$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/D17A895C0C5D11EAB1A29D67C4F9AE02.roa File: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (raw, json) Hash identifier: IEzFe4BPkAZ0NzJZL6yH2kjj+JWlwA9NjN+OrbuWGN8= Subject key identifier: 7A:65:43:5D:83:AA:EA:56:F1:8F:FC:4A:1E:4B:63:56:24:2F:1B:B1 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0F95 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/D17A895C0C5D11EAB1A29D67C4F9AE02.roa Signing time: Wed 02 Sep 2026 18:35:35 +0000 ROA not before: Wed 02 Sep 2026 18:35:35 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 139782 IP address blocks: 2405:84c0::/48 maxlen: 48 2405:84c0:2000::/36 maxlen: 40 2405:84c0:9c00::/40 maxlen: 40 2405:84c0:ff30::/44 maxlen: 44 2405:84c0:ff30::/48 maxlen: 48 2405:84c0:ff31::/48 maxlen: 48 2405:84c0:ff32::/48 maxlen: 48 2405:84c0:ff33::/48 maxlen: 48 2405:84c0:ff34::/48 maxlen: 48 2405:84c0:ff35::/48 maxlen: 48 2405:84c0:ff36::/48 maxlen: 48 2405:84c0:ff37::/48 maxlen: 48 2405:84c0:ff38::/48 maxlen: 48 2405:84c0:ff39::/48 maxlen: 48 2405:84c0:ff3a::/48 maxlen: 48 2405:84c0:ff3b::/48 maxlen: 48 2405:84c0:ff3c::/48 maxlen: 48 2405:84c0:ff3d::/48 maxlen: 48 2405:84c0:ff3e::/48 maxlen: 48 2405:84c0:ff3f::/48 maxlen: 48 2405:84c0:ff50::/44 maxlen: 48 2405:84c0:ff60::/44 maxlen: 44 2405:84c0:fff0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3989 (0xf95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 2 18:35:35 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a986c77-961c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:53:80:ff:82:5b:d2:04:c8:ae:a0:48:e2: f7:ad:17:28:75:9e:d9:7f:c3:cf:22:3e:9e:bb:63: 87:d6:b4:ce:db:73:29:80:5d:76:f8:a3:3f:a4:7c: 79:ac:12:87:20:6b:ff:ac:db:9d:9f:73:43:9d:86: 8d:4a:f9:0d:51:39:e0:68:4a:75:81:57:37:09:51: 3f:8d:f4:71:42:63:9c:6c:cf:9c:16:70:2f:ab:a7: 5c:f1:20:30:c9:8d:2d:01:4e:f2:a0:31:8d:95:00: 4e:b9:c1:d1:98:1e:da:f1:65:4b:ee:3c:80:3c:46: 93:68:3d:1f:b2:1a:7c:f8:5b:1d:cc:6c:5b:22:ab: c9:bb:c4:53:61:91:3b:d6:36:87:c5:03:6a:5c:a7: 9d:f8:fa:55:a4:9e:6b:2a:0f:1c:4c:f7:0d:b5:21: 6f:2e:00:ac:79:10:d5:b7:e3:7b:5e:f0:f6:e4:96: ce:fe:36:63:c4:de:a8:d2:5b:26:d2:65:5e:9b:fa: 11:cd:03:f7:ba:38:2b:7e:15:ad:15:71:7c:73:2d: e1:08:af:57:05:13:16:9e:70:5c:fa:8a:3f:12:35: bd:64:76:f8:f5:f2:32:54:b3:a0:6c:21:87:91:13: 11:a7:47:fa:06:0c:d9:4c:32:b9:2d:23:87:cd:7d: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:43:5D:83:AA:EA:56:F1:8F:FC:4A:1E:4B:63:56:24:2F:1B:B1 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/D17A895C0C5D11EAB1A29D67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2405:84c0::/48 2405:84c0:2000::/36 2405:84c0:9c00::/40 2405:84c0:ff30::/44 2405:84c0:ff50::-2405:84c0:ff6f:ffff:ffff:ffff:ffff:ffff 2405:84c0:fff0::/48 Signature Algorithm: sha256WithRSAEncryption b9:76:af:fd:9a:39:91:dd:6b:a4:28:28:83:33:dd:d3:5b:d3: b0:01:07:a1:90:bb:f2:24:2a:a9:f3:12:26:5f:06:53:85:20: ea:a2:ee:1f:61:0d:af:eb:87:e3:bc:97:88:ee:2e:17:e0:b3: bb:34:10:c8:3a:9f:ff:0e:be:1a:15:14:e4:73:d9:f0:58:eb: fd:27:2c:1a:7a:d9:69:15:fc:20:5b:04:b9:ec:ed:be:3b:db: d4:96:75:81:82:68:2b:ce:ea:c1:e8:aa:cd:7a:a7:13:9f:a0: 3b:2d:7a:07:f3:ee:da:1e:45:7f:d1:00:b2:81:7f:2b:c5:af: 87:12:9b:16:bf:6e:cb:5e:33:37:85:f4:38:27:6d:59:cd:0b: 92:46:53:1d:06:a7:45:aa:7a:23:43:7b:ee:86:3d:b9:e0:15: 32:f1:77:bd:03:6c:fc:d8:fe:88:b0:49:6c:0a:26:48:dd:cc: 06:7c:1a:6b:fe:06:da:3d:b0:e4:3c:97:ba:d4:47:c1:2e:c9: ac:3d:c0:59:8b:d3:db:8e:bf:50:06:51:60:2a:4d:bd:c9:f9: bb:af:7f:40:e4:75:0f:77:4c:55:77:17:57:42:18:0b:ea:2a: 02:3d:37:b2:3a:4d:a6:c3:0a:0c:7f:01:cd:9b:fa:b2:91:e0: fd:d8:cc:e5 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICD5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjYwOTAyMTgzNTM1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NmM3Ny05NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIVTgP+CW9IEyK6gSOL3rRcodZ7Zf8PPIj6eu2OH1rTO23MpgF12+KM/pHx5 rBKHIGv/rNudn3NDnYaNSvkNUTngaEp1gVc3CVE/jfRxQmOcbM+cFnAvq6dc8SAw yY0tAU7yoDGNlQBOucHRmB7a8WVL7jyAPEaTaD0fshp8+FsdzGxbIqvJu8RTYZE7 1jaHxQNqXKed+PpVpJ5rKg8cTPcNtSFvLgCseRDVt+N7XvD25JbO/jZjxN6o0lsm 0mVem/oRzQP3ujgrfhWtFXF8cy3hCK9XBRMWnnBc+oo/EjW9ZHb49fIyVLOgbCGH kRMRp0f6BgzZTDK5LSOHzX07YQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFHplQ12D qupW8Y/8Sh5LY1YkLxuxMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvRDE3QTg5NUMw QzVEMTFFQUIxQTI5RDY3QzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzBF BAIAAjA/AwcAJAWEwAAAAwYEJAWEwCADBgAkBYTAnAMHBCQFhMD/MDASAwcEJAWE wP9QAwcEJAWEwP9gAwcAJAWEwP/wMA0GCSqGSIb3DQEBCwUAA4IBAQC5dq/9mjmR 3WukKCiDM93TW9OwAQehkLvyJCqp8xImXwZThSDqou4fYQ2v64fjvJeI7i4X4LO7 NBDIOp//Dr4aFRTkc9nwWOv9JywaetlpFfwgWwS57O2+O9vUlnWBgmgrzurB6KrN eqcTn6A7LXoH8+7aHkV/0QCygX8rxa+HEpsWv27LXjM3hfQ4J21ZzQuSRlMdBqdF qnojQ3vuhj254BUy8Xe9A2z82P6IsElsCiZI3cwGfBpr/gbaPbDkPJe61EfBLsms PcBZi9Pbjr9QBlFgKk29yfm7r39A5HUPd0xVdxdXQhgL6ioCPTeyOk2mwwoMfwHN m/qykeD92Mzl -----END CERTIFICATE-----Generated at Sat Sep 5 08:16:25 2026 by rpki-client