$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/71DBC7BE5DBF11EFB8714857C4F9AE02.roa File: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (raw, json) Hash identifier: GnGi9z11zeweRgusIJpyA/K1enQb1hB/2NFMG8+vhIE= Subject key identifier: 84:84:69:70:82:B4:28:09:97:39:73:B0:EE:4B:55:A6:72:0D:69:DF Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: 0190 Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/71DBC7BE5DBF11EFB8714857C4F9AE02.roa Signing time: Tue 15 Sep 2026 04:54:23 +0000 ROA not before: Tue 15 Sep 2026 04:54:23 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136935 IP address blocks: 2401:bc20::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Sep 15 04:54:23 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa8cf7f-86b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:8b:d0:48:17:c2:ac:8c:13:9a:65:f3:1b: 5c:be:bb:f6:7c:ae:99:c0:08:a4:36:59:77:da:b5: ac:e7:65:9c:4d:2a:96:13:50:9d:d9:6d:5e:e8:8a: 1a:0b:79:ec:52:d6:15:8e:6f:33:dc:b7:66:64:4c: 76:ad:c2:d5:ab:ec:24:95:cd:5c:13:9f:19:65:90: 1c:4a:d7:55:14:08:fc:21:c4:b7:dd:f0:c8:1e:c4: e4:50:90:43:70:fb:fa:06:1c:83:58:c2:7c:07:9d: 2a:e3:10:cc:41:79:34:c9:cf:2b:40:2c:28:7b:e8: c7:e9:ad:83:0c:57:02:fa:86:2a:6f:59:91:c5:00: e1:96:f3:49:23:5b:0b:57:c1:d4:02:69:d5:32:8b: 8f:23:15:34:60:8d:fd:51:6d:fd:bb:18:23:54:12: 36:6c:46:81:54:9b:6a:b0:ed:5d:2c:69:79:d9:b2: 5b:60:27:ed:3f:5f:8d:89:0f:57:8e:03:95:c6:ea: 55:e2:40:18:8c:3c:dd:88:68:93:7d:76:c9:61:06: 20:3d:73:8b:58:83:a3:b6:fd:1a:7a:90:ed:7d:f1: 05:76:67:e4:dd:6f:f3:2f:ef:84:7c:2c:88:81:82: 48:2f:17:4d:91:55:6c:81:79:a5:8d:5d:14:47:e1: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:84:69:70:82:B4:28:09:97:39:73:B0:EE:4B:55:A6:72:0D:69:DF X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/71DBC7BE5DBF11EFB8714857C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:bc20::/32 Signature Algorithm: sha256WithRSAEncryption 49:2b:8b:8e:6f:d1:08:dc:17:3c:5d:ee:f7:85:b9:cf:c7:b7: c3:6f:02:e6:34:e9:4a:ae:23:11:34:c6:06:8c:ce:2e:28:a5: bf:b5:32:9c:ce:95:7a:67:6a:17:34:ea:4b:bb:5f:ab:40:1c: 28:7e:a7:54:11:b9:1d:f8:1b:e0:ef:4f:ea:38:9f:10:81:1c: b4:5f:ac:48:5b:a4:62:d5:80:e9:19:7c:db:3a:86:42:21:78: b9:ca:25:d6:4a:62:cc:15:24:53:03:e8:21:28:85:22:af:a1: 45:90:de:8b:ce:1e:4e:ac:4d:92:87:9a:2a:dc:f7:89:55:5b: 4d:5b:ea:34:1a:be:76:da:0e:a3:51:ff:cb:40:5a:fc:56:33: 4f:66:93:ce:d4:72:bd:5e:ef:24:98:f6:d3:c8:cc:56:ce:7e: c8:ae:38:2f:13:d4:59:fe:6b:99:c7:fa:f6:7f:08:32:f5:c5: 96:79:53:b5:3e:f5:b7:0d:fa:40:24:0c:ca:b5:ac:0c:4a:c8: 0b:22:91:e5:92:15:8f:d4:d0:33:00:b5:75:e1:02:7c:4c:99: 2e:b4:ec:88:2d:53:86:5b:a7:1b:95:89:c6:ba:3e:ca:84:8f: 34:cd:ae:9d:5e:1a:87:2c:21:1b:27:a5:bc:18:13:b6:b6:ae: 26:82:5d:e8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjYwOTE1MDQ1NDIzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4Y2Y3Zi04NmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoByL0EgXwqyME5pl8xtcvrv2fK6ZwAikNll32rWs52WcTSqWE1Cd2W1e6Ioa C3nsUtYVjm8z3LdmZEx2rcLVq+wklc1cE58ZZZAcStdVFAj8IcS33fDIHsTkUJBD cPv6BhyDWMJ8B50q4xDMQXk0yc8rQCwoe+jH6a2DDFcC+oYqb1mRxQDhlvNJI1sL V8HUAmnVMouPIxU0YI39UW39uxgjVBI2bEaBVJtqsO1dLGl52bJbYCftP1+NiQ9X jgOVxupV4kAYjDzdiGiTfXbJYQYgPXOLWIOjtv0aepDtffEFdmfk3W/zL++EfCyI gYJILxdNkVVsgXmljV0UR+GnswIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFISEaXCC tCgJlzlzsO5LVaZyDWnfMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhGOUIvMDFFREVGOTY1REJFMTFFRjhBMDZFRDQwQzRGOUFFMDIvNzFEQkM3QkU1 REJGMTFFRkI4NzE0ODU3QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAG8IDANBgkqhkiG9w0BAQsFAAOCAQEASSuLjm/RCNwXPF3u94W5 z8e3w28C5jTpSq4jETTGBozOLiilv7UynM6VemdqFzTqS7tfq0AcKH6nVBG5Hfgb 4O9P6jifEIEctF+sSFukYtWA6Rl82zqGQiF4ucol1kpizBUkUwPoISiFIq+hRZDe i84eTqxNkoeaKtz3iVVbTVvqNBq+dtoOo1H/y0Ba/FYzT2aTztRyvV7vJJj208jM Vs5+yK44LxPUWf5rmcf69n8IMvXFlnlTtT71tw36QCQMyrWsDErICyKR5ZIVj9TQ MwC1deECfEyZLrTsiC1ThlunG5WJxro+yoSPNM2unV4ahywhGyelvBgTtrauJoJd 6A== -----END CERTIFICATE-----Generated at Mon Sep 21 21:23:17 2026 by rpki-client