$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa File: ED91F9DA03DE11F0BF284950C4F9AE02.roa (raw, json) Hash identifier: CUOgEpAiFa8iROOPOBJAkUjsQNwYCW9KNgtUab+L+6s= Subject key identifier: C6:F4:B2:DB:63:CD:59:BE:33:62:8E:AE:7E:A9:62:25:AF:67:28:49 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EC4 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:33:16 +0000 ROA not before: Fri 02 Oct 2026 15:33:16 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 153499 IP address blocks: 2001:df4:d5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28356 (0x6ec4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:33:16 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcebc-77fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:90:20:ff:cf:74:8b:54:d9:e3:ad:54:f3: d5:3b:d4:a7:61:04:22:f4:eb:5a:81:a4:d6:93:f3: 51:b4:c2:10:09:6f:6f:ea:c4:d7:99:fd:b2:bc:8c: 89:ae:a6:c9:78:04:07:8b:07:04:81:ee:74:6d:92: ad:62:32:73:ca:0c:57:cf:29:7a:19:85:c4:dc:3d: 3f:53:0e:6a:0b:73:4e:6f:e5:6c:db:62:a3:ce:53: 8c:48:2a:cd:23:6f:34:ea:a2:e2:13:5d:05:3a:19: 03:47:3f:10:4d:84:e1:9a:46:c0:77:48:36:4e:57: d0:e4:69:4f:75:52:6e:c9:f0:34:37:58:46:11:a2: c7:13:f4:21:69:1c:34:46:4c:78:b3:3d:eb:80:1a: 7f:41:5f:dd:33:2c:ee:01:80:cd:c6:68:36:92:a8: 3a:59:73:c5:ee:d0:9b:84:bf:6b:ae:4c:b7:6d:04: 43:b5:7f:89:7b:69:e4:9b:40:54:21:49:fe:ae:bc: 89:c0:bc:fb:e1:18:03:26:ed:92:1f:b2:f2:c2:fd: 0a:36:e3:26:f0:05:3b:1b:e3:9e:9f:88:62:7e:ce: 12:4b:f8:83:ce:aa:1b:31:32:b4:c2:68:4a:74:db: 89:90:a4:62:04:8f:0d:dc:53:2e:3d:c8:18:e1:5d: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F4:B2:DB:63:CD:59:BE:33:62:8E:AE:7E:A9:62:25:AF:67:28:49 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:d5c0::/48 Signature Algorithm: sha256WithRSAEncryption 51:cd:b2:53:38:b7:d6:dc:2e:78:82:40:5f:45:d1:62:58:70: cc:6c:1f:40:5b:ce:46:9e:89:21:98:97:e9:a4:ea:f2:be:db: 2d:ed:52:27:3e:97:80:14:7b:5e:d1:2b:04:50:9e:20:08:7d: 02:f0:cd:1c:9f:25:dd:99:9f:58:42:56:c2:8b:90:00:9b:46: 4a:e5:05:3b:a5:71:87:48:9e:71:f5:04:b9:ff:cf:10:ea:a5: 2d:2e:40:13:9e:ee:d7:a1:35:0d:78:23:67:34:df:8b:37:99: 36:44:55:c6:03:25:bb:58:9a:0c:62:b5:1a:44:14:ac:b1:c8: e5:cd:eb:0f:85:1c:a3:48:b4:11:91:58:95:35:db:7b:de:ca: d4:47:ec:ce:84:62:f6:95:ad:1b:52:79:ff:a5:04:3e:d5:43: d7:ce:9c:eb:85:75:cd:dd:b7:ec:d3:24:be:6b:ec:06:92:aa: e0:9a:43:53:b2:1c:a7:0f:1c:17:9a:b9:c9:be:b4:7d:70:c9: 78:d4:de:b0:da:cc:c5:da:38:df:fd:29:2e:bb:45:50:67:13: 93:c7:cc:2a:ec:05:d6:42:4f:6a:7e:82:46:e8:3a:83:56:37: 3d:a6:4b:cb:5e:dc:51:5b:02:f3:61:74:d7:35:f0:aa:2b:c9: e9:de:08:73 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICbsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzMzE2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2ViYy03N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGeQIP/PdItU2eOtVPPVO9SnYQQi9OtagaTWk/NRtMIQCW9v6sTXmf2yvIyJ rqbJeAQHiwcEge50bZKtYjJzygxXzyl6GYXE3D0/Uw5qC3NOb+Vs22KjzlOMSCrN I2806qLiE10FOhkDRz8QTYThmkbAd0g2TlfQ5GlPdVJuyfA0N1hGEaLHE/QhaRw0 Rkx4sz3rgBp/QV/dMyzuAYDNxmg2kqg6WXPF7tCbhL9rrky3bQRDtX+Je2nkm0BU IUn+rryJwLz74RgDJu2SH7Lywv0KNuMm8AU7G+Oen4hifs4SS/iDzqobMTK0wmhK dNuJkKRiBI8N3FMuPcgY4V2B3wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFMb0sttj zVm+M2KOrn6pYiWvZyhJMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRUQ5MUY5REEw M0RFMTFGMEJGMjg0OTUwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9NXAMA0GCSqGSIb3DQEBCwUAA4IBAQBRzbJTOLfW3C54gkBf RdFiWHDMbB9AW85GnokhmJfppOryvtst7VInPpeAFHte0SsEUJ4gCH0C8M0cnyXd mZ9YQlbCi5AAm0ZK5QU7pXGHSJ5x9QS5/88Q6qUtLkATnu7XoTUNeCNnNN+LN5k2 RFXGAyW7WJoMYrUaRBSsscjlzesPhRyjSLQRkViVNdt73srUR+zOhGL2la0bUnn/ pQQ+1UPXzpzrhXXN3bfs0yS+a+wGkqrgmkNTshynDxwXmrnJvrR9cMl41N6w2szF 2jjf/Skuu0VQZxOTx8wq7AXWQk9qfoJG6DqDVjc9pkvLXtxRWwLzYXTXNfCqK8np 3ghz -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:38 2026 by rpki-client