$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa File: 4D144B780DFE11F09C46E054C4F9AE02.roa (raw, json) Hash identifier: RuktCzrTPaGz98KGZYkjHYICRA/av1re9f1mOeT+Khk= Subject key identifier: 95:06:9E:8B:91:D0:43:2D:E5:40:CE:7E:CD:E6:53:80:55:8F:FF:01 Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47 Certificate serial: 011E Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa Signing time: Thu 17 Sep 2026 06:57:17 +0000 ROA not before: Thu 17 Sep 2026 06:57:17 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 153322 IP address blocks: 2001:df4:3ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47 Validity Not Before: Sep 17 06:57:17 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aab8f4d-4550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:77:1f:4e:f4:c3:2a:45:1d:16:a5:7e:02:d9: cf:3c:8a:76:83:dc:2a:33:0b:e9:76:ff:5b:72:6a: 8b:82:0e:a4:fd:fa:44:bd:df:b4:d8:4b:50:9e:62: 2c:5c:fb:e3:a4:46:d3:cf:26:77:ee:af:eb:64:45: 26:76:4c:ac:ae:57:bb:e2:01:c2:13:f9:e6:82:d2: d8:f4:b9:71:cf:c8:65:16:65:89:65:64:66:13:1f: 8d:1a:fb:63:64:ff:a5:da:8d:1b:c1:70:ef:2d:ee: ea:31:64:96:08:49:10:41:40:43:c1:52:0c:9c:15: 98:9f:8b:f5:d6:8b:01:99:04:11:4f:78:00:32:17: a6:66:40:e1:35:22:eb:23:0a:9a:d5:94:c8:bf:da: f3:06:c9:02:66:9b:b2:21:25:27:00:ea:86:17:87: e0:85:05:fc:7a:3b:2a:ce:3b:82:b3:68:03:77:96: a6:d8:d5:a3:1e:d2:56:2d:f2:c8:cd:32:ce:80:3a: ab:0a:83:0c:e9:12:7c:9c:7e:bc:21:e7:01:d9:f3: 55:43:5f:9d:8f:19:30:35:a1:be:15:0f:57:9f:29: a0:53:3d:01:f2:7c:3b:f4:dd:6e:5f:dd:4e:b7:a8: de:06:3a:30:11:30:16:79:82:41:92:c1:f0:5c:cc: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:06:9E:8B:91:D0:43:2D:E5:40:CE:7E:CD:E6:53:80:55:8F:FF:01 X509v3 Authority Key Identifier: keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:3ec0::/48 Signature Algorithm: sha256WithRSAEncryption 38:19:c7:9f:b2:64:48:b8:2d:72:8d:78:df:c5:e7:e8:88:33: dd:86:a2:ef:4a:f0:a1:dc:b5:3a:ed:46:36:08:57:30:e7:99: f6:21:ef:c5:79:82:5a:f5:72:86:2e:16:ab:80:d4:d9:57:e4: 47:8d:98:52:ef:1e:11:74:82:d1:c2:e8:43:68:25:74:61:04: ae:64:08:88:4a:27:db:00:6f:c4:eb:ea:46:12:19:bd:35:7a: cf:0c:66:44:05:19:ac:61:1b:00:35:c4:2b:3c:64:f7:18:23: 8c:1e:5f:ae:c0:d0:e2:e9:f0:42:8f:09:59:d0:5a:8c:b4:37: 81:3b:98:fe:a5:5a:0a:25:88:c0:5c:9a:5b:23:c4:3a:64:f8: 7b:dd:a2:cc:1a:53:42:36:04:c8:0f:40:b3:5d:5a:08:a2:28: 1e:dc:0f:ea:fb:e4:3a:bb:ee:35:ef:68:9a:a8:62:50:f9:4c: 2c:9c:59:dd:50:d7:c4:b9:e0:d0:a9:0f:bb:21:2d:e7:43:a0: cf:ca:5a:d1:97:8f:58:6b:bf:98:75:e0:cb:10:11:33:dd:38: 19:c0:07:67:ea:ee:5a:2a:cf:79:f4:e7:5d:a6:62:89:e8:20: f9:af:c6:83:64:21:24:4c:51:6b:23:24:59:4e:19:9e:30:32: 1b:49:9b:7b -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEM4QkYwNjVBNzQ4MjJFRjhDQzYyRjRBNTRFNTlENTg3 MTIwQjZGNDcwHhcNMjYwOTE3MDY1NzE3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiOGY0ZC00NTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ncfTvTDKkUdFqV+AtnPPIp2g9wqMwvpdv9bcmqLgg6k/fpEvd+02EtQnmIs XPvjpEbTzyZ37q/rZEUmdkysrle74gHCE/nmgtLY9Llxz8hlFmWJZWRmEx+NGvtj ZP+l2o0bwXDvLe7qMWSWCEkQQUBDwVIMnBWYn4v11osBmQQRT3gAMhemZkDhNSLr Iwqa1ZTIv9rzBskCZpuyISUnAOqGF4fghQX8ejsqzjuCs2gDd5am2NWjHtJWLfLI zTLOgDqrCoMM6RJ8nH68IecB2fNVQ1+djxkwNaG+FQ9XnymgUz0B8nw79N1uX91O t6jeBjowETAWeYJBksHwXMzeVwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJUGnouR 0EMt5UDOfs3mU4BVj/8BMB8GA1UdIwQYMBaAFMi/Blp0gi74zGL0pU5Z1YcSC29H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82QUE0RDYwQTBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi95TDhHV25TQ0x2ak1ZdlNsVGxuVmh4SUxi MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lMOEdXblNDTHZqTVl2U2xUbG5WaHhJTGIwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg1RjEvNkFBNEQ2MEEwREZDMTFGMEExRDk4MDUzQzRGOUFFMDIvNEQxNDRCNzgw REZFMTFGMDlDNDZFMDU0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9D7AMA0GCSqGSIb3DQEBCwUAA4IBAQA4GcefsmRIuC1yjXjf xefoiDPdhqLvSvCh3LU67UY2CFcw55n2Ie/FeYJa9XKGLhargNTZV+RHjZhS7x4R dILRwuhDaCV0YQSuZAiISifbAG/E6+pGEhm9NXrPDGZEBRmsYRsANcQrPGT3GCOM Hl+uwNDi6fBCjwlZ0FqMtDeBO5j+pVoKJYjAXJpbI8Q6ZPh73aLMGlNCNgTID0Cz XVoIoige3A/q++Q6u+4172iaqGJQ+UwsnFndUNfEueDQqQ+7IS3nQ6DPylrRl49Y a7+YdeDLEBEz3TgZwAdn6u5aKs959OddpmKJ6CD5r8aDZCEkTFFrIyRZThmeMDIb SZt7 -----END CERTIFICATE-----Generated at Thu Sep 24 01:08:39 2026 by rpki-client