$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/2152FB1650C511EAB566FE61C4F9AE02.roa File: 2152FB1650C511EAB566FE61C4F9AE02.roa (raw, json) Hash identifier: 4Dur1jIx3Py+FV9GnftEwHBIoGYO+qrpeIHWnQl1eg4= Subject key identifier: 7D:5F:BC:97:46:D1:66:83:A1:35:DD:75:8F:C3:C3:2E:3C:82:3F:BB Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0F94 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/2152FB1650C511EAB566FE61C4F9AE02.roa Signing time: Wed 02 Sep 2026 18:35:33 +0000 ROA not before: Wed 02 Sep 2026 18:35:33 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 139618 IP address blocks: 2001:df1:4580::/48 maxlen: 48 2405:84c0:9000::/44 maxlen: 44 2405:84c0:9010::/44 maxlen: 44 2405:84c0:9020::/44 maxlen: 44 2405:84c0:9100::/44 maxlen: 44 2405:84c0:9110::/44 maxlen: 44 2405:84c0:9120::/44 maxlen: 44 2405:84c0:ff80::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3988 (0xf94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 2 18:35:33 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a986c75-23ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:4b:84:8d:b4:e4:a6:7d:73:81:3d:b8:b3: 0b:29:42:6f:0a:04:f7:9e:2e:f8:91:ab:df:eb:76: 4f:92:ec:c2:09:ef:49:d2:91:0a:c7:fe:cc:a8:43: 2e:e8:01:36:96:c7:1f:9c:40:01:ec:fd:07:ca:47: 4e:c3:ae:22:d7:de:87:84:8b:63:11:48:0d:9c:7b: c2:60:fe:3c:d1:55:41:cc:34:e4:3b:bd:2a:a7:9e: f5:3c:09:89:a1:c7:5c:7d:de:7d:b3:ff:b4:82:a4: e6:6c:b8:97:1b:15:c3:c5:ad:ea:d5:da:13:41:7c: cb:ce:39:97:16:18:02:e9:83:fd:98:b2:c8:dc:73: 91:18:c3:34:ef:58:43:56:fb:e2:2a:5e:d0:7d:4c: 32:0d:6f:b5:8f:4b:bc:40:8a:28:d2:db:1e:a7:2d: 12:2b:9c:f6:43:6d:f8:75:84:c7:97:02:46:59:a4: 91:e1:0b:44:1d:09:2e:76:6e:14:35:4a:45:9a:a4: d0:0f:be:5c:31:88:a3:0b:b9:9e:b9:7d:73:94:3e: b1:0d:aa:3b:0b:e9:16:cf:c2:95:ae:bf:af:7b:06: ba:ea:7b:c4:61:07:7e:d5:21:b4:6e:1f:b2:b4:0d: e8:ea:cf:62:ac:aa:fc:e0:0e:a9:d1:79:ec:9b:41: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5F:BC:97:46:D1:66:83:A1:35:DD:75:8F:C3:C3:2E:3C:82:3F:BB X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/2152FB1650C511EAB566FE61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df1:4580::/48 2405:84c0:9000::-2405:84c0:902f:ffff:ffff:ffff:ffff:ffff 2405:84c0:9100::-2405:84c0:912f:ffff:ffff:ffff:ffff:ffff 2405:84c0:ff80::/44 Signature Algorithm: sha256WithRSAEncryption 60:12:7f:ae:8a:80:0f:da:e0:0a:bf:dd:d5:82:91:79:e5:fb: be:2d:34:22:86:56:0e:d6:c1:78:6c:a9:ab:29:46:a9:93:da: ee:77:31:12:39:b4:ff:16:5f:ac:ce:d0:dc:ae:5d:4a:33:dc: b9:3d:4f:f5:ea:d6:6f:35:29:88:a9:44:34:52:f5:e2:6f:8b: 87:87:5a:05:06:c0:fb:ec:e2:c8:39:24:4b:59:e9:90:5e:a6: ad:51:1c:c5:ea:7b:7a:3e:ae:da:3e:89:18:72:5c:a3:d3:1c: 81:91:03:c2:56:3f:cb:cc:86:c7:ec:99:fc:61:fe:de:89:93: 79:f6:cd:97:8c:cb:5a:ed:e9:c8:80:c6:de:9a:72:5f:6e:22: ac:f5:18:f9:e8:8c:dd:69:09:1a:30:d1:52:9c:4b:48:44:cb: 8c:c0:56:c6:f7:e1:e9:af:67:5c:49:72:2c:3a:1a:b7:69:a5: 26:4c:13:25:3b:99:9a:d9:e2:db:aa:f8:e2:45:2a:f1:65:cf: d5:93:aa:da:78:16:fb:15:b2:8d:6b:ee:21:f2:bb:20:09:fd: 6d:fb:f4:79:1f:42:32:c9:0c:97:e1:af:b9:75:64:99:38:1f: 82:ca:87:fa:df:13:eb:62:e7:ba:cb:61:79:44:78:c0:fb:46: 65:64:e7:68 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICD5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjYwOTAyMTgzNTMzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NmM3NS0yM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34VLhI205KZ9c4E9uLMLKUJvCgT3ni74kavf63ZPkuzCCe9J0pEKx/7MqEMu 6AE2lscfnEAB7P0HykdOw64i196HhItjEUgNnHvCYP480VVBzDTkO70qp571PAmJ ocdcfd59s/+0gqTmbLiXGxXDxa3q1doTQXzLzjmXFhgC6YP9mLLI3HORGMM071hD VvviKl7QfUwyDW+1j0u8QIoo0tsepy0SK5z2Q234dYTHlwJGWaSR4QtEHQkudm4U NUpFmqTQD75cMYijC7meuX1zlD6xDao7C+kWz8KVrr+vewa66nvEYQd+1SG0bh+y tA3o6s9irKr84A6p0Xnsm0GdIwIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFH1fvJdG 0WaDoTXddY/Dwy48gj+7MB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvMjE1MkZCMTY1 MEM1MTFFQUI1NjZGRTYxQzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAAjA4AwcAIAEN8UWAMBEDBgQkBYTAkAMHBCQFhMCQIDARAwYAJAWEwJEDBwQk BYTAkSADBwQkBYTA/4AwDQYJKoZIhvcNAQELBQADggEBAGASf66KgA/a4Aq/3dWC kXnl+74tNCKGVg7WwXhsqaspRqmT2u53MRI5tP8WX6zO0NyuXUoz3Lk9T/Xq1m81 KYipRDRS9eJvi4eHWgUGwPvs4sg5JEtZ6ZBepq1RHMXqe3o+rto+iRhyXKPTHIGR A8JWP8vMhsfsmfxh/t6Jk3n2zZeMy1rt6ciAxt6acl9uIqz1GPnojN1pCRow0VKc S0hEy4zAVsb34emvZ1xJciw6GrdppSZMEyU7mZrZ4tuq+OJFKvFlz9WTqtp4FvsV so1r7iHyuyAJ/W379HkfQjLJDJfhr7l1ZJk4H4LKh/rfE+ti57rLYXlEeMD7RmVk 52g= -----END CERTIFICATE-----Generated at Sat Sep 5 08:54:06 2026 by rpki-client