$ rpki-client -vvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/F098580828C511EFB2C79E5FC4F9AE02.roa File: F098580828C511EFB2C79E5FC4F9AE02.roa (raw, json) Hash identifier: w2XOSYSVPfFuJ9EOEOjpxW5/RY7joVGE5SSXWuMDy1A= Subject key identifier: BB:AA:10:36:DE:A3:57:82:77:22:D7:B8:33:80:89:E8:DF:9D:B4:67 Certificate issuer: /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A Certificate serial: 028A Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/F098580828C511EFB2C79E5FC4F9AE02.roa Signing time: Tue 11 Aug 2026 02:51:48 +0000 ROA not before: Tue 11 Aug 2026 02:51:48 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 151403 IP address blocks: 2401:aa0::/32 maxlen: 32 2401:aa0::/34 maxlen: 34 2401:aa0::/48 maxlen: 48 2401:aa0:1::/48 maxlen: 48 2401:aa0:2::/48 maxlen: 48 2401:aa0:3::/48 maxlen: 48 2401:aa0:4::/48 maxlen: 48 2401:aa0:5::/48 maxlen: 48 2401:aa0:6::/48 maxlen: 48 2401:aa0:7::/48 maxlen: 48 2401:aa0:8::/48 maxlen: 48 2401:aa0:4000::/34 maxlen: 34 2401:aa0:8000::/34 maxlen: 34 2401:aa0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383F0, serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A Validity Not Before: Aug 11 02:51:48 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a7a8e44-fe28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:c1:56:3a:0c:47:a4:9d:01:44:d3:f4:9a: fe:d7:23:fe:c4:40:0c:85:b6:ab:aa:62:86:ff:98: e5:8c:d9:eb:5b:92:14:7a:13:00:7c:3c:ad:21:35: 49:39:fc:87:09:b8:ab:ab:27:c3:0b:c0:ad:68:06: 98:2a:c0:7e:0d:4c:57:40:a5:56:52:5f:9a:87:c5: b9:b1:63:bc:2d:1e:ee:38:85:4b:06:2a:d2:b2:f8: fb:6d:3e:53:8f:87:08:39:02:03:14:75:ae:33:ec: 1e:1e:59:22:29:2f:0b:31:88:77:64:fe:af:ab:bc: 2f:2b:86:c3:06:94:01:c5:7a:61:fe:90:7f:9b:22: 8d:64:53:f7:84:b3:53:5c:91:60:78:ad:ec:39:36: 13:ba:12:c6:8e:a4:e6:0f:0d:f7:6e:d1:85:d8:76: 94:e5:e7:c4:52:cd:e3:3a:fa:3d:49:b5:39:1d:51: 2c:18:3f:c9:bb:53:50:5e:3e:f5:7c:f3:c8:5e:96: a5:82:0d:f3:02:7b:26:dd:3a:99:c6:dd:88:7d:b8: a1:77:f3:b0:d7:29:88:c9:5b:16:56:cd:15:d3:29: 35:43:c2:d2:a2:e8:24:e9:d7:3e:aa:40:90:3c:64: 3e:ff:0d:0c:94:95:0b:d8:fc:6c:f7:15:b5:84:ba: 58:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:10:36:DE:A3:57:82:77:22:D7:B8:33:80:89:E8:DF:9D:B4:67 X509v3 Authority Key Identifier: keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/F098580828C511EFB2C79E5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:aa0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:10:eb:b9:88:82:f6:44:26:a9:61:2c:16:79:7a:11:ce:6e: 09:01:30:de:1c:d5:e5:39:52:3c:48:77:d5:78:6f:fd:02:37: fb:4c:7a:5f:f2:6c:01:42:e6:3d:26:8e:50:1b:9c:6a:63:9f: e3:9c:7e:60:84:0a:87:c6:9d:62:3e:05:df:ab:91:d5:69:91: ab:f9:69:27:6c:33:8c:25:e4:e8:32:b4:b8:63:f8:4c:34:e3: c3:f8:e1:2b:05:14:a8:7e:e0:57:91:41:31:d1:50:3e:82:04: 6a:f1:da:86:0d:ae:68:af:dd:e8:a4:a5:79:62:3c:d5:0f:25: 1d:2a:ab:80:16:65:cb:57:bf:4f:ab:5f:84:f2:28:72:e0:b2: 3f:09:be:44:be:21:62:b5:dc:40:49:4d:6e:83:dd:8c:c0:f2: 27:f4:03:83:14:2a:35:e2:48:ed:6c:0b:8c:2f:58:7b:d8:07: 36:9f:49:14:12:85:1a:ad:6d:92:ce:18:d3:87:23:e0:c9:9a: dc:f6:88:c7:ef:98:66:24:13:68:6c:cf:7d:11:a3:e0:63:d5: e3:2a:fb:9d:6c:76:b9:f7:6c:3b:c6:62:ce:0c:b7:b6:d7:64: ff:ab:e5:6f:7b:6e:27:c2:09:cc:82:c8:68:54:1e:b8:1f:e1: 06:36:5e:70 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRjAxMTAvBgNVBAUTKDEwMzZDMUUwRkZFMUNGQzM3RDY1NUQ4OUZBNjVENjVG RTIyRTFGN0EwHhcNMjYwODExMDI1MTQ4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdhOGU0NC1mZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtELBVjoMR6SdAUTT9Jr+1yP+xEAMhbarqmKG/5jljNnrW5IUehMAfDytITVJ OfyHCbirqyfDC8CtaAaYKsB+DUxXQKVWUl+ah8W5sWO8LR7uOIVLBirSsvj7bT5T j4cIOQIDFHWuM+weHlkiKS8LMYh3ZP6vq7wvK4bDBpQBxXph/pB/myKNZFP3hLNT XJFgeK3sOTYTuhLGjqTmDw33btGF2HaU5efEUs3jOvo9SbU5HVEsGD/Ju1NQXj71 fPPIXpalgg3zAnsm3TqZxt2Ifbihd/Ow1ymIyVsWVs0V0yk1Q8LSougk6dc+qkCQ PGQ+/w0MlJUL2Pxs9xW1hLpYmQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFLuqEDbe o1eCdyLXuDOAiejfnbRnMB8GA1UdIwQYMBaAFBA2weD/4c/DfWVdifpl1l/iLh96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNGMC9EQ0ZDQTZBMjBB ODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4TjlaVjJKLW1YV1gtSXVI M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VEYkI0UF9oejhOOVpWMkotbVhXWC1JdUgzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzgzRjAvRENGQ0E2QTIwQTgzMTFFRTlFNkE5MjUwQzRGOUFFMDIvRjA5ODU4MDgy OEM1MTFFRkIyQzc5RTVGQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAEKoDANBgkqhkiG9w0BAQsFAAOCAQEAPxDruYiC9kQmqWEsFnl6 Ec5uCQEw3hzV5TlSPEh31Xhv/QI3+0x6X/JsAULmPSaOUBucamOf45x+YIQKh8ad Yj4F36uR1WmRq/lpJ2wzjCXk6DK0uGP4TDTjw/jhKwUUqH7gV5FBMdFQPoIEavHa hg2uaK/d6KSleWI81Q8lHSqrgBZly1e/T6tfhPIocuCyPwm+RL4hYrXcQElNboPd jMDyJ/QDgxQqNeJI7WwLjC9Ye9gHNp9JFBKFGq1tks4Y04cj4Mma3PaIx++YZiQT aGzPfRGj4GPV4yr7nWx2ufdsO8Zizgy3ttdk/6vlb3tuJ8IJzILIaFQeuB/hBjZe cA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:18 2026 by rpki-client