$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CA076DC768711F189D127AE62A30FBC.roa File: 0CA076DC768711F189D127AE62A30FBC.roa (raw, json) Hash identifier: B+CRC8QA0IUJTz5EYmudQPctrPx2AadG8/2UkIjCP2c= Subject key identifier: 91:C9:1D:04:78:1C:2D:92:22:9D:1B:61:C0:53:7B:D5:C8:38:85:52 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6E89 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CA076DC768711F189D127AE62A30FBC.roa Signing time: Fri 02 Oct 2026 15:31:00 +0000 ROA not before: Fri 02 Oct 2026 15:31:00 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151872 IP address blocks: 2001:df3:e4c0::/48 maxlen: 48 2001:df3:e8c0::/48 maxlen: 48 2001:df4:19c0::/48 maxlen: 48 2001:df4:1cc0::/48 maxlen: 48 2401:8ce0::/48 maxlen: 48 2401:9760::/48 maxlen: 48 2401:9a60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 14:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28297 (0x6e89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:31:00 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfce34-47bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:b1:ec:f9:0e:7c:dd:45:09:03:93:ef:73: c5:27:ef:aa:56:ff:a3:b8:45:06:92:a6:06:89:5d: 24:e8:74:7a:7a:8a:c5:7e:f0:a6:37:c6:c8:81:1e: 3c:8d:66:30:79:17:24:d0:79:47:cd:07:8d:71:76: 94:e0:fc:a7:7a:1c:d2:60:4a:1e:3b:3c:13:b5:5f: 87:56:98:f5:94:32:8f:fe:9c:04:66:dc:98:3a:97: 91:e2:81:ed:c3:fd:35:11:16:27:7e:7c:b2:8e:0c: 6f:cc:77:9e:4c:2d:7f:01:a7:27:a8:33:9d:30:b6: e8:c0:fc:75:ba:2a:11:ad:1a:1f:2e:77:f0:5a:40: eb:c3:f1:38:26:7b:57:3f:79:83:1d:00:0f:ef:08: c7:3a:a0:92:ef:f2:0d:77:06:6a:a0:e9:69:59:9d: d1:fa:c4:e6:bf:f5:ee:83:41:f6:70:54:42:12:e6: 66:ae:09:9f:0f:80:53:8a:55:94:81:48:41:10:f8: 09:c4:dc:e8:dc:32:52:fe:05:f1:9e:00:d4:65:af: 5d:b9:15:4b:9a:b8:ca:19:f5:ea:82:74:84:c0:3b: c3:6b:42:bf:4d:13:5d:d7:76:f8:99:c8:67:19:68: 28:4c:87:e1:65:5e:c8:6d:c8:c9:06:b0:e1:4d:f3: 7d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C9:1D:04:78:1C:2D:92:22:9D:1B:61:C0:53:7B:D5:C8:38:85:52 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CA076DC768711F189D127AE62A30FBC.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:e4c0::/48 2001:df3:e8c0::/48 2001:df4:19c0::/48 2001:df4:1cc0::/48 2401:8ce0::/48 2401:9760::/48 2401:9a60::/48 Signature Algorithm: sha256WithRSAEncryption ab:66:85:f8:ec:c9:ae:c6:52:3a:df:0e:85:8b:5b:f4:ec:8b: 60:50:e4:b1:f9:ce:6a:98:79:ba:d2:2c:50:09:61:9a:b9:e5: ca:bb:15:49:9d:be:45:48:6c:54:a1:b1:8b:c2:b8:85:c0:56: f6:4a:bc:82:ec:1a:f4:a6:51:41:fb:99:f3:ee:6f:b2:73:20: a8:e1:a8:61:44:a3:a2:cd:24:1a:26:fd:fb:6b:0a:ec:9c:25: a5:9d:04:14:f3:0e:62:c9:7a:44:92:e8:d8:1d:dd:39:71:a3: 41:2a:66:31:6c:c0:47:9f:02:4a:9c:02:8f:f9:d8:12:9b:fa: 3e:16:33:54:71:76:67:fa:8e:a4:57:ee:e1:aa:9e:f7:da:b0: 97:a5:37:ca:a6:5b:45:a6:ce:22:26:60:ee:3e:5e:cc:d8:9f: 31:8e:ff:0a:a6:40:b3:c6:0c:6d:23:a5:c8:24:0c:68:ff:25: e9:0e:66:73:22:52:02:fd:68:ab:d9:b3:32:63:b7:bd:c8:1b: 01:78:0b:57:d0:ff:75:ac:8b:dc:02:7b:d3:4f:1c:a6:d5:72: be:06:71:b9:ab:00:b3:2d:ed:74:0b:82:df:48:cf:e7:be:09: a8:87:a6:f1:33:6e:39:66:f2:04:82:cc:1f:fd:cc:09:33:fc: 40:6b:91:af -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICbokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzMTAwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2UzNC00N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloqx7PkOfN1FCQOT73PFJ++qVv+juEUGkqYGiV0k6HR6eorFfvCmN8bIgR48 jWYweRck0HlHzQeNcXaU4PynehzSYEoeOzwTtV+HVpj1lDKP/pwEZtyYOpeR4oHt w/01ERYnfnyyjgxvzHeeTC1/AacnqDOdMLbowPx1uioRrRofLnfwWkDrw/E4JntX P3mDHQAP7wjHOqCS7/INdwZqoOlpWZ3R+sTmv/Xug0H2cFRCEuZmrgmfD4BTilWU gUhBEPgJxNzo3DJS/gXxngDUZa9duRVLmrjKGfXqgnSEwDvDa0K/TRNd13b4mchn GWgoTIfhZV7IbcjJBrDhTfN9iwIDAQABo4ICmTCCApUwHQYDVR0OBBYEFJHJHQR4 HC2SIp0bYcBTe9XIOIVSMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMENBMDc2REM3 Njg3MTFGMTg5RDEyN0FFNjJBMzBGQkMucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzBF BAIAAjA/AwcAIAEN8+TAAwcAIAEN8+jAAwcAIAEN9BnAAwcAIAEN9BzAAwcAJAGM 4AAAAwcAJAGXYAAAAwcAJAGaYAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCrZoX47Mmu xlI63w6Fi1v07ItgUOSx+c5qmHm60ixQCWGaueXKuxVJnb5FSGxUobGLwriFwFb2 SryC7Br0plFB+5nz7m+ycyCo4ahhRKOizSQaJv37awrsnCWlnQQU8w5iyXpEkujY Hd05caNBKmYxbMBHnwJKnAKP+dgSm/o+FjNUcXZn+o6kV+7hqp732rCXpTfKpltF ps4iJmDuPl7M2J8xjv8KpkCzxgxtI6XIJAxo/yXpDmZzIlIC/Wir2bMyY7e9yBsB eAtX0P91rIvcAnvTTxym1XK+BnG5qwCzLe10C4LfSM/nvgmoh6bxM245ZvIEgswf /cwJM/xAa5Gv -----END CERTIFICATE-----Generated at Sun Oct 4 17:45:50 2026 by rpki-client