$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/BB8F3118497B11F096DCA14EC4F9AE02.roa File: BB8F3118497B11F096DCA14EC4F9AE02.roa (raw, json) Hash identifier: 54rNaHs3BHHyTMIFPvOgY9u0ai10wJmM8WXV532IDWg= Subject key identifier: 67:9E:6D:94:48:A2:9E:74:5B:21:04:B2:B2:DE:E5:63:CA:C9:85:97 Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Certificate serial: C4 Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/BB8F3118497B11F096DCA14EC4F9AE02.roa Signing time: Fri 05 Jun 2026 07:39:54 +0000 ROA not before: Fri 05 Jun 2026 07:39:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45773 IP address blocks: 2001:df5:ac40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Validity Not Before: Jun 5 07:39:54 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a227d4a-6013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:d5:64:35:36:3a:07:72:3b:48:a1:1f:28: 8b:7b:f2:94:11:21:30:3c:ae:96:f5:ff:03:3d:ed: d3:ef:3a:07:5f:fb:00:ae:8e:1d:bc:0e:97:e4:c8: 85:91:87:8b:b4:c4:53:88:b6:dc:40:66:56:da:88: bc:fe:bc:97:5f:57:33:44:94:04:e5:dd:e6:5d:a8: 06:2a:b5:d9:f1:68:2d:91:ab:c8:dc:6b:e3:f8:ee: cc:db:7e:38:84:df:ee:cf:00:65:15:40:ce:9e:90: 6e:85:24:f9:28:86:dc:5b:75:a1:14:ff:34:42:f7: 43:99:f1:b0:59:f1:e3:98:2b:a0:30:a4:35:54:88: c8:22:09:5d:f6:c8:85:75:24:2a:7d:93:a4:d8:b5: cd:0a:30:d5:05:00:51:a5:89:cd:7b:81:50:b5:d6: 57:05:53:24:fb:9d:61:3c:4b:db:8b:83:45:9a:fa: 07:e9:6b:d8:dd:ff:62:91:d1:82:48:3a:8d:de:8d: c1:d7:fc:e8:ea:e7:6d:2e:99:55:59:bc:20:0c:0e: 1e:8e:f3:d5:5b:fc:a1:50:87:74:2e:13:d7:d4:26: 4f:4e:94:50:34:8a:db:ab:7b:a9:0e:06:f7:e6:90: 30:29:23:79:e8:58:3d:36:ac:36:5c:6a:a6:ce:29: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9E:6D:94:48:A2:9E:74:5B:21:04:B2:B2:DE:E5:63:CA:C9:85:97 X509v3 Authority Key Identifier: keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/BB8F3118497B11F096DCA14EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:ac40::/48 Signature Algorithm: sha256WithRSAEncryption bf:c8:ee:55:ae:e8:f2:0a:9a:5c:60:47:4c:d7:21:cc:db:95: d2:7f:45:ce:b2:d2:b5:5e:fe:26:19:30:2d:57:00:96:62:04: 32:56:32:a6:38:aa:2c:23:59:8b:ae:85:39:fb:b4:42:ea:6d: 8a:fe:f5:56:34:2f:be:a5:58:45:85:98:ec:60:7d:bc:a6:41: 4f:28:16:9e:7b:d8:74:cf:7f:8c:12:6d:26:ab:10:34:4a:41: ef:75:b6:e9:87:06:aa:cf:20:c7:4e:f1:25:28:aa:6b:e7:67: 61:80:26:eb:ee:ec:db:a0:48:38:5d:7f:ac:c0:c9:80:4b:ec: d6:1e:c5:b6:ea:55:10:7e:89:6b:af:4a:ec:f2:e0:60:d1:c0: f7:ba:76:f0:b0:38:5e:06:a6:6a:94:e9:dc:a8:c7:9c:de:f3: c7:ad:1a:e2:fc:95:22:61:8b:8e:73:b1:11:c9:39:53:da:c4: 87:42:6a:35:43:82:4d:e3:a0:e3:77:bb:f8:dd:b7:4f:5e:08: 8f:17:5a:e4:3b:39:90:b6:e4:be:9d:f1:49:3b:60:83:e5:7c: 6c:ec:78:09:73:97:2d:b5:0a:d9:ec:f9:c3:98:6d:19:d4:4e: 55:67:7d:aa:f6:33:cc:c7:22:48:5f:3a:36:af:7f:83:f1:b3: 5d:bf:ca:db -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKENCNTMxQzFFQzY5MjI1RjBEQ0FFNDRDRUNBNUUzNTk4 MENFOUMwRjIwHhcNMjYwNjA1MDczOTU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyN2Q0YS02MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2bVZDU2OgdyO0ihHyiLe/KUESEwPK6W9f8DPe3T7zoHX/sAro4dvA6X5MiF kYeLtMRTiLbcQGZW2oi8/ryXX1czRJQE5d3mXagGKrXZ8WgtkavI3Gvj+O7M2344 hN/uzwBlFUDOnpBuhST5KIbcW3WhFP80QvdDmfGwWfHjmCugMKQ1VIjIIgld9siF dSQqfZOk2LXNCjDVBQBRpYnNe4FQtdZXBVMk+51hPEvbi4NFmvoH6WvY3f9ikdGC SDqN3o3B1/zo6udtLplVWbwgDA4ejvPVW/yhUId0LhPX1CZPTpRQNIrbq3upDgb3 5pAwKSN56Fg9Nqw2XGqmzikLkwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFGeebZRI op50WyEEsrLe5WPKyYWXMB8GA1UdIwQYMBaAFMtTHB7GkiXw3K5EzspeNZgM6cDy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9GNURCN0ExNjQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pmRGNya1RPeWw0MW1BenB3 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxTWNIc2FTSmZEY3JrVE95bDQxbUF6cHdQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQ0IvRjVEQjdBMTY0MjA1MTFGMEJGN0E4NzExQzRGOUFFMDIvQkI4RjMxMTg0 OTdCMTFGMDk2RENBMTRFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9axAMA0GCSqGSIb3DQEBCwUAA4IBAQC/yO5VrujyCppcYEdM 1yHM25XSf0XOstK1Xv4mGTAtVwCWYgQyVjKmOKosI1mLroU5+7RC6m2K/vVWNC++ pVhFhZjsYH28pkFPKBaee9h0z3+MEm0mqxA0SkHvdbbphwaqzyDHTvElKKpr52dh gCbr7uzboEg4XX+swMmAS+zWHsW26lUQfolrr0rs8uBg0cD3unbwsDheBqZqlOnc qMec3vPHrRri/JUiYYuOc7ERyTlT2sSHQmo1Q4JN46Djd7v43bdPXgiPF1rkOzmQ tuS+nfFJO2CD5Xxs7HgJc5cttQrZ7PnDmG0Z1E5VZ32q9jPMxyJIXzo2r3+D8bNd v8rb -----END CERTIFICATE-----Generated at Sat Jun 13 15:48:00 2026 by rpki-client