$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/688B6F18355811F0AF79910EC4F9AE02.roa File: 688B6F18355811F0AF79910EC4F9AE02.roa (raw, json) Hash identifier: ssaNiUdywn9FblkGXHlbzMTU5GBWckSNNpbuXposEjw= Subject key identifier: 95:D1:11:FA:3F:C6:21:2C:2E:30:5E:73:10:34:59:3D:6F:4A:85:5B Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 0286 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/688B6F18355811F0AF79910EC4F9AE02.roa Signing time: Sat 11 Apr 2026 02:34:22 +0000 ROA not before: Sat 11 Apr 2026 02:34:22 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 141780 IP address blocks: 2001:df6:3480::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: Apr 11 02:34:22 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d9b32e-d40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:c0:1a:27:9d:b8:60:66:3d:96:c6:c9:e6: 85:42:d9:f1:10:f2:64:0b:3b:c7:50:40:80:92:12: f4:38:44:ba:0e:23:fa:6f:83:e8:1d:11:d1:63:9d: 23:ff:4e:03:00:82:4b:05:17:91:64:ce:d9:56:c5: e2:dd:b2:dd:d4:4e:1d:13:63:09:bb:9c:d4:7c:ad: 7e:5d:92:0e:16:2d:d1:93:91:7e:ba:f0:04:ba:65: 87:4a:02:c5:b6:22:c1:f7:7b:f1:e7:72:a2:2e:30: 08:cb:62:69:a3:ae:99:7e:8e:04:fe:7e:55:cc:b0: 2a:b2:1c:87:b2:be:c7:a7:9b:11:69:b7:f7:ea:e8: 19:ad:fd:da:bf:cc:ac:5c:ed:e9:1a:44:d3:b6:95: 73:66:72:d3:da:6b:1a:74:dc:64:10:26:ea:3b:01: 79:7d:c3:05:4b:68:dc:8b:8e:54:b6:2c:2f:1f:dd: 43:ab:75:fc:b4:39:44:c8:c7:75:de:70:56:7f:1f: f2:e7:cb:f9:ee:b5:de:54:14:1a:b2:f4:30:d3:50: 54:d7:7e:ba:d3:a6:5e:89:a3:72:e2:03:bb:8f:06: 83:4d:af:4e:1b:03:51:5e:ab:09:07:ea:10:cf:de: 96:9a:b4:e6:fe:df:48:1d:76:40:4f:15:31:a2:c2: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D1:11:FA:3F:C6:21:2C:2E:30:5E:73:10:34:59:3D:6F:4A:85:5B X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/688B6F18355811F0AF79910EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:3480::/47 Signature Algorithm: sha256WithRSAEncryption 0e:6c:2e:98:6c:56:bf:c8:d2:3d:4a:b7:bf:de:6a:f4:d3:8f: d7:ab:be:ce:7a:07:87:a4:67:72:a9:e1:71:05:0c:95:49:9c: ba:d5:0b:09:86:75:1d:55:f0:28:d8:bd:07:62:4f:3b:1e:be: 88:b1:dd:4b:c7:83:1f:42:cb:e0:c0:5c:3e:2b:90:9a:3d:00: 68:9d:91:60:16:4a:27:9f:ad:e9:8c:7b:55:de:69:46:c2:b0: 12:09:d3:a5:7c:92:35:0a:d3:39:d8:94:c8:65:c7:7b:5e:f7: 4f:98:22:33:b0:bc:c6:d9:81:18:50:b8:84:26:12:44:ee:5d: 60:9b:b8:15:b0:1b:70:e6:d8:25:22:c6:67:0c:71:b6:8f:59: 0e:49:c7:d5:c6:53:c5:43:b3:1d:b4:fc:c6:66:ad:f1:08:1f: 64:fc:14:2b:89:16:62:e0:05:b7:43:dd:1a:56:e5:f5:ba:af: 4a:e2:30:95:92:a7:7e:b3:a0:34:4a:1f:35:fb:58:29:05:e7: 68:3b:e9:25:b9:ef:e3:cc:01:88:3b:1a:00:6d:3e:32:33:51: b2:ce:19:5c:c8:1f:3e:f7:69:39:5b:a0:85:92:fa:0d:1f:f5: 36:22:82:f0:06:59:a1:88:06:6b:f5:6d:c1:a3:11:c3:10:a4: 40:4e:12:06 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjYwNDExMDIzNDIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5YjMyZS1kNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArybAGieduGBmPZbGyeaFQtnxEPJkCzvHUECAkhL0OES6DiP6b4PoHRHRY50j /04DAIJLBReRZM7ZVsXi3bLd1E4dE2MJu5zUfK1+XZIOFi3Rk5F+uvAEumWHSgLF tiLB93vx53KiLjAIy2Jpo66Zfo4E/n5VzLAqshyHsr7Hp5sRabf36ugZrf3av8ys XO3pGkTTtpVzZnLT2msadNxkECbqOwF5fcMFS2jci45UtiwvH91Dq3X8tDlEyMd1 3nBWfx/y58v57rXeVBQasvQw01BU136606ZeiaNy4gO7jwaDTa9OGwNRXqsJB+oQ z96WmrTm/t9IHXZATxUxosLtHQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJXREfo/ xiEsLjBecxA0WT1vSoVbMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE5QkMvQkUyQ0VGRjBCM0FBMTFFREFGMzE2MjNGQzRGOUFFMDIvNjg4QjZGMTgz NTU4MTFGMEFGNzk5MTBFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcBIAEN9jSAMA0GCSqGSIb3DQEBCwUAA4IBAQAObC6YbFa/yNI9Sre/ 3mr004/Xq77OegeHpGdyqeFxBQyVSZy61QsJhnUdVfAo2L0HYk87Hr6Isd1Lx4Mf QsvgwFw+K5CaPQBonZFgFkonn63pjHtV3mlGwrASCdOlfJI1CtM52JTIZcd7XvdP mCIzsLzG2YEYULiEJhJE7l1gm7gVsBtw5tglIsZnDHG2j1kOScfVxlPFQ7MdtPzG Zq3xCB9k/BQriRZi4AW3Q90aVuX1uq9K4jCVkqd+s6A0Sh81+1gpBedoO+klue/j zAGIOxoAbT4yM1GyzhlcyB8+92k5W6CFkvoNH/U2IoLwBlmhiAZr9W3BoxHDEKRA ThIG -----END CERTIFICATE-----Generated at Sun Apr 19 10:13:53 2026 by rpki-client