$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/5F652B164A0311EC84EFD42FC4F9AE02.roa File: 5F652B164A0311EC84EFD42FC4F9AE02.roa (raw, json) Hash identifier: Io7wgRi5NfMwoOxaB7Zuekqg6+kgj5e9y/7frng6bEA= Subject key identifier: 23:B4:7E:8D:E8:FB:1E:AB:DE:26:49:35:82:0A:A5:6B:FE:A0:40:73 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 064F Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/5F652B164A0311EC84EFD42FC4F9AE02.roa Signing time: Thu 06 Aug 2026 22:45:14 +0000 ROA not before: Thu 06 Aug 2026 22:45:14 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38323 IP address blocks: 2001:df7:1480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 22:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Aug 6 22:45:14 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a750e7a-fd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:2a:54:85:5a:73:7e:fe:c8:92:4c:a4:00: fe:39:0d:5f:fd:c1:3c:9a:68:87:10:37:a5:08:77: 6d:0e:19:58:86:0e:79:e6:5d:0f:a5:9b:29:24:9d: 6e:64:26:f8:00:20:79:76:66:b2:5f:79:f3:79:65: ae:48:e9:af:e4:0a:cc:12:13:2b:6f:31:97:b2:4a: f4:28:88:4a:85:36:e4:98:38:88:7a:5d:ac:7f:78: 24:a0:74:56:22:8a:ed:5f:0d:0d:04:c3:da:65:58: 14:ae:f1:02:70:9c:48:e6:df:00:0e:fb:2e:63:f2: a6:a7:a8:46:a3:29:e1:ce:4a:c2:e7:03:37:bb:61: 03:71:0a:84:aa:87:2b:28:3a:07:c4:57:f3:1e:a4: ec:f2:a0:27:6b:57:b5:79:dc:35:3c:a2:48:4b:24: f4:1d:31:df:26:d2:df:84:09:45:a5:cd:ec:98:00: ae:88:b0:a9:f0:e4:7f:d0:79:2a:22:0e:c7:ab:5f: 00:d4:ca:23:6f:1b:43:e3:43:6a:3f:43:35:7b:88: 99:b6:d7:4d:dc:41:a5:9c:37:d4:f0:52:0e:e8:50: 31:80:ed:16:5e:8c:4c:8c:01:1b:f5:ce:27:d4:cf: 13:f5:5a:e3:28:9e:cb:45:f8:e4:e9:6a:e7:fe:d0: eb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B4:7E:8D:E8:FB:1E:AB:DE:26:49:35:82:0A:A5:6B:FE:A0:40:73 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/5F652B164A0311EC84EFD42FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df7:1480::/48 Signature Algorithm: sha256WithRSAEncryption 1b:37:d0:e1:f4:c5:7c:29:8f:98:25:40:f2:37:99:ab:5d:3c: a7:17:56:bd:24:a7:a2:00:77:65:3f:9f:c1:d4:d7:9e:34:0c: 81:d7:99:1b:0e:60:88:6d:7c:59:73:f5:29:cd:02:36:af:3d: db:c2:f3:f6:ba:ad:0a:b1:5b:82:55:ff:d6:3e:11:f1:95:11: a8:5d:95:dd:aa:c9:94:2c:b8:af:9a:aa:29:3d:50:43:72:12: 49:f3:d4:fb:dc:ff:99:dc:c3:03:85:94:75:7c:ea:6b:3e:72: cd:14:22:c0:d8:67:50:f1:4e:f6:fb:8e:d3:a9:fd:cf:81:1e: 95:e2:2c:cf:a7:e0:79:a1:22:16:42:c2:14:0f:d4:46:eb:d8: 55:83:32:25:c4:bb:42:40:84:5e:1b:6c:36:77:9e:a7:9e:8c: a5:46:25:34:2b:c1:3b:ce:ab:ce:02:dc:66:d2:7f:4c:ac:6f: d7:d8:5d:08:eb:08:cb:89:e3:c7:bf:66:56:21:31:1d:21:b6: b8:8e:8b:5a:1a:99:dc:4e:d7:2e:18:aa:eb:24:10:08:02:38: ed:89:30:ee:9b:10:7d:4e:9e:5d:e4:63:90:62:3d:cf:1c:8d: 16:ec:de:07:c8:36:03:b2:31:fb:f7:45:73:c2:c1:8c:ee:d8: 6c:8d:0b:44 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwODA2MjI0NTE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1MGU3YS1mZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2EqVIVac37+yJJMpAD+OQ1f/cE8mmiHEDelCHdtDhlYhg555l0PpZspJJ1u ZCb4ACB5dmayX3nzeWWuSOmv5ArMEhMrbzGXskr0KIhKhTbkmDiIel2sf3gkoHRW IortXw0NBMPaZVgUrvECcJxI5t8ADvsuY/Kmp6hGoynhzkrC5wM3u2EDcQqEqocr KDoHxFfzHqTs8qAna1e1edw1PKJISyT0HTHfJtLfhAlFpc3smACuiLCp8OR/0Hkq Ig7Hq18A1MojbxtD40NqP0M1e4iZttdN3EGlnDfU8FIO6FAxgO0WXoxMjAEb9c4n 1M8T9VrjKJ7LRfjk6Wrn/tDr+QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFCO0fo3o +x6r3iZJNYIKpWv+oEBzMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4RTMvNTM5M0MwRUUwMDI2MTFFQ0E0MDYxNjE0QzRGOUFFMDIvNUY2NTJCMTY0 QTAzMTFFQzg0RUZENDJGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9xSAMA0GCSqGSIb3DQEBCwUAA4IBAQAbN9Dh9MV8KY+YJUDy N5mrXTynF1a9JKeiAHdlP5/B1NeeNAyB15kbDmCIbXxZc/UpzQI2rz3bwvP2uq0K sVuCVf/WPhHxlRGoXZXdqsmULLivmqopPVBDchJJ89T73P+Z3MMDhZR1fOprPnLN FCLA2GdQ8U72+47Tqf3PgR6V4izPp+B5oSIWQsIUD9RG69hVgzIlxLtCQIReG2w2 d56nnoylRiU0K8E7zqvOAtxm0n9MrG/X2F0I6wjLiePHv2ZWITEdIba4jotaGpnc TtcuGKrrJBAIAjjtiTDumxB9Tp5d5GOQYj3PHI0W7N4HyDYDsjH790VzwsGM7ths jQtE -----END CERTIFICATE-----Generated at Mon Aug 10 00:42:20 2026 by rpki-client