$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7CCAAFA6F58A11EFA9C8FE1EC4F9AE02.roa File: 7CCAAFA6F58A11EFA9C8FE1EC4F9AE02.roa (raw, json) Hash identifier: UAyx3o84TXUGeY9QvhiW5O3M1RUmHAn/4fH7rmxWJMI= Subject key identifier: F6:30:1E:47:E8:AA:93:46:85:5A:A0:85:20:B0:9C:E5:90:6B:D9:A7 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6E9B Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7CCAAFA6F58A11EFA9C8FE1EC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:31:49 +0000 ROA not before: Fri 02 Oct 2026 15:31:49 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 152935 IP address blocks: 2001:df4:b840::/48 maxlen: 48 2001:df4:de40::/48 maxlen: 48 2001:df4:eec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28315 (0x6e9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:31:49 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfce65-a5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:75:62:75:de:dd:70:31:dc:6b:7c:c7:bc: 02:30:8d:f5:bd:cd:17:da:2b:82:ab:fd:c9:4c:ac: 76:ee:b9:0f:34:70:12:ba:ba:a5:33:6d:d9:2d:5d: d3:a5:9b:48:76:aa:04:80:c1:f3:9c:77:cb:b5:41: 87:d2:4a:de:42:3a:c4:70:98:cf:55:cd:3d:c8:31: ba:25:2b:65:d2:f5:11:c7:6d:d2:18:13:a8:4b:bf: dc:d4:99:08:b0:0e:33:0d:d8:10:62:46:a7:30:d0: da:cc:6f:01:e2:f4:7b:ac:d6:7f:8a:ee:08:7c:4c: aa:21:e3:28:78:a5:dc:fd:f4:49:26:eb:17:9c:35: c0:9b:72:9c:a4:8b:29:53:7a:82:b2:84:db:8e:82: c3:23:73:98:03:44:08:72:ed:a1:22:cd:f0:a8:cc: 10:b0:dd:c5:a1:00:97:e3:57:fc:2f:0c:ee:7e:da: e2:fa:ed:05:0b:74:49:f4:69:8a:36:ca:1e:7a:54: ba:09:3d:43:78:81:2f:ec:3a:6c:76:71:17:53:8c: 0c:e3:b5:d2:66:f9:c3:68:35:23:31:d4:32:f8:98: f3:02:f8:f2:15:5b:43:e8:74:09:ed:26:66:fc:5f: f4:19:f6:6e:02:26:d4:01:5e:5c:11:c7:97:3f:fe: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:30:1E:47:E8:AA:93:46:85:5A:A0:85:20:B0:9C:E5:90:6B:D9:A7 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7CCAAFA6F58A11EFA9C8FE1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:b840::/48 2001:df4:de40::/48 2001:df4:eec0::/48 Signature Algorithm: sha256WithRSAEncryption 5d:78:47:61:d9:f5:36:32:73:a2:0e:c0:08:05:9b:02:fe:ab: c8:2e:99:6c:7f:a3:79:8b:d7:3b:cf:d5:02:3f:39:e1:25:15: 33:e7:f7:26:6b:bd:e0:3f:1e:3b:c8:0e:51:7d:e1:62:9b:cb: 7d:ea:84:c0:55:04:ba:a2:4e:d1:86:23:00:24:d4:12:0b:95: f8:bc:aa:88:a1:37:96:5f:84:0c:8d:f7:1e:0b:18:f7:d9:de: 9e:9a:b1:1a:e0:7e:ae:9e:19:81:49:52:b2:e1:fb:5e:fa:36: 7d:31:85:1e:be:4b:a4:72:9e:ae:89:a5:7a:32:5e:19:65:e6: bd:e0:71:44:50:4f:7b:52:d2:47:a0:0e:3e:5e:90:a9:61:61: c7:e7:cd:d3:50:49:6e:a6:8f:84:c5:d2:6c:d0:32:9f:ad:c3: f5:a3:c0:50:2c:5d:7e:75:6f:a8:1b:85:47:a3:e7:5c:5d:77: 43:4f:32:a5:fc:8c:39:07:e5:ec:6b:84:e6:62:4b:61:90:f2: 44:02:79:0d:dc:57:6c:1d:f0:c8:a2:55:a3:cf:2c:fc:52:4d: ec:bf:5a:81:aa:3b:dc:32:09:a0:52:4b:49:32:de:06:73:d8: ff:de:1a:cd:c4:b9:4c:af:94:81:df:59:9a:bc:45:ac:f7:a3: 08:35:db:84 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICbpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzMTQ5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2U2NS1hNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvh1YnXe3XAx3Gt8x7wCMI31vc0X2iuCq/3JTKx27rkPNHASurqlM23ZLV3T pZtIdqoEgMHznHfLtUGH0kreQjrEcJjPVc09yDG6JStl0vURx23SGBOoS7/c1JkI sA4zDdgQYkanMNDazG8B4vR7rNZ/iu4IfEyqIeMoeKXc/fRJJusXnDXAm3KcpIsp U3qCsoTbjoLDI3OYA0QIcu2hIs3wqMwQsN3FoQCX41f8Lwzuftri+u0FC3RJ9GmK NsoeelS6CT1DeIEv7DpsdnEXU4wM47XSZvnDaDUjMdQy+JjzAvjyFVtD6HQJ7SZm /F/0GfZuAibUAV5cEceXP/6cOQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPYwHkfo qpNGhVqghSCwnOWQa9mnMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvN0NDQUFGQTZG NThBMTFFRkE5QzhGRTFFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh BAIAAjAbAwcAIAEN9LhAAwcAIAEN9N5AAwcAIAEN9O7AMA0GCSqGSIb3DQEBCwUA A4IBAQBdeEdh2fU2MnOiDsAIBZsC/qvILplsf6N5i9c7z9UCPznhJRUz5/cma73g Px47yA5RfeFim8t96oTAVQS6ok7RhiMAJNQSC5X4vKqIoTeWX4QMjfceCxj32d6e mrEa4H6unhmBSVKy4fte+jZ9MYUevkukcp6uiaV6Ml4ZZea94HFEUE97UtJHoA4+ XpCpYWHH583TUElupo+ExdJs0DKfrcP1o8BQLF1+dW+oG4VHo+dcXXdDTzKl/Iw5 B+Xsa4TmYkthkPJEAnkN3FdsHfDIolWjzyz8Uk3sv1qBqjvcMgmgUktJMt4Gc9j/ 3hrNxLlMr5SB31mavEWs96MINduE -----END CERTIFICATE-----Generated at Mon Oct 26 00:43:26 2026 by rpki-client