$ rpki-client -vvvf rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/3283B8BE9A0F11F0BC057E7DC4F9AE02.roa File: 3283B8BE9A0F11F0BC057E7DC4F9AE02.roa (raw, json) Hash identifier: zX3gv3YtbuR/8oVRSELhlIacHaCi2Cxr48AY329HIg4= Subject key identifier: 83:FF:5A:4C:DC:BE:8D:6C:3D:88:96:9C:51:99:E6:40:8C:63:5B:EC Certificate issuer: /CN=A91491CC/serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A Certificate serial: A6 Authority key identifier: F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/3283B8BE9A0F11F0BC057E7DC4F9AE02.roa Signing time: Wed 05 Aug 2026 08:57:14 +0000 ROA not before: Wed 05 Aug 2026 08:57:14 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154084 IP address blocks: 2001:df5:e7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A Validity Not Before: Aug 5 08:57:14 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a72fae9-da5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:0d:e9:aa:9d:68:de:7b:b7:50:49:61:4d: 00:17:b2:42:e8:a3:3c:92:2c:84:75:97:1a:5c:ff: e3:67:f9:86:56:ee:5c:4b:75:9b:07:4b:cc:86:e0: 3c:d0:2c:b3:bb:d5:d2:74:9b:6d:07:07:78:2f:95: f4:ea:3d:15:b7:ba:cd:ea:d9:73:4a:ee:30:28:ac: 09:34:b8:01:59:f3:f5:72:55:71:85:58:f5:74:a0: 63:d4:df:bd:24:df:e5:bb:09:98:e9:af:ec:fc:98: 8e:9d:fc:25:c6:15:8a:8b:36:e3:34:f7:94:8d:48: 98:d9:05:7a:7c:d3:fd:f6:ae:d2:f5:49:08:29:87: 65:db:1f:05:bc:b6:bb:d3:f1:77:57:3d:ff:d3:3c: ea:48:b6:0f:2d:07:b1:11:af:92:b9:7d:b8:a2:77: bb:10:9c:c5:67:83:27:49:1c:6e:3a:f9:f7:3f:b9: 50:2a:88:15:11:31:bc:9d:f2:b1:a8:ff:aa:db:49: ed:d7:08:55:f8:1e:6d:41:54:48:c4:9f:f1:d6:d2: 95:8c:2e:62:9f:30:c2:fb:e8:fa:ae:42:5f:8c:e3: a6:6a:a4:54:8e:6f:46:d8:27:4f:2b:cd:13:25:65: d8:e0:a7:30:56:cf:74:f2:6c:2b:90:86:01:1a:fb: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FF:5A:4C:DC:BE:8D:6C:3D:88:96:9C:51:99:E6:40:8C:63:5B:EC X509v3 Authority Key Identifier: keyid:F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/3283B8BE9A0F11F0BC057E7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:e7c0::/48 Signature Algorithm: sha256WithRSAEncryption 85:7c:7d:79:e5:05:2e:34:8c:1b:45:4e:e7:f3:a3:6e:8b:ec: f8:c6:2d:22:4a:2c:1f:d5:7c:07:0b:42:5a:0f:ec:cd:de:cb: f4:50:a9:24:70:66:dd:80:d4:31:f8:3c:43:6f:62:b8:0e:fe: cc:bf:67:8d:3d:b4:ee:07:53:d9:ab:88:d6:26:70:97:d3:0c: 7a:80:27:87:c7:02:9c:fe:52:b9:ed:63:d4:49:a2:41:9c:f1: 93:5e:a8:47:3f:56:00:e9:ee:30:20:66:55:7d:64:10:88:af: e1:c8:bf:c9:bf:e4:91:25:48:6b:d9:b3:d3:04:8b:3a:b6:f9: ef:ad:d9:75:66:0d:54:75:26:07:b3:96:63:93:fd:1a:94:41: 81:b1:ec:af:13:0c:36:f2:a1:ff:4d:ea:04:6a:23:60:4b:b0: 97:3e:c8:c3:cd:72:32:80:17:65:44:dd:61:53:3f:f5:90:09: f3:28:bc:a0:27:a0:be:83:bd:a0:96:1c:d9:7e:80:b6:7d:de: 30:90:ff:1a:c1:11:d1:66:c2:aa:de:44:12:be:2a:e5:82:af: 33:23:b1:69:32:7a:d7:b6:b6:1e:54:ac:64:ac:75:43:02:b2: d4:60:46:87:28:91:65:7d:e8:7a:c1:72:df:cd:48:c4:a2:ce: cc:c6:64:12 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxQ0MxMTAvBgNVBAUTKEYwNjA0MjJDMTc1QzlBRTVBRUQ3Q0MxRTI4MTBGMjQ5 N0Y4RDk1OUEwHhcNMjYwODA1MDg1NzE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyZmFlOS1kYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFYN6aqdaN57t1BJYU0AF7JC6KM8kiyEdZcaXP/jZ/mGVu5cS3WbB0vMhuA8 0Cyzu9XSdJttBwd4L5X06j0Vt7rN6tlzSu4wKKwJNLgBWfP1clVxhVj1dKBj1N+9 JN/luwmY6a/s/JiOnfwlxhWKizbjNPeUjUiY2QV6fNP99q7S9UkIKYdl2x8FvLa7 0/F3Vz3/0zzqSLYPLQexEa+SuX24one7EJzFZ4MnSRxuOvn3P7lQKogVETG8nfKx qP+q20nt1whV+B5tQVRIxJ/x1tKVjC5inzDC++j6rkJfjOOmaqRUjm9G2CdPK80T JWXY4KcwVs908mwrkIYBGvt5AQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFIP/Wkzc vo1sPYiWnFGZ5kCMY1vsMB8GA1UdIwQYMBaAFPBgQiwXXJrlrtfMHigQ8kl/jZWa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTFDQy9BNkUyM0I3ODlB MEUxMUYwODlDODhCN0NDNEY5QUUwMi84R0JDTEJkY211V3UxOHdlS0JEeVNYLU5s Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHQkNMQmRjbXVXdTE4d2VLQkR5U1gtTmxaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDkxQ0MvQTZFMjNCNzg5QTBFMTFGMDg5Qzg4QjdDQzRGOUFFMDIvMzI4M0I4QkU5 QTBGMTFGMEJDMDU3RTdEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9efAMA0GCSqGSIb3DQEBCwUAA4IBAQCFfH155QUuNIwbRU7n 86Nui+z4xi0iSiwf1XwHC0JaD+zN3sv0UKkkcGbdgNQx+DxDb2K4Dv7Mv2eNPbTu B1PZq4jWJnCX0wx6gCeHxwKc/lK57WPUSaJBnPGTXqhHP1YA6e4wIGZVfWQQiK/h yL/Jv+SRJUhr2bPTBIs6tvnvrdl1Zg1UdSYHs5Zjk/0alEGBseyvEww28qH/TeoE aiNgS7CXPsjDzXIygBdlRN1hUz/1kAnzKLygJ6C+g72glhzZfoC2fd4wkP8awRHR ZsKq3kQSvirlgq8zI7FpMnrXtrYeVKxkrHVDArLUYEaHKJFlfeh6wXLfzUjEos7M xmQS -----END CERTIFICATE-----Generated at Thu Sep 24 20:41:29 2026 by rpki-client