$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa File: CDD43C182FFB11F099B57A7CC4F9AE02.roa (raw, json) Hash identifier: d+XlkZfujpDkvCo9FmKooB3nuK4tFlgynQ1hbouvf0E= Subject key identifier: DA:B0:79:51:36:24:67:FA:F9:79:8A:6F:6E:F3:9E:34:2D:C6:68:62 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 0191 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa Signing time: Thu 17 Sep 2026 04:56:08 +0000 ROA not before: Thu 17 Sep 2026 04:56:08 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 138558 IP address blocks: 2001:df4:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Sep 17 04:56:08 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aab72e8-4996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:82:31:c4:78:dc:1b:9c:13:99:3a:c7:12: 56:16:45:87:b9:4f:e1:fe:c6:48:86:e0:1e:82:1f: 8b:c0:47:1f:68:42:2c:4a:71:4f:6a:62:7b:1a:cd: 74:fc:14:55:e6:3e:ba:20:fe:86:3c:46:3f:cf:c5: 78:16:e2:49:05:57:5c:5c:3b:0a:f8:19:71:52:f2: ba:67:d4:4b:8b:9e:68:13:22:d4:d0:63:0b:04:ca: 05:9f:14:a0:94:53:91:d4:0c:92:5a:37:e2:26:65: 27:04:43:3f:36:0f:ff:10:51:26:11:8d:c0:6a:4f: bd:08:26:cd:d9:87:d2:dc:c9:b3:bb:7c:d6:65:04: 55:a5:48:f5:1a:ca:82:17:9b:ee:fe:79:f5:a3:af: 35:6a:cc:a1:07:30:a8:2e:90:63:99:88:6d:25:18: 8e:83:c6:f7:cb:32:f6:60:83:1f:d1:6a:d9:5b:1a: 30:94:46:ab:03:70:0c:73:00:3f:6b:97:d9:81:b4: 3a:4a:d0:9b:05:65:f5:1e:64:10:cd:66:e1:b2:03: a5:97:d2:9b:95:32:b0:58:45:d8:40:1d:cf:cb:87: 18:a1:57:e2:9a:30:d8:1a:af:f6:90:e3:63:7b:ac: c8:25:d2:aa:00:5e:e4:44:4f:1e:17:7b:e8:2d:19: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B0:79:51:36:24:67:FA:F9:79:8A:6F:6E:F3:9E:34:2D:C6:68:62 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:3440::/48 Signature Algorithm: sha256WithRSAEncryption 69:8c:4d:48:d6:fd:da:5c:80:a8:58:06:86:57:6d:fc:49:3d: fb:31:b5:54:e7:40:a3:95:8c:f2:2d:57:f4:a5:fd:44:30:c8: e6:8e:f5:be:83:b0:ac:12:94:51:4a:ed:a3:2c:67:66:b6:f3: 42:cd:90:4f:ea:e3:dd:de:28:52:e9:52:40:79:db:ad:81:8c: 34:a4:14:b6:f4:87:8f:8e:7e:11:00:c5:ef:74:16:f4:9e:e4: fb:6e:19:46:2d:27:6a:92:9f:ec:81:c1:36:4f:0f:d3:c4:a0: c9:01:86:f8:86:e6:2b:2b:1a:5c:93:03:7d:6e:a7:a3:0a:dd: 0b:d8:45:d1:b7:64:ac:68:8a:22:c3:2d:8e:99:3d:94:90:68: eb:60:2c:83:96:9b:b7:cb:2e:0d:56:72:f1:4b:07:e8:20:f1: 45:3f:7d:58:7e:40:40:53:54:0f:6a:2f:ac:7e:e8:2d:d4:b3: f8:c3:32:67:ce:61:8c:19:cb:87:87:29:ac:a4:67:57:9e:c0: 17:8c:bd:85:51:09:33:6e:79:bb:a3:f6:fb:9f:da:31:49:8b: a2:41:e6:70:5e:f5:05:73:1c:88:ae:34:2d:70:51:7b:4a:7c: 5f:9e:3c:b8:4f:cb:47:b0:14:bd:39:7d:21:54:8f:c2:70:45: 9d:31:eb:1a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjYwOTE3MDQ1NjA4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiNzJlOC00OTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmf6CMcR43BucE5k6xxJWFkWHuU/h/sZIhuAegh+LwEcfaEIsSnFPamJ7Gs10 /BRV5j66IP6GPEY/z8V4FuJJBVdcXDsK+BlxUvK6Z9RLi55oEyLU0GMLBMoFnxSg lFOR1AySWjfiJmUnBEM/Ng//EFEmEY3Aak+9CCbN2YfS3Mmzu3zWZQRVpUj1GsqC F5vu/nn1o681asyhBzCoLpBjmYhtJRiOg8b3yzL2YIMf0WrZWxowlEarA3AMcwA/ a5fZgbQ6StCbBWX1HmQQzWbhsgOll9KblTKwWEXYQB3Py4cYoVfimjDYGq/2kONj e6zIJdKqAF7kRE8eF3voLRmy9wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNqweVE2 JGf6+XmKb27znjQtxmhiMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5RDkvRjU2MDM3QTY2RjVDMTFFRjgzNUE3QjY2QzRGOUFFMDIvQ0RENDNDMTgy RkZCMTFGMDk5QjU3QTdDQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9DRAMA0GCSqGSIb3DQEBCwUAA4IBAQBpjE1I1v3aXICoWAaG V238ST37MbVU50CjlYzyLVf0pf1EMMjmjvW+g7CsEpRRSu2jLGdmtvNCzZBP6uPd 3ihS6VJAedutgYw0pBS29IePjn4RAMXvdBb0nuT7bhlGLSdqkp/sgcE2Tw/TxKDJ AYb4huYrKxpckwN9bqejCt0L2EXRt2SsaIoiwy2OmT2UkGjrYCyDlpu3yy4NVnLx SwfoIPFFP31YfkBAU1QPai+sfugt1LP4wzJnzmGMGcuHhymspGdXnsAXjL2FUQkz bnm7o/b7n9oxSYuiQeZwXvUFcxyIrjQtcFF7Snxfnjy4T8tHsBS9OX0hVI/CcEWd Mesa -----END CERTIFICATE-----Generated at Sun Sep 20 10:08:59 2026 by rpki-client