$ rpki-client -vvf rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/973AF3EC63C411F1B54905C17D47A888.roa File: 973AF3EC63C411F1B54905C17D47A888.roa (raw, json) Hash identifier: 8HfNf9fSdlgZ+8O3B5tGK8aEM/aA/Z7fXET6ooG+NGM= Subject key identifier: 0D:FB:27:FC:D4:EE:6A:96:9C:05:85:AD:7B:93:8C:36:81:A0:C0:5D Certificate issuer: /CN=A91F146E/serialNumber=C19924555B719A8DCE5F881F10ACDC0A35B2052C Certificate serial: 08 Authority key identifier: C1:99:24:55:5B:71:9A:8D:CE:5F:88:1F:10:AC:DC:0A:35:B2:05:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/973AF3EC63C411F1B54905C17D47A888.roa Signing time: Tue 09 Jun 2026 05:39:35 +0000 ROA not before: Tue 09 Jun 2026 05:39:35 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 154705 IP address blocks: 2402:62a0::/32 maxlen: 32 2402:62a0::/48 maxlen: 48 2402:62a0:1::/48 maxlen: 48 2402:62a0:2::/48 maxlen: 48 2402:62a0:3::/48 maxlen: 48 2402:62a0:4::/48 maxlen: 48 2402:62a0:5::/48 maxlen: 48 2402:62a0:6::/48 maxlen: 48 2402:62a0:7::/48 maxlen: 48 2402:62a0:8::/48 maxlen: 48 2402:62a0:9::/48 maxlen: 48 2402:62a0:a::/48 maxlen: 48 2402:62a0:b::/48 maxlen: 48 2402:62a0:c::/48 maxlen: 48 2402:62a0:d::/48 maxlen: 48 2402:62a0:e::/48 maxlen: 48 2402:62a0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.crl rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F146E, serialNumber=C19924555B719A8DCE5F881F10ACDC0A35B2052C Validity Not Before: Jun 9 05:39:35 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a27a717-7561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:7a:9e:8d:cf:88:d6:1c:c0:e7:89:2e:70: e1:6d:4f:40:f3:7d:a9:20:76:2b:27:36:7c:b0:c7: 63:b7:71:7b:65:25:18:d0:58:eb:30:53:f8:3b:ae: 48:52:97:2b:a6:f9:d9:c3:3f:bd:3d:b0:72:f1:24: 72:8a:d5:33:a8:ca:09:58:92:0d:a3:bb:1b:f6:89: 98:01:a2:14:d2:fe:13:d7:b2:ff:5c:d5:97:50:57: 44:69:93:eb:9c:a0:66:7a:03:37:ee:a4:91:cb:7a: 40:15:81:bd:b7:da:bc:a5:8c:80:e1:18:b1:da:8c: f4:b1:fb:74:35:65:c5:ca:7c:20:de:dc:91:43:38: c7:67:99:a5:34:1f:7a:05:af:6b:ae:93:25:56:e1: ca:e8:1c:b2:9f:fe:22:ee:7e:6a:f9:16:70:e1:74: dd:3d:55:a7:59:16:10:97:7c:e0:16:41:23:66:ee: d0:97:30:44:87:37:39:43:88:44:ce:55:0d:5e:57: 06:c1:f0:c8:44:2a:99:71:6b:9d:02:39:1d:71:bc: d1:58:23:17:12:7b:46:1a:36:04:97:9c:93:a0:7a: 85:b6:e6:52:be:cb:d9:df:6e:bd:ae:56:8e:f9:9a: c6:18:49:a1:6d:34:22:8a:41:e0:85:a8:73:ab:23: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FB:27:FC:D4:EE:6A:96:9C:05:85:AD:7B:93:8C:36:81:A0:C0:5D X509v3 Authority Key Identifier: keyid:C1:99:24:55:5B:71:9A:8D:CE:5F:88:1F:10:AC:DC:0A:35:B2:05:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/973AF3EC63C411F1B54905C17D47A888.roa sbgp-ipAddrBlock: critical IPv6: 2402:62a0::/32 Signature Algorithm: sha256WithRSAEncryption 93:ba:03:56:0b:4b:eb:4e:12:0c:83:fd:83:cc:2b:ff:8d:57: 53:f5:fb:ff:15:42:02:07:d4:a2:06:be:ee:8e:a0:23:ba:15: 84:8c:11:dc:d3:74:7a:f9:48:e3:88:3d:a5:89:40:42:96:b5: 86:10:3e:24:a5:85:39:00:a5:bf:86:17:1d:f2:51:cb:01:01: bb:03:f9:c3:02:f0:94:c4:2f:2c:e9:18:40:13:90:52:b7:1e: 34:57:bb:36:d5:71:11:c5:53:72:8a:b6:40:9f:48:95:70:1a: d9:17:bc:6c:c2:05:72:af:9e:0e:d1:9c:75:04:e7:21:7c:fc: 13:ee:34:ec:9e:92:0c:d3:bb:9c:39:c2:db:64:5b:53:83:e3: 3d:70:64:6c:8d:9b:7b:46:59:f8:79:8e:a6:d6:fa:8a:8b:94: 3c:28:d1:6b:5f:75:b1:f4:f7:9c:05:89:3b:72:97:c2:07:14: 84:a2:d5:82:8f:da:6b:e5:84:d8:d5:77:bf:01:3a:bc:b3:48: 71:cd:74:ee:02:f5:e7:1a:f2:51:81:f1:e9:60:0f:52:be:0c: 0f:0f:ee:31:a2:17:fc:cd:90:aa:b1:61:1e:66:85:b7:e4:a6: e5:87:e5:0a:05:fe:17:19:56:68:ea:aa:36:f1:c8:25:07:ad: 30:64:8e:00 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTQ2RTExMC8GA1UEBRMoQzE5OTI0NTU1QjcxOUE4RENFNUY4ODFGMTBBQ0RDMEEz NUIyMDUyQzAeFw0yNjA2MDkwNTM5MzVaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMjdhNzE3LTc1NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgpXqejc+I1hzA54kucOFtT0DzfakgdisnNnywx2O3cXtlJRjQWOswU/g7rkhS lyum+dnDP709sHLxJHKK1TOoyglYkg2juxv2iZgBohTS/hPXsv9c1ZdQV0Rpk+uc oGZ6AzfupJHLekAVgb232ryljIDhGLHajPSx+3Q1ZcXKfCDe3JFDOMdnmaU0H3oF r2uukyVW4croHLKf/iLufmr5FnDhdN09VadZFhCXfOAWQSNm7tCXMESHNzlDiETO VQ1eVwbB8MhEKplxa50COR1xvNFYIxcSe0YaNgSXnJOgeoW25lK+y9nfbr2uVo75 msYYSaFtNCKKQeCFqHOrI0YJAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUDfsn/NTu apacBYWte5OMNoGgwF0wHwYDVR0jBBgwFoAUwZkkVVtxmo3OX4gfEKzcCjWyBSww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNDZFLzczNDgyNEVDNjNC RTExRjE5OEUzMzAwMjdDNDdBODg4L3daa2tWVnR4bW8zT1g0Z2ZFS3pjQ2pXeUJT dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1pra1ZWdHhtbzNPWDRnZkVLemNDald5QlN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ2RS83MzQ4MjRFQzYzQkUxMUYxOThFMzMwMDI3QzQ3QTg4OC85NzNBRjNFQzYz QzQxMUYxQjU0OTA1QzE3RDQ3QTg4OC5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAmKgMA0GCSqGSIb3DQEBCwUAA4IBAQCTugNWC0vrThIMg/2DzCv/ jVdT9fv/FUICB9SiBr7ujqAjuhWEjBHc03R6+UjjiD2liUBClrWGED4kpYU5AKW/ hhcd8lHLAQG7A/nDAvCUxC8s6RhAE5BStx40V7s21XERxVNyirZAn0iVcBrZF7xs wgVyr54O0Zx1BOchfPwT7jTsnpIM07ucOcLbZFtTg+M9cGRsjZt7Rln4eY6m1vqK i5Q8KNFrX3Wx9PecBYk7cpfCBxSEotWCj9pr5YTY1Xe/ATq8s0hxzXTuAvXnGvJR gfHpYA9SvgwPD+4xohf8zZCqsWEeZoW35Kblh+UKBf4XGVZo6qo28cglB60wZI4A -----END CERTIFICATE-----Generated at Wed Jun 17 13:58:26 2026 by rpki-client