$ rpki-client -vvvf rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/5B3A99C4C30011F1AAB76E045811F970.roa File: 5B3A99C4C30011F1AAB76E045811F970.roa (raw, json) Hash identifier: EWeu7Mhpq23d73QkGwC8gFcJvBUMXRJDugrR0ws0fWk= Subject key identifier: 80:53:DA:D5:CA:F3:09:40:69:01:FE:4A:FB:C4:97:B0:71:8D:BD:38 Certificate issuer: /CN=A91947D3/serialNumber=3D4FC37F34609C9AC5F8DF8824DA9B3325BF0D6B Certificate serial: 04 Authority key identifier: 3D:4F:C3:7F:34:60:9C:9A:C5:F8:DF:88:24:DA:9B:33:25:BF:0D:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PU_DfzRgnJrF-N-IJNqbMyW_DWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/5B3A99C4C30011F1AAB76E045811F970.roa Signing time: Thu 08 Oct 2026 10:09:32 +0000 ROA not before: Thu 08 Oct 2026 10:09:32 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 136547 IP address blocks: 2001:df1:1d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.crl rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PU_DfzRgnJrF-N-IJNqbMyW_DWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947D3, serialNumber=3D4FC37F34609C9AC5F8DF8824DA9B3325BF0D6B Validity Not Before: Oct 8 10:09:32 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6ac76bdc-a843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:d2:e1:2c:d6:6a:2a:8a:9a:fe:f5:37:d7: a5:f6:7d:88:20:86:f6:08:ba:e0:cf:f3:ec:35:c6: 6d:f4:9e:05:4f:18:d2:53:89:f7:9f:1d:e4:31:ae: d0:28:df:6d:cb:e8:60:63:51:b9:e7:ea:fb:a2:d3: eb:00:04:73:1b:56:ea:1f:87:05:56:2e:3c:f3:b0: 71:89:b6:e6:13:b3:a7:b9:9d:ad:eb:d7:5f:50:9e: c7:62:32:99:35:04:c5:1a:97:ce:55:a8:d3:c3:7e: c1:78:66:57:21:71:88:69:91:02:79:37:ad:46:33: 9f:47:37:9c:e4:8f:76:22:97:9a:ea:ea:a6:99:de: 9c:41:ca:9c:92:69:c6:04:bc:6b:1b:f0:cd:91:d1: 20:db:28:25:5b:8a:54:2a:7e:31:e9:42:44:56:d1: 8e:fc:c9:61:33:46:88:fb:09:d7:09:48:ea:36:af: b5:b2:ff:d4:af:c9:f4:17:84:71:56:af:e6:20:d2: a5:b6:75:26:f7:19:8b:aa:00:e9:8f:65:53:dd:c2: e4:58:ff:f0:1c:e4:cc:71:d6:e9:54:fe:e2:20:98: 24:a1:17:bf:5e:b5:83:62:d6:c3:c0:32:6b:7f:21: 5c:6d:26:0c:6c:9e:e9:01:15:84:6c:f0:9b:5e:0f: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:DA:D5:CA:F3:09:40:69:01:FE:4A:FB:C4:97:B0:71:8D:BD:38 X509v3 Authority Key Identifier: keyid:3D:4F:C3:7F:34:60:9C:9A:C5:F8:DF:88:24:DA:9B:33:25:BF:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/PU_DfzRgnJrF-N-IJNqbMyW_DWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PU_DfzRgnJrF-N-IJNqbMyW_DWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947D3/A15B9654C2F311F1A39776635411F970/5B3A99C4C30011F1AAB76E045811F970.roa sbgp-ipAddrBlock: critical IPv6: 2001:df1:1d00::/48 Signature Algorithm: sha256WithRSAEncryption 74:ac:4f:3d:e7:22:fc:22:9a:9f:05:9f:a1:52:0f:1b:d4:5f: 97:37:48:b5:7a:5d:7b:0e:8e:66:2c:c8:d1:dc:b9:23:9d:b0: c3:fa:84:77:78:ee:90:e3:46:7f:6d:54:88:44:1d:52:91:cf: 1b:9d:3b:4b:43:a5:9a:94:9f:04:88:43:a0:c7:27:9f:41:1c: 8d:3c:fa:33:74:32:42:4c:88:78:e4:f1:6e:34:d7:03:b7:28: f7:db:60:76:22:2e:d6:9d:5f:7f:2f:04:6d:8c:d4:cd:5b:aa: ba:77:20:04:ee:7c:66:72:cf:d3:93:72:1f:6a:06:3a:39:9e: 58:9f:2e:ac:88:5f:47:ed:bc:0c:30:1f:c4:94:c8:a0:46:3c: 63:25:5e:af:a2:23:0f:0b:0c:eb:12:ab:b1:1f:90:da:2f:9d: 71:63:f2:ee:98:3e:de:a9:8f:ce:25:fc:a9:49:38:7a:e6:0a: b7:b5:08:e0:d5:31:85:29:a6:68:d7:24:03:22:4e:1e:23:b4: 6d:82:2f:b7:26:3e:6f:34:1c:5a:12:88:0f:5e:78:35:f2:55: 9b:ac:49:36:c8:6b:8c:de:f9:6d:61:83:b9:ec:28:a7:2f:7f: 84:bd:e4:bd:58:dd:56:13:57:ee:9f:14:f3:18:da:46:aa:9d: 1d:f7:76:69 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDdEMzExMC8GA1UEBRMoM0Q0RkMzN0YzNDYwOUM5QUM1RjhERjg4MjREQTlCMzMy NUJGMEQ2QjAeFw0yNjEwMDgxMDA5MzJaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYzc2YmRjLWE4NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWBdLhLNZqKoqa/vU316X2fYgghvYIuuDP8+w1xm30ngVPGNJTifefHeQxrtAo 323L6GBjUbnn6vui0+sABHMbVuofhwVWLjzzsHGJtuYTs6e5na3r119QnsdiMpk1 BMUal85VqNPDfsF4ZlchcYhpkQJ5N61GM59HN5zkj3Yil5rq6qaZ3pxBypySacYE vGsb8M2R0SDbKCVbilQqfjHpQkRW0Y78yWEzRoj7CdcJSOo2r7Wy/9SvyfQXhHFW r+Yg0qW2dSb3GYuqAOmPZVPdwuRY//Ac5Mxx1ulU/uIgmCShF79etYNi1sPAMmt/ IVxtJgxsnukBFYRs8JteD9flAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUgFPa1crz CUBpAf5K+8SXsHGNvTgwHwYDVR0jBBgwFoAUPU/DfzRgnJrF+N+IJNqbMyW/DWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0N0QzL0ExNUI5NjU0QzJG MzExRjFBMzk3NzY2MzU0MTFGOTcwL1BVX0RmelJnbkpyRi1OLUlKTnFiTXlXX0RX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFVfRGZ6UmduSnJGLU4tSUpOcWJNeVdfRFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdEMy9BMTVCOTY1NEMyRjMxMUYxQTM5Nzc2NjM1NDExRjk3MC81QjNBOTlDNEMz MDAxMUYxQUFCNzZFMDQ1ODExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ3xHQAwDQYJKoZIhvcNAQELBQADggEBAHSsTz3nIvwimp8Fn6FS DxvUX5c3SLV6XXsOjmYsyNHcuSOdsMP6hHd47pDjRn9tVIhEHVKRzxudO0tDpZqU nwSIQ6DHJ59BHI08+jN0MkJMiHjk8W401wO3KPfbYHYiLtadX38vBG2M1M1bqrp3 IATufGZyz9OTch9qBjo5nlifLqyIX0ftvAwwH8SUyKBGPGMlXq+iIw8LDOsSq7Ef kNovnXFj8u6YPt6pj84l/KlJOHrmCre1CODVMYUppmjXJAMiTh4jtG2CL7cmPm80 HFoSiA9eeDXyVZusSTbIa4ze+W1hg7nsKKcvf4S95L1Y3VYTV+6fFPMY2kaqnR33 dmk= -----END CERTIFICATE-----Generated at Mon Oct 26 17:52:06 2026 by rpki-client