch2FFTA3f0b/wxleH7q9MS7UbS2oOU+tmc= Subject key identifier: 55:20:D5:D8:47:79:2C:74:7A:20:DB:BF:F0:07:A3:E0:6D:53:0A:C0 Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0C63 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa Signing time: Tue 28 Jul 2026 19:41:18 +0000 ROA not before: Tue 28 Jul 2026 19:41:18 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 55569 IP address blocks: 2400:8800:1002::/48 maxlen: 48 2400:8800:1003::/48 maxlen: 48 2400:8800:1004::/48 maxlen: 48 2400:8800:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Jul 28 19:41:18 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6905de-bb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:66:4c:6d:37:e1:c1:15:76:19:5d:51:35: 1e:47:9d:e4:a1:01:ad:b7:63:6e:14:c7:a5:cb:3b: b2:ff:25:63:9c:d3:4f:c5:35:d0:69:84:db:a0:4c: ed:61:19:ca:12:fe:8b:9a:eb:be:ac:7c:99:2c:f4: a4:34:14:48:84:ae:d7:04:f3:11:39:2c:43:7c:90: b6:42:bb:18:d3:fa:5a:77:6f:de:33:5a:07:80:de: ef:d8:e6:5e:b7:33:7b:41:10:ed:5a:ca:e5:9e:e7: ce:08:88:15:80:fd:af:3c:e3:d3:72:76:0a:2a:3b: 60:d4:d9:d8:08:a3:99:e7:f7:f1:f3:69:85:a9:55: f7:9a:d2:ec:6f:7b:63:23:25:98:48:f5:19:ef:c9: d0:e8:f5:e2:8f:15:11:55:38:e1:a7:50:27:2a:3a: e6:8b:14:1a:00:41:21:38:13:d0:5e:75:76:c5:39: ae:c6:93:d2:cf:51:56:3b:2f:50:ec:0e:05:14:9b: 0b:a6:6e:bf:50:85:55:3b:41:88:ff:e9:51:53:79: fa:ce:20:fd:8d:d4:b4:ce:5b:20:30:bf:07:bf:4f: 4c:89:6c:66:f6:2a:d3:f2:29:57:52:8d:1f:f1:1c: 54:52:eb:c5:cf:3a:f0:d2:87:66:01:16:f5:e5:3c: d9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:20:D5:D8:47:79:2C:74:7A:20:DB:BF:F0:07:A3:E0:6D:53:0A:C0 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:8800:1002::-2400:8800:1005:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8a:fb:51:08:ec:16:8a:ba:d1:b9:5d:44:4d:d3:f3:a9:76:42: 8c:d5:37:07:20:53:25:d2:6c:5c:f9:0d:43:19:85:46:7a:ce: 56:10:a6:d6:1c:58:05:83:1d:83:d1:c2:2e:46:76:50:82:42: 08:7b:60:41:ee:f2:2f:d8:8b:cf:ad:ba:f9:cb:e1:eb:bb:c0: 9a:44:54:d7:7f:58:ee:e7:8e:ba:c2:93:fb:be:ae:33:13:f8: 71:5b:ea:a3:3a:82:7e:b3:12:b1:63:56:95:20:39:7f:8c:b9: 69:89:28:4c:d0:1f:bd:b7:c5:04:34:61:0d:c4:9b:12:ea:3c: fb:de:ea:e9:84:d6:0b:77:09:88:19:7f:3e:28:0f:fb:07:ce: 66:44:d5:0f:62:e3:37:0e:fe:2c:ae:cd:ad:d3:bc:6d:14:64: 07:45:11:4f:17:2f:0c:b0:8f:66:4f:97:83:8c:42:90:fe:05: 89:f4:4f:d3:ea:7b:31:90:f8:28:61:97:e9:d4:2d:25:a8:cd: a1:19:28:ef:0b:dc:49:a9:75:a9:cb:e7:ab:03:e5:5b:dc:d8: 4f:0d:56:33:ed:5e:14:2f:60:78:6d:c2:3f:d5:c2:2d:0f:42: 84:17:0d:39:ad:a4:3f:bc:0e:70:8c:dd:aa:ce:a1:9d:9f:fc: e5:67:98:34 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjYwNzI4MTk0MTE4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDVkZS1iYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZpmTG034cEVdhldUTUeR53koQGtt2NuFMelyzuy/yVjnNNPxTXQaYTboEzt YRnKEv6Lmuu+rHyZLPSkNBRIhK7XBPMROSxDfJC2QrsY0/pad2/eM1oHgN7v2OZe tzN7QRDtWsrlnufOCIgVgP2vPOPTcnYKKjtg1NnYCKOZ5/fx82mFqVX3mtLsb3tj IyWYSPUZ78nQ6PXijxURVTjhp1AnKjrmixQaAEEhOBPQXnV2xTmuxpPSz1FWOy9Q 7A4FFJsLpm6/UIVVO0GI/+lRU3n6ziD9jdS0zlsgML8Hv09MiWxm9irT8ilXUo0f 8RxUUuvFzzrw0odmARb15TzZpQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFFUg1dhH eSx0eiDbv/AHo+BtUwrAMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvQ0E5QzYyQjYw MTE5MTFGMEE3NjM2MjUwQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwEkAIgAEAIDBwEkAIgAEAQwDQYJKoZIhvcNAQELBQADggEBAIr7 UQjsFoq60bldRE3T86l2QozVNwcgUyXSbFz5DUMZhUZ6zlYQptYcWAWDHYPRwi5G dlCCQgh7YEHu8i/Yi8+tuvnL4eu7wJpEVNd/WO7njrrCk/u+rjMT+HFb6qM6gn6z ErFjVpUgOX+MuWmJKEzQH723xQQ0YQ3EmxLqPPve6umE1gt3CYgZfz4oD/sHzmZE 1Q9i4zcO/iyuza3TvG0UZAdFEU8XLwywj2ZPl4OMQpD+BYn0T9PqezGQ+Chhl+nU LSWozaEZKO8L3EmpdanL56sD5Vvc2E8NVjPtXhQvYHhtwj/Vwi0PQoQXDTmtpD+8 DnCM3arOoZ2f/OVnmDQ= -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:20 2026 by rpki-client