$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa File: B7D34CC444ED11EE8D931624C4F9AE02.roa (raw, json) Hash identifier: OiUHSUASobIiQA2wqGL1RqWQ+8k9gLvxBOEIYXiz5RM= Subject key identifier: BB:16:29:38:26:93:EC:F0:52:08:C6:A1:35:3E:3F:59:31:8B:F7:20 Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 0288 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa Signing time: Mon 31 Aug 2026 02:51:59 +0000 ROA not before: Mon 31 Aug 2026 02:51:59 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151399 IP address blocks: 2401:920::/32 maxlen: 32 2401:920:1::/48 maxlen: 48 2401:920:2::/48 maxlen: 48 2401:920:3::/48 maxlen: 48 2401:920:4::/48 maxlen: 48 2401:920:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Aug 31 02:51:59 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a94ec4f-b4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:78:2e:59:95:30:d4:80:3a:13:8a:41:9a: dd:0b:52:7d:5d:e9:99:cd:64:8f:3d:36:90:fb:5a: 8e:7c:3c:18:97:8e:7e:51:49:9a:07:78:d0:34:37: 74:95:7f:80:19:de:f1:47:f1:70:fb:05:6b:69:74: 36:2b:45:77:28:c2:5f:a4:b3:2d:f9:82:12:71:ef: f1:ea:2d:6c:38:dd:c5:f8:d7:c8:6e:97:ba:3f:67: 92:ed:cb:67:46:5b:29:2e:92:e9:77:96:98:38:27: d2:ee:27:be:76:89:96:55:a8:97:d6:44:d9:e1:1a: 8a:11:ab:82:5f:47:bc:71:55:2d:ed:6d:5c:b8:ea: 6b:34:71:05:2a:a9:41:90:e6:18:c1:f3:f1:55:1b: 53:b1:84:46:bb:89:d0:15:40:8c:80:21:e5:bb:a8: 39:08:b5:ba:27:d7:50:fa:95:41:82:8b:f7:03:bf: 4f:c4:3f:50:89:f1:9e:a1:16:16:4f:1b:02:d1:23: 4e:ca:e3:3e:be:7f:69:b2:95:32:3b:61:27:e6:8a: 01:89:c0:db:fa:e4:d1:0d:b6:1b:07:54:f0:3c:27: 4b:e0:fd:e7:a6:04:f0:53:07:1b:f0:d7:3f:68:e5: b0:71:fa:ca:47:20:d4:cc:3c:5b:26:a2:71:93:92: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:16:29:38:26:93:EC:F0:52:08:C6:A1:35:3E:3F:59:31:8B:F7:20 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:920::/32 Signature Algorithm: sha256WithRSAEncryption 1e:70:b4:f3:05:3f:f8:01:d4:a7:b0:23:2e:bf:9b:b6:a8:f5: 49:76:7a:64:a0:cd:a6:48:37:d3:b6:85:c7:20:70:5f:33:29: 19:96:b9:9d:f9:eb:80:4d:e6:5c:de:4a:c5:77:f9:bf:85:75: 01:5a:6c:a3:50:46:c0:80:34:0a:e4:8f:b0:1f:8e:5f:d6:91: 2a:60:d9:84:27:15:d6:f6:1f:be:ed:c3:d1:76:a2:5e:85:2e: 52:1e:24:51:40:2d:f2:e0:b6:ca:fb:0d:d1:eb:d4:89:fd:16: 6e:57:69:c2:dc:1b:a5:29:90:bc:52:e7:08:43:4d:9e:5f:0e: ea:87:c6:ef:cb:97:6e:96:9f:ac:77:43:f0:ee:15:ab:ba:14: a2:c9:30:67:3f:9e:c0:0f:07:ac:dc:ec:a2:49:ee:1b:05:23: 2d:cd:4e:a2:69:a2:09:fc:a5:93:0f:c2:d9:ab:8c:76:83:ea: 3b:43:50:35:13:a5:0e:25:ab:14:59:6d:f8:81:25:8e:75:8c: 7c:e4:6d:e8:bd:0a:16:5d:a0:3c:35:bf:b8:4b:fe:6f:0a:91: ca:20:67:b3:cd:16:7d:c6:be:bd:fd:bc:f8:42:04:97:71:1a: 87:57:26:92:2d:6f:bd:54:b0:c5:8d:ea:50:70:9f:d7:57:09: f1:cd:93:ed -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjYwODMxMDI1MTU5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0ZWM0Zi1iNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBt4LlmVMNSAOhOKQZrdC1J9XemZzWSPPTaQ+1qOfDwYl45+UUmaB3jQNDd0 lX+AGd7xR/Fw+wVraXQ2K0V3KMJfpLMt+YISce/x6i1sON3F+NfIbpe6P2eS7ctn RlspLpLpd5aYOCfS7ie+domWVaiX1kTZ4RqKEauCX0e8cVUt7W1cuOprNHEFKqlB kOYYwfPxVRtTsYRGu4nQFUCMgCHlu6g5CLW6J9dQ+pVBgov3A79PxD9QifGeoRYW TxsC0SNOyuM+vn9pspUyO2En5ooBicDb+uTRDbYbB1TwPCdL4P3npgTwUwcb8Nc/ aOWwcfrKRyDUzDxbJqJxk5KMcQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFLsWKTgm k+zwUgjGoTU+P1kxi/cgMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJFOTIvMTg4NUE2RDIwNkNGMTFFRTlDOTcxMjdCQzRGOUFFMDIvQjdEMzRDQzQ0 NEVEMTFFRThEOTMxNjI0QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAEJIDANBgkqhkiG9w0BAQsFAAOCAQEAHnC08wU/+AHUp7AjLr+b tqj1SXZ6ZKDNpkg307aFxyBwXzMpGZa5nfnrgE3mXN5KxXf5v4V1AVpso1BGwIA0 CuSPsB+OX9aRKmDZhCcV1vYfvu3D0XaiXoUuUh4kUUAt8uC2yvsN0evUif0Wbldp wtwbpSmQvFLnCENNnl8O6ofG78uXbpafrHdD8O4Vq7oUoskwZz+ewA8HrNzsoknu GwUjLc1OommiCfylkw/C2auMdoPqO0NQNROlDiWrFFlt+IEljnWMfORt6L0KFl2g PDW/uEv+bwqRyiBns80Wfca+vf28+EIEl3Eah1cmki1vvVSwxY3qUHCf11cJ8c2T 7Q== -----END CERTIFICATE-----Generated at Mon Sep 28 11:40:43 2026 by rpki-client