$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/DFC4CB6686F011F19E006003A7EE528E.roa File: DFC4CB6686F011F19E006003A7EE528E.roa (raw, json) Hash identifier: e4jwE0ZT8KKqzAYg8acBAl1aL2eMGYBkO5WKPD4gY0E= Subject key identifier: 64:DD:90:F1:71:DE:36:6C:AC:89:CB:F1:44:EA:E3:31:65:2F:C3:2E Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 125E Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/DFC4CB6686F011F19E006003A7EE528E.roa Signing time: Wed 26 Aug 2026 17:34:46 +0000 ROA not before: Wed 26 Aug 2026 17:34:46 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 22944 IP address blocks: 2404:f4c0:1009::/48 maxlen: 48 2404:f4c0:10b8::/45 maxlen: 48 2404:f4c0:10c0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 23:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4702 (0x125e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 26 17:34:46 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8f23b6-781d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:8b:a5:16:95:56:89:ec:a8:0f:11:f0:5f: b8:60:cf:37:7a:be:1e:98:f1:cd:c7:1a:6e:91:89: 85:85:5c:7b:20:75:e0:a9:47:c3:bf:e1:1a:f0:35: ca:b2:9b:28:e1:6c:49:90:de:4b:4f:3b:ab:4e:9c: e1:a6:9b:6a:49:d5:55:e9:75:15:c9:b2:35:4b:6a: bc:9d:2b:d0:c6:99:d0:ae:5a:f7:25:a8:7b:9c:25: d4:43:01:c5:a8:d1:74:e5:b8:a5:4f:ef:82:3f:61: 86:3e:e0:68:cd:46:fe:cf:e3:8a:b2:3f:3b:25:b7: 4f:cf:15:a7:ea:31:cf:26:18:44:09:5c:32:4b:10: 87:60:f9:f5:30:c1:ab:cb:41:97:a9:21:ae:9d:11: be:72:2b:53:d4:7e:92:63:9c:ea:85:c7:b0:bb:56: 61:37:50:86:39:e0:c4:35:9d:50:3c:5c:49:63:f2: 2b:52:d8:f9:ae:a0:2b:cd:2c:42:02:fd:92:1f:58: 2d:9c:36:37:93:62:15:3b:0a:93:bf:9c:cb:27:f5: 9a:e3:2e:97:77:eb:6e:ee:85:16:50:c4:50:42:28: 05:a7:3e:6f:b5:66:f9:f3:01:73:ec:72:98:14:6f: a3:e4:3d:0d:df:e8:bb:04:44:42:2a:83:06:e9:fa: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DD:90:F1:71:DE:36:6C:AC:89:CB:F1:44:EA:E3:31:65:2F:C3:2E X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/DFC4CB6686F011F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:1009::/48 2404:f4c0:10b8::-2404:f4c0:10ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6b:10:df:fe:b7:24:16:73:be:9e:73:d0:07:1e:d2:1d:23:84: 49:01:ce:8d:7e:eb:f4:1c:4f:b3:a4:6e:47:05:2d:15:21:44: d4:33:cf:ee:10:ad:8f:ef:8b:be:cf:ac:6a:d0:cb:2e:59:02: 08:88:9a:6e:bc:92:c6:fe:85:a2:f2:15:a2:1a:21:e2:e4:6d: e7:0a:fd:97:93:67:7e:1a:43:16:d9:a4:17:f8:96:83:58:dc: 92:d1:5e:14:f0:f6:6a:64:79:85:95:09:ea:53:50:98:89:e1: 07:db:34:31:86:aa:48:09:6f:d7:92:3b:9c:8b:af:75:78:1f: 32:fb:8a:a0:d7:e5:d0:bf:98:c9:73:a0:a5:e6:0f:1a:35:00: 4a:9d:01:01:62:86:0e:97:25:48:45:f5:8e:d3:a6:b2:c8:f1: a5:aa:2c:8c:8e:c2:11:d3:3c:08:5a:0c:b7:e1:b2:28:0b:f3: a4:61:de:0f:19:0a:54:5f:03:cd:6b:f5:6a:6a:41:c4:d4:b1: 8c:01:31:4c:47:51:68:0f:ca:cf:cc:fa:8e:99:99:69:cf:f9: a7:8a:71:01:e9:bf:b2:9f:43:17:ee:8e:df:d1:85:cd:40:0f: 2a:97:6f:5d:fa:83:f5:3c:13:9b:01:27:08:01:d9:f7:16:b5: 7a:65:06:d1 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICEl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjYwODI2MTczNDQ2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmMjNiNi03ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon2LpRaVVonsqA8R8F+4YM83er4emPHNxxpukYmFhVx7IHXgqUfDv+Ea8DXK spso4WxJkN5LTzurTpzhpptqSdVV6XUVybI1S2q8nSvQxpnQrlr3Jah7nCXUQwHF qNF05bilT++CP2GGPuBozUb+z+OKsj87JbdPzxWn6jHPJhhECVwySxCHYPn1MMGr y0GXqSGunRG+citT1H6SY5zqhcewu1ZhN1CGOeDENZ1QPFxJY/IrUtj5rqArzSxC Av2SH1gtnDY3k2IVOwqTv5zLJ/Wa4y6Xd+tu7oUWUMRQQigFpz5vtWb58wFz7HKY FG+j5D0N3+i7BERCKoMG6fq0UQIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFGTdkPFx 3jZsrInL8UTq4zFlL8MuMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvREZDNENCNjY4 NkYwMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi BAIAAjAcAwcAJAT0wBAJMBEDBwMkBPTAELgDBgAkBPTAEDANBgkqhkiG9w0BAQsF AAOCAQEAaxDf/rckFnO+nnPQBx7SHSOESQHOjX7r9BxPs6RuRwUtFSFE1DPP7hCt j++Lvs+satDLLlkCCIiabrySxv6FovIVohoh4uRt5wr9l5NnfhpDFtmkF/iWg1jc ktFeFPD2amR5hZUJ6lNQmInhB9s0MYaqSAlv15I7nIuvdXgfMvuKoNfl0L+YyXOg peYPGjUASp0BAWKGDpclSEX1jtOmssjxpaosjI7CEdM8CFoMt+GyKAvzpGHeDxkK VF8DzWv1ampBxNSxjAExTEdRaA/Kz8z6jpmZac/5p4pxAem/sp9DF+6O39GFzUAP KpdvXfqD9TwTmwEnCAHZ9xa1emUG0Q== -----END CERTIFICATE-----Generated at Thu Aug 27 15:09:30 2026 by rpki-client