$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/2D89110A9A5311EE9CB13140C4F9AE02.roa File: 2D89110A9A5311EE9CB13140C4F9AE02.roa (raw, json) Hash identifier: XwZCOD7/DYVhwc3OTh2v3F5m4u9nDdw0r2AQU6hRtCI= Subject key identifier: 40:21:BB:2D:41:63:C6:80:81:01:23:73:6D:29:27:C2:74:03:3A:9D Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 35F6 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/2D89110A9A5311EE9CB13140C4F9AE02.roa Signing time: Tue 08 Sep 2026 15:17:51 +0000 ROA not before: Tue 08 Sep 2026 15:17:51 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 131203 IP address blocks: 2001:df2:a980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13814 (0x35f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Sep 8 15:17:51 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa0271f-6890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:c7:c4:d3:c7:b7:ab:7e:d0:4f:f1:60:f7: 70:3c:f9:85:98:c4:a0:7a:79:2d:4a:c2:70:79:ea: ed:7b:14:82:36:dd:0e:cf:6a:88:92:0c:7e:29:40: 0e:ae:33:79:ff:65:ac:4a:ed:d3:04:48:d2:c0:a4: 40:b6:e4:25:35:38:5c:81:03:67:52:ad:cb:e6:eb: 68:d7:e0:a4:22:e0:bd:7c:8e:9c:cb:64:aa:d2:02: cc:e0:35:50:27:2a:e6:c5:0d:fd:d8:28:62:8f:82: 4d:39:48:e1:32:d9:df:e4:12:b4:89:c1:74:90:ea: ef:c8:1f:69:47:25:ef:58:17:b4:51:ca:e7:5a:bb: 9c:97:9c:5d:2d:aa:8f:77:24:6c:0d:6d:2b:f4:4f: b5:b8:f4:60:2a:36:c9:68:29:43:c0:bc:fb:a2:9a: 0d:f4:01:23:32:da:d3:b7:06:79:9b:59:be:ff:9d: 31:ad:44:e2:d5:89:66:70:55:69:dd:b5:d1:c7:06: 38:c6:18:f2:b0:22:36:8a:bb:4e:c5:25:43:b7:b4: cc:a2:ca:e6:83:18:2a:a6:04:f5:ea:9e:13:bb:da: c2:4e:3e:46:f0:d3:07:08:c1:59:73:56:f2:fd:e3: f5:a3:77:e9:d4:1e:9f:f5:d6:c1:86:06:e5:eb:4f: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:21:BB:2D:41:63:C6:80:81:01:23:73:6D:29:27:C2:74:03:3A:9D X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/2D89110A9A5311EE9CB13140C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df2:a980::/48 Signature Algorithm: sha256WithRSAEncryption 43:76:80:8a:6f:41:56:11:37:ff:e4:16:fe:8d:04:c6:28:05: d9:68:fb:a4:ec:64:cd:8e:61:ed:35:43:52:83:1f:e7:8f:3c: 0e:7e:66:e2:93:8c:86:19:79:71:83:22:c1:48:9e:d2:83:2d: 38:3d:56:fc:87:d4:14:a7:cc:27:a5:33:d6:64:d3:d9:9f:cf: c4:00:49:e9:b0:f6:a7:c3:ca:08:1a:31:e9:dd:b5:41:ae:b9: 32:66:5f:af:d2:7d:d9:3c:19:14:6d:f5:17:14:d2:2f:10:61: d0:82:e8:2e:d9:5c:9b:dc:30:4f:56:4b:e4:f0:b7:16:b2:d2: b5:eb:a7:54:0a:67:f0:3f:67:4e:40:6e:e9:14:46:81:c8:54: 32:25:f5:85:1c:30:88:50:e3:44:61:08:79:d8:2a:c2:35:62: d5:eb:46:98:34:51:95:70:ec:a5:65:4b:e5:73:ce:d0:7c:38: f5:72:3e:00:cd:0d:32:51:79:e4:92:ae:44:81:6f:1f:f7:5a: df:db:45:64:7a:f6:45:7b:41:26:70:d2:72:8e:c9:db:2c:10: 2b:51:58:70:99:23:93:c3:cc:34:de:aa:82:38:9a:b2:64:5e: 87:a0:04:96:15:5e:48:e2:3d:b2:bd:17:6c:4a:21:02:a6:0a: 94:ff:cd:c7 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICNfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjYwOTA4MTUxNzUxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwMjcxZi02ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFLHxNPHt6t+0E/xYPdwPPmFmMSgenktSsJweertexSCNt0Oz2qIkgx+KUAO rjN5/2WsSu3TBEjSwKRAtuQlNThcgQNnUq3L5uto1+CkIuC9fI6cy2Sq0gLM4DVQ JyrmxQ392Chij4JNOUjhMtnf5BK0icF0kOrvyB9pRyXvWBe0UcrnWrucl5xdLaqP dyRsDW0r9E+1uPRgKjbJaClDwLz7opoN9AEjMtrTtwZ5m1m+/50xrUTi1YlmcFVp 3bXRxwY4xhjysCI2irtOxSVDt7TMosrmgxgqpgT16p4Tu9rCTj5G8NMHCMFZc1by /eP1o3fp1B6f9dbBhgbl608BBwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFEAhuy1B Y8aAgQEjc20pJ8J0AzqdMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENBRTgvOEI2QURFMTQxRDkzMTFFMjkyQ0IyM0Y3MDhCMDJDRDIvMkQ4OTExMEE5 QTUzMTFFRTlDQjEzMTQwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8qmAMA0GCSqGSIb3DQEBCwUAA4IBAQBDdoCKb0FWETf/5Bb+ jQTGKAXZaPuk7GTNjmHtNUNSgx/njzwOfmbik4yGGXlxgyLBSJ7Sgy04PVb8h9QU p8wnpTPWZNPZn8/EAEnpsPanw8oIGjHp3bVBrrkyZl+v0n3ZPBkUbfUXFNIvEGHQ gugu2Vyb3DBPVkvk8LcWstK166dUCmfwP2dOQG7pFEaByFQyJfWFHDCIUONEYQh5 2CrCNWLV60aYNFGVcOylZUvlc87QfDj1cj4AzQ0yUXnkkq5EgW8f91rf20VkevZF e0EmcNJyjsnbLBArUVhwmSOTw8w03qqCOJqyZF6HoASWFV5I4j2yvRdsSiECpgqU /83H -----END CERTIFICATE-----Generated at Sat Sep 26 08:22:03 2026 by rpki-client