$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5176D73AB3A411EF8B0CF846C4F9AE02.roa File: 5176D73AB3A411EF8B0CF846C4F9AE02.roa (raw, json) Hash identifier: SnrYYlBj4SONiydtCVTTSFs9IK4j057/4b6iABfWvnM= Subject key identifier: 32:63:FA:CF:5B:E4:22:3C:FA:E3:30:0C:B3:8E:7F:5B:03:AF:2D:30 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EBA Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5176D73AB3A411EF8B0CF846C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:32:55 +0000 ROA not before: Fri 02 Oct 2026 15:32:55 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 153416 IP address blocks: 2001:df4:9bc0::/48 maxlen: 48 2001:df4:9c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28346 (0x6eba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:32:55 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcea7-ae2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:82:89:f6:64:df:e1:93:b4:5c:ac:a9:3b: d1:36:00:58:35:d6:31:02:73:51:b1:d6:52:11:70: 3b:63:0f:c8:ec:44:4e:4a:c3:e3:b1:40:fc:dd:48: 6e:7f:38:5e:4b:5d:7a:b1:64:99:75:65:02:3b:07: 99:77:b8:7d:d0:3a:ff:7a:70:a6:1a:8d:44:6f:79: a3:2d:ec:a4:35:35:7c:04:ad:60:11:8c:27:12:3f: 30:0d:ff:dd:60:da:39:30:3d:63:15:87:76:44:24: f0:19:23:e6:15:6f:07:82:b6:32:0e:61:a0:ff:14: 1a:be:cc:77:e1:c6:8b:47:1c:f2:94:bb:fd:3f:e9: 33:ac:ac:73:03:da:33:06:71:bb:85:74:db:38:4e: e2:74:9e:5e:20:3e:49:65:16:e2:f9:49:78:8f:24: fa:c9:f6:b0:f7:44:31:1f:8c:87:58:50:ee:a7:04: b6:01:be:70:12:fc:37:b7:81:f9:e3:d8:09:f4:10: 0c:8a:5d:ec:33:67:16:8a:45:bd:18:e4:85:aa:3d: c4:e3:1b:63:0f:64:8f:31:7a:bc:d4:32:37:b1:03: e9:28:af:3f:4d:2f:64:95:61:d2:f3:56:42:4e:2a: 82:40:35:7c:04:45:89:9d:02:a5:2c:f7:fa:3b:56: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:63:FA:CF:5B:E4:22:3C:FA:E3:30:0C:B3:8E:7F:5B:03:AF:2D:30 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5176D73AB3A411EF8B0CF846C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:9bc0::/48 2001:df4:9c40::/48 Signature Algorithm: sha256WithRSAEncryption 5d:72:de:17:0d:5f:8c:8d:56:d6:cc:ff:11:2f:be:be:0f:af: 34:70:eb:b3:98:d8:5c:b1:84:4e:e1:80:9a:78:44:38:53:63: 82:d6:bd:b4:f5:89:0f:3d:97:56:df:47:66:41:2f:79:f5:0e: 4f:7b:33:7f:ab:b1:71:7d:41:80:f4:dc:6e:05:e4:73:dc:21: c7:ee:3f:19:6c:54:b4:cd:29:a6:69:f3:f5:46:1d:38:5f:1a: 1d:15:01:72:d7:cc:d2:44:19:17:a3:99:de:08:e8:72:48:23: 15:f3:97:19:45:bc:f7:42:5a:39:a5:98:0b:60:81:30:a2:bf: 73:3f:45:9a:ec:d3:c4:da:00:b8:52:fb:bf:88:33:2d:c9:f3: 9f:2a:01:f9:c1:7a:33:26:d2:7e:72:c7:5a:40:44:88:07:e1: 6b:ce:5a:9c:11:ee:05:8d:89:5d:17:6c:de:e4:42:30:4a:fa: 36:75:c5:5a:ea:d3:11:c8:22:87:d7:c2:a6:79:26:cd:73:1e: 9a:7b:a5:05:b3:b6:2a:00:ac:ea:b0:75:71:62:ed:a7:8b:b3: 93:e0:7c:77:cb:a5:0d:da:56:4c:9e:d6:50:aa:c7:7b:be:36: 97:6d:d2:d6:a9:3c:e5:29:e0:1d:ec:01:bc:b1:1d:8f:17:a6: 99:7d:f1:50 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICbrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzMjU1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2VhNy1hZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiQSCifZk3+GTtFysqTvRNgBYNdYxAnNRsdZSEXA7Yw/I7EROSsPjsUD83Uhu fzheS116sWSZdWUCOweZd7h90Dr/enCmGo1Eb3mjLeykNTV8BK1gEYwnEj8wDf/d YNo5MD1jFYd2RCTwGSPmFW8HgrYyDmGg/xQavsx34caLRxzylLv9P+kzrKxzA9oz BnG7hXTbOE7idJ5eID5JZRbi+Ul4jyT6yfaw90QxH4yHWFDupwS2Ab5wEvw3t4H5 49gJ9BAMil3sM2cWikW9GOSFqj3E4xtjD2SPMXq81DI3sQPpKK8/TS9klWHS81ZC TiqCQDV8BEWJnQKlLPf6O1ZoEwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDJj+s9b 5CI8+uMwDLOOf1sDry0wMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTE3NkQ3M0FC M0E0MTFFRjhCMENGODQ2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASAwcAIAEN9JvAAwcAIAEN9JxAMA0GCSqGSIb3DQEBCwUAA4IBAQBdct4X DV+MjVbWzP8RL76+D680cOuzmNhcsYRO4YCaeEQ4U2OC1r209YkPPZdW30dmQS95 9Q5PezN/q7FxfUGA9NxuBeRz3CHH7j8ZbFS0zSmmafP1Rh04XxodFQFy18zSRBkX o5neCOhySCMV85cZRbz3Qlo5pZgLYIEwor9zP0Wa7NPE2gC4Uvu/iDMtyfOfKgH5 wXozJtJ+csdaQESIB+FrzlqcEe4FjYldF2ze5EIwSvo2dcVa6tMRyCKH18KmeSbN cx6ae6UFs7YqAKzqsHVxYu2ni7OT4Hx3y6UN2lZMntZQqsd7vjaXbdLWqTzlKeAd 7AG8sR2PF6aZffFQ -----END CERTIFICATE-----Generated at Sat Oct 24 20:45:22 2026 by rpki-client