$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa File: BB3F5AAE799511F098E98265C4F9AE02.roa (raw, json) Hash identifier: XQ0jrIDzzz795V8KPlS4sud0mU6PKmlJGnI9QUYw0ts= Subject key identifier: E1:EB:DD:C9:2F:F2:4A:20:6F:B8:D0:D3:32:61:8C:DA:97:F2:9A:45 Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: CC Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa Signing time: Thu 03 Sep 2026 07:56:44 +0000 ROA not before: Thu 03 Sep 2026 07:56:44 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2001:df5:fd40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Sep 3 07:56:44 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a99283c-89dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:9a:4e:0e:c1:ba:27:82:23:f8:58:d3:29: 00:ea:72:d8:d1:5c:ef:07:26:57:04:3e:c0:9c:90: 44:6d:8a:16:52:fa:48:49:57:24:9e:6d:82:04:41: 3f:ca:ee:db:0e:d0:ac:92:06:72:b3:a8:9d:69:06: 8e:90:f7:19:b1:90:49:35:d5:27:86:dd:a4:b4:11: 2d:d2:3c:47:59:6e:4f:f7:b2:78:07:a6:a4:f5:96: 36:72:7f:29:bb:ef:0d:6b:9d:40:b7:92:a8:9b:6f: 5d:05:9f:8e:b2:3f:26:8b:0c:b8:b9:af:83:e0:0e: af:bd:36:24:28:46:4d:d0:ec:b2:1e:55:7d:53:01: 0c:33:58:b1:ba:ec:ac:d0:5f:1d:d1:f2:32:ed:19: 68:d2:72:21:46:f0:82:6f:29:bd:06:12:71:d7:1a: 7f:50:5e:a7:47:05:31:d9:b9:57:d2:68:e4:51:d2: f0:e5:e1:5b:ee:ab:c6:16:b1:9c:a9:3d:e1:07:e9: 91:d6:90:b3:98:c6:34:89:dc:6a:da:4e:7a:b0:2e: fc:7c:16:08:85:dd:a0:10:7d:b2:02:8e:77:89:f5: f4:17:ad:2b:7f:e8:d3:65:d4:6a:f3:e5:73:3e:bb: 72:f1:80:ef:77:1f:b2:7f:a9:5b:a5:c9:5a:92:f6: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EB:DD:C9:2F:F2:4A:20:6F:B8:D0:D3:32:61:8C:DA:97:F2:9A:45 X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:fd40::/48 Signature Algorithm: sha256WithRSAEncryption 08:61:4d:e0:df:d2:d1:4f:2d:ba:b8:04:73:ce:55:cc:3b:c3: d3:8b:92:26:a8:47:02:72:77:64:cb:48:8a:e9:2c:8e:11:61: c0:78:32:25:99:0f:bb:2d:47:cf:33:a0:45:41:2c:b8:4a:5a: 06:85:71:68:34:76:8e:76:22:ec:dd:cb:54:52:e6:d1:f1:ef: 8e:73:4c:c4:98:7a:68:63:ba:3e:ea:d1:e7:1d:7d:64:66:9a: 03:4e:20:ce:a2:65:d1:21:61:8b:fb:6c:13:0c:45:02:46:8e: 6d:68:b6:f3:81:44:b0:82:f9:09:e3:6d:93:3b:91:56:0b:af: c1:a6:62:f0:5c:4c:fa:42:61:16:37:dd:f4:17:6d:95:1d:49: e1:7d:c5:bd:2f:f8:d1:7f:dc:ca:c9:de:d2:30:38:1b:c8:a6: 01:f9:00:b8:d1:02:17:ff:dd:2d:61:bb:0d:ed:c5:85:e7:27: 41:fa:d6:00:7c:c1:29:a1:c5:eb:6f:3d:1d:e8:9b:03:41:f1: f8:d4:84:15:45:7e:1b:41:eb:9b:1e:dd:09:f9:6a:dd:c7:0a: a4:68:94:9e:2e:9d:89:9b:4e:ac:dd:da:43:2d:d3:2a:5a:64: dd:b9:8c:1d:7d:68:04:64:f8:fb:0a:a1:8f:e8:d9:9d:c1:53: 0f:44:d2:b7 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEYxMTAvBgNVBAUTKDc0NTNEODgxM0JDOEVGNzI5MEIxMTAyMzIzNTg4OTRD NzdDNERCMzcwHhcNMjYwOTAzMDc1NjQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5MjgzYy04OWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBaaTg7BuieCI/hY0ykA6nLY0VzvByZXBD7AnJBEbYoWUvpISVcknm2CBEE/ yu7bDtCskgZys6idaQaOkPcZsZBJNdUnht2ktBEt0jxHWW5P97J4B6ak9ZY2cn8p u+8Na51At5Kom29dBZ+Osj8miwy4ua+D4A6vvTYkKEZN0OyyHlV9UwEMM1ixuuys 0F8d0fIy7Rlo0nIhRvCCbym9BhJx1xp/UF6nRwUx2blX0mjkUdLw5eFb7qvGFrGc qT3hB+mR1pCzmMY0idxq2k56sC78fBYIhd2gEH2yAo53ifX0F60rf+jTZdRq8+Vz Prty8YDvdx+yf6lbpclakvYbNwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOHr3ckv 8kogb7jQ0zJhjNqX8ppFMB8GA1UdIwQYMBaAFHRT2IE7yO9ykLEQIyNYiUx3xNs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0Ri8zNjBDQTE3QTc5 OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STczS1FzUkFqSTFpSlRIZkUy emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM2NEYvMzYwQ0ExN0E3OTk1MTFGMEJFQ0YyRDQwQzRGOUFFMDIvQkIzRjVBQUU3 OTk1MTFGMDk4RTk4MjY1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9f1AMA0GCSqGSIb3DQEBCwUAA4IBAQAIYU3g39LRTy26uARz zlXMO8PTi5ImqEcCcndky0iK6SyOEWHAeDIlmQ+7LUfPM6BFQSy4SloGhXFoNHaO diLs3ctUUubR8e+Oc0zEmHpoY7o+6tHnHX1kZpoDTiDOomXRIWGL+2wTDEUCRo5t aLbzgUSwgvkJ422TO5FWC6/BpmLwXEz6QmEWN930F22VHUnhfcW9L/jRf9zKyd7S MDgbyKYB+QC40QIX/90tYbsN7cWF5ydB+tYAfMEpocXrbz0d6JsDQfH41IQVRX4b QeubHt0J+WrdxwqkaJSeLp2Jm06s3dpDLdMqWmTduYwdfWgEZPj7CqGP6NmdwVMP RNK3 -----END CERTIFICATE-----Generated at Mon Sep 21 10:11:00 2026 by rpki-client