$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/634DC83C662D11F1A5BC4310A247A888.roa File: 634DC83C662D11F1A5BC4310A247A888.roa (raw, json) Hash identifier: Ep5nijWyMpK5/K7vEOePnlUlFj8UkDN9w696/7fsWDM= Subject key identifier: 58:4E:68:9A:10:42:DF:1E:93:37:D8:FF:73:66:54:4A:37:75:5D:12 Certificate issuer: /CN=A91E5988/serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281 Certificate serial: 02 Authority key identifier: EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/634DC83C662D11F1A5BC4310A247A888.roa Signing time: Fri 12 Jun 2026 07:07:35 +0000 ROA not before: Fri 12 Jun 2026 07:07:35 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 154713 IP address blocks: 2001:df7:1bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 09:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5988, serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281 Validity Not Before: Jun 12 07:07:35 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a2bb037-f6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:9f:a6:46:fa:5c:6e:57:c9:5b:ea:a5:6a: 6c:6e:e4:63:8b:88:7c:28:6d:11:63:c3:9d:ba:59: e7:f9:cd:73:5f:90:ff:79:7c:0b:7b:f6:65:24:82: e1:51:6d:13:ea:04:a7:56:ab:11:f7:c4:8b:f5:47: 16:3f:ae:1a:64:77:ea:82:ab:20:54:d0:d9:35:2c: 42:43:ef:f1:38:75:c0:b7:d8:8f:4c:b6:4b:8a:a1: 96:4c:00:57:10:26:f3:7c:32:48:5c:e6:23:da:07: 8b:31:e8:b2:4a:6b:80:2d:40:ce:56:d6:4b:95:96: 59:13:73:5c:04:22:0d:49:64:6f:99:94:ff:0d:a0: c7:c4:f1:88:f4:fb:cf:61:b3:fd:86:10:e6:5a:5c: d7:49:d1:bd:fe:5b:37:29:54:cb:bf:37:66:6b:49: e5:60:d8:59:be:8a:bb:3a:a8:d0:aa:ea:e5:e7:cc: 02:3e:cd:4c:8d:21:c3:0f:7c:c2:8c:5d:91:89:41: 8d:ef:2f:43:52:1b:0f:35:40:67:a3:14:50:49:49: 27:4a:0f:b3:e5:c3:5e:5b:c4:fb:34:8b:13:79:1b: 8b:fe:8e:50:df:94:39:4e:cf:45:70:a3:c3:a9:f7: 8a:49:ec:d0:61:58:73:69:a3:d6:97:de:60:71:b2: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4E:68:9A:10:42:DF:1E:93:37:D8:FF:73:66:54:4A:37:75:5D:12 X509v3 Authority Key Identifier: keyid:EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/634DC83C662D11F1A5BC4310A247A888.roa sbgp-ipAddrBlock: critical IPv6: 2001:df7:1bc0::/48 Signature Algorithm: sha256WithRSAEncryption 7d:a7:0a:cb:7f:62:85:f1:26:27:2c:e0:96:6b:78:41:84:28: 49:d2:22:ba:c8:0f:58:8e:74:0c:70:90:4e:08:da:bd:63:77: 55:97:bf:d7:fd:6c:f6:5d:0a:f6:98:f9:c0:43:5c:f2:39:65: 8a:4a:2b:39:bf:7b:7b:15:32:33:fa:e8:d7:f2:ca:4c:54:78: 55:be:8d:53:67:7a:06:24:de:48:86:20:11:f2:37:f6:25:be: 15:ed:8b:b6:9f:7e:86:93:ff:9b:94:82:d9:b8:0b:23:f8:30: 64:cf:b8:fe:fc:24:89:d1:73:9b:05:cd:65:67:83:f2:f6:f6: ce:cf:c6:57:41:2e:d5:1a:e2:26:5f:03:fd:28:a8:49:7a:64: 44:37:e8:9e:4c:91:86:9c:b3:1b:5a:3e:7d:66:ef:06:32:d9: 3c:6c:73:31:2e:a4:11:36:ad:71:06:08:fd:9d:5d:a2:c9:81: 4e:61:75:0b:3e:56:2f:95:2c:34:1e:91:88:53:88:71:7b:06: 91:0f:c4:3b:4b:cc:bc:e5:17:f9:fc:d9:ab:97:0f:3a:fc:94: 1d:43:8d:cb:c5:b5:15:b0:c8:9d:aa:b8:d1:1c:93:49:aa:fd: a3:10:44:2f:ec:62:1e:30:d5:86:76:89:f4:bd:f8:dc:0a:6e: 9a:3a:c5:86 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTk4ODExMC8GA1UEBRMoRUIxQzU4OENERDNDMUJEMDkzNEVFRTUzNUM3QUExMTI2 RDEyNzI4MTAeFw0yNjA2MTIwNzA3MzVaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMmJiMDM3LWY2ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCK/p+mRvpcblfJW+qlamxu5GOLiHwobRFjw526Wef5zXNfkP95fAt79mUkguFR bRPqBKdWqxH3xIv1RxY/rhpkd+qCqyBU0Nk1LEJD7/E4dcC32I9MtkuKoZZMAFcQ JvN8Mkhc5iPaB4sx6LJKa4AtQM5W1kuVllkTc1wEIg1JZG+ZlP8NoMfE8Yj0+89h s/2GEOZaXNdJ0b3+WzcpVMu/N2ZrSeVg2Fm+irs6qNCq6uXnzAI+zUyNIcMPfMKM XZGJQY3vL0NSGw81QGejFFBJSSdKD7Plw15bxPs0ixN5G4v+jlDflDlOz0Vwo8Op 94pJ7NBhWHNpo9aX3mBxshxhAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUWE5omhBC 3x6TN9j/c2ZUSjd1XRIwHwYDVR0jBBgwFoAU6xxYjN08G9CTTu5TXHqhEm0ScoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1OTg4L0FDMjA4ODdBNjYy QzExRjFCMEJBQzczQ0ExNDdBODg4LzZ4eFlqTjA4RzlDVFR1NVRYSHFoRW0wU2Nv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnh4WWpOMDhHOUNUVHU1VFhIcWhFbTBTY29FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk4OC9BQzIwODg3QTY2MkMxMUYxQjBCQUM3M0NBMTQ3QTg4OC82MzREQzgzQzY2 MkQxMUYxQTVCQzQzMTBBMjQ3QTg4OC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ33G8AwDQYJKoZIhvcNAQELBQADggEBAH2nCst/YoXxJics4JZr eEGEKEnSIrrID1iOdAxwkE4I2r1jd1WXv9f9bPZdCvaY+cBDXPI5ZYpKKzm/e3sV MjP66NfyykxUeFW+jVNnegYk3kiGIBHyN/YlvhXti7affoaT/5uUgtm4CyP4MGTP uP78JInRc5sFzWVng/L29s7PxldBLtUa4iZfA/0oqEl6ZEQ36J5MkYacsxtaPn1m 7wYy2TxsczEupBE2rXEGCP2dXaLJgU5hdQs+Vi+VLDQekYhTiHF7BpEPxDtLzLzl F/n82auXDzr8lB1DjcvFtRWwyJ2quNEck0mq/aMQRC/sYh4w1YZ2ifS9+NwKbpo6 xYY= -----END CERTIFICATE-----Generated at Sun Jun 14 00:26:13 2026 by rpki-client