$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B066E5B6C5C111F0BD9B1831C4F9AE02.roa File: B066E5B6C5C111F0BD9B1831C4F9AE02.roa (raw, json) Hash identifier: 3SAss0MqifvhYCSKVAgI5ST/pMGSkdk9iBE2hF9Y7Y8= Subject key identifier: 99:66:67:DF:1A:54:36:EA:49:F2:36:0E:EF:9D:F1:E4:8B:39:EF:FC Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0F98 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B066E5B6C5C111F0BD9B1831C4F9AE02.roa Signing time: Wed 02 Sep 2026 18:35:41 +0000 ROA not before: Wed 02 Sep 2026 18:35:41 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 209554 IP address blocks: 2001:df1:4580::/48 maxlen: 48 2405:84c0::/32 maxlen: 32 2405:84c0::/48 maxlen: 48 2405:84c0:2000::/36 maxlen: 40 2405:84c0:4000::/36 maxlen: 40 2405:84c0:5000::/36 maxlen: 40 2405:84c0:6800::/40 maxlen: 44 2405:84c0:6f00::/40 maxlen: 44 2405:84c0:8000::/44 maxlen: 48 2405:84c0:8010::/44 maxlen: 48 2405:84c0:8020::/44 maxlen: 48 2405:84c0:8030::/44 maxlen: 48 2405:84c0:8040::/44 maxlen: 48 2405:84c0:8050::/44 maxlen: 48 2405:84c0:a000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3992 (0xf98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 2 18:35:41 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a986c7d-a383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:fd:86:2e:dd:78:79:42:85:f1:8c:56:01: de:2a:54:02:0d:7f:8e:62:78:b3:8f:59:6d:57:99: dc:1c:e2:35:af:e1:9e:b5:b5:8b:42:9d:1a:23:81: 65:4a:ac:54:e4:2c:d6:5b:e6:8c:5f:ef:f5:92:43: ec:93:08:50:84:da:48:00:09:e3:51:60:08:99:d9: f7:20:bb:60:b7:a2:20:3b:0b:e8:45:f3:94:55:a0: 81:96:9f:0f:c4:64:97:0b:48:d1:13:6f:a8:6b:64: ac:8b:6c:c7:4f:90:94:90:df:2b:b3:bd:3d:ca:ce: 28:af:5b:ac:fa:6f:51:ed:2f:99:e0:19:77:3a:97: d4:b0:7e:fc:c2:86:24:b8:43:6c:18:88:2d:b0:de: e7:c5:32:81:ff:ae:27:d4:89:0c:88:6f:5d:df:70: 71:c8:fb:b3:a6:29:ca:cd:78:5e:7b:66:bd:53:84: b6:e4:47:a8:d6:bd:15:28:1b:13:b8:f0:45:a0:15: 41:2e:58:aa:39:ac:96:5f:0e:bd:02:68:19:ae:3a: 90:2f:af:c7:04:24:b2:30:ff:be:f0:2d:38:9f:5a: 38:d0:13:ec:1d:af:f1:b6:9c:ab:f2:9e:57:0a:90: 8a:11:04:46:0d:41:eb:ee:64:41:ad:4c:96:1c:86: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:66:67:DF:1A:54:36:EA:49:F2:36:0E:EF:9D:F1:E4:8B:39:EF:FC X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B066E5B6C5C111F0BD9B1831C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df1:4580::/48 2405:84c0::/32 Signature Algorithm: sha256WithRSAEncryption a2:dd:e5:02:58:ea:f0:ba:e2:b7:15:9b:f2:82:a3:c3:bb:55: 6b:fd:23:9f:c2:32:a8:0a:bc:9a:e9:58:8e:3d:f2:7a:bb:14: 72:22:de:0e:74:45:05:fa:a8:ae:58:fa:8f:1d:bc:03:a8:ac: 2f:4b:c3:7f:5e:8a:61:ae:85:5a:38:b2:cf:fc:87:6d:f1:e6: a5:48:63:92:21:51:5a:aa:45:93:93:1b:85:6a:77:e8:b6:55: f8:28:e0:1f:de:46:85:34:2e:dc:7e:1d:36:b5:9f:fd:c2:cc: b4:f0:ca:9c:7f:31:f1:56:7f:d9:0d:10:95:a7:70:97:8c:26: 90:d3:3e:da:e3:4d:98:99:34:12:b0:6a:e1:7d:cd:30:eb:8f: 1c:53:f7:93:a2:95:84:4c:0c:0b:d6:1a:ec:0f:ca:bc:e8:36: 1e:27:ed:99:48:9e:05:d9:d2:50:f9:c9:2b:df:64:5a:ce:76: 0b:67:97:05:59:25:3a:ea:d0:99:7d:b4:92:b8:34:87:9a:c5: 9f:78:a4:0b:9c:d7:b6:17:01:a7:2f:d8:c1:86:12:c5:b1:37: 3f:f9:65:4e:02:00:18:21:48:d8:50:4a:0d:b9:55:76:aa:e0: 44:17:01:2c:16:ca:c0:7d:d6:96:9e:4c:a9:33:f0:f2:35:66: 50:5a:ce:1d -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjYwOTAyMTgzNTQxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NmM3ZC1hMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgT9hi7deHlChfGMVgHeKlQCDX+OYnizj1ltV5ncHOI1r+GetbWLQp0aI4Fl SqxU5CzWW+aMX+/1kkPskwhQhNpIAAnjUWAImdn3ILtgt6IgOwvoRfOUVaCBlp8P xGSXC0jRE2+oa2Ssi2zHT5CUkN8rs709ys4or1us+m9R7S+Z4Bl3OpfUsH78woYk uENsGIgtsN7nxTKB/64n1IkMiG9d33BxyPuzpinKzXhee2a9U4S25Eeo1r0VKBsT uPBFoBVBLliqOayWXw69AmgZrjqQL6/HBCSyMP++8C04n1o40BPsHa/xtpyr8p5X CpCKEQRGDUHr7mRBrUyWHIYqjwIDAQABo4ICajCCAmYwHQYDVR0OBBYEFJlmZ98a VDbqSfI2Du+d8eSLOe/8MB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvQjA2NkU1QjZD NUMxMTFGMEJEOUIxODMxQzRGOUFFMDIucm9hMCkGCCsGAQUFBwEHAQH/BBowGDAW BAIAAjAQAwcAIAEN8UWAAwUAJAWEwDANBgkqhkiG9w0BAQsFAAOCAQEAot3lAljq 8LritxWb8oKjw7tVa/0jn8IyqAq8mulYjj3yersUciLeDnRFBfqorlj6jx28A6is L0vDf16KYa6FWjiyz/yHbfHmpUhjkiFRWqpFk5MbhWp36LZV+CjgH95GhTQu3H4d NrWf/cLMtPDKnH8x8VZ/2Q0Qladwl4wmkNM+2uNNmJk0ErBq4X3NMOuPHFP3k6KV hEwMC9Ya7A/KvOg2HiftmUieBdnSUPnJK99kWs52C2eXBVklOurQmX20krg0h5rF n3ikC5zXthcBpy/YwYYSxbE3P/llTgIAGCFI2FBKDblVdqrgRBcBLBbKwH3Wlp5M qTPw8jVmUFrOHQ== -----END CERTIFICATE-----Generated at Sat Sep 5 10:25:21 2026 by rpki-client