$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/8B48B9BAA03811F198EE418E3711F970.roa File: 8B48B9BAA03811F198EE418E3711F970.roa (raw, json) Hash identifier: HMebga2Cee+mkPgXMYSD7ugJvRB7D8pLJ5U8lhm9Gjc= Subject key identifier: 90:F8:6B:01:C5:53:6B:A0:30:80:FF:12:DB:DD:47:BD:72:D9:3D:9B Certificate issuer: /CN=A91B5585/serialNumber=5BA4869961E9AB094849D2D5500F552626390A4D Certificate serial: 02 Authority key identifier: 5B:A4:86:99:61:E9:AB:09:48:49:D2:D5:50:0F:55:26:26:39:0A:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/8B48B9BAA03811F198EE418E3711F970.roa Signing time: Tue 25 Aug 2026 03:53:35 +0000 ROA not before: Tue 25 Aug 2026 03:53:34 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 154493 IP address blocks: 2001:df6:b2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.crl rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5585, serialNumber=5BA4869961E9AB094849D2D5500F552626390A4D Validity Not Before: Aug 25 03:53:34 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a8d11be-02c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:a7:65:5a:6b:0f:79:94:b1:c7:ce:96:ce: 96:1d:9a:5e:d7:5f:46:25:35:bf:ad:10:df:fb:03: c0:f2:d2:b2:76:47:c8:88:5e:26:25:ba:d5:95:fa: 7e:2b:d1:2c:9f:05:3c:1d:60:6f:93:7e:db:23:b3: e4:ce:10:d8:5b:09:50:4f:74:be:df:37:c7:10:df: 38:42:f1:07:fa:65:e5:f4:d3:a1:18:c3:bd:ac:73: 32:4e:69:5a:6c:46:d1:3d:5c:74:b7:0f:8a:28:e2: 49:c6:8f:63:6f:49:d9:82:54:fd:64:99:f5:9d:d5: 3b:10:5c:2c:b3:7c:f4:5b:c3:a3:3c:9b:53:0c:42: 55:f0:4b:50:28:47:17:79:50:51:e4:35:ed:2a:d1: b4:28:9d:e5:4f:36:ec:4b:11:0f:f0:10:50:6b:99: 49:ba:40:8d:35:4f:00:fe:cc:05:29:c3:3a:bf:68: 62:91:47:25:86:be:2f:cd:c3:52:ae:f2:da:61:ef: 77:a1:e4:75:6b:55:6a:a3:39:70:c3:2d:89:b6:df: 77:02:57:29:b5:f0:78:46:54:90:ee:c4:3a:9c:b3: eb:25:4c:45:2a:36:69:5e:2e:8e:ab:99:95:35:97: 5e:4c:a9:c8:c6:0a:75:96:80:93:d5:88:02:d3:17: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F8:6B:01:C5:53:6B:A0:30:80:FF:12:DB:DD:47:BD:72:D9:3D:9B X509v3 Authority Key Identifier: keyid:5B:A4:86:99:61:E9:AB:09:48:49:D2:D5:50:0F:55:26:26:39:0A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/8B48B9BAA03811F198EE418E3711F970.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:b2c0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:d0:b8:92:80:c0:d7:68:cb:fb:2f:b2:3f:e7:c1:b2:ea:5e: c3:80:82:d4:54:1c:ec:7a:5d:18:1f:17:cd:55:00:a2:65:cc: d3:85:b7:66:1b:ce:16:27:c2:1e:bf:39:04:98:e8:31:7e:36: 22:af:ef:6e:57:e1:82:d8:df:30:55:3c:f3:5b:06:fc:cf:44: 0e:63:c6:c3:c5:7d:c6:48:00:70:20:a5:b9:2a:9c:4d:07:67: 91:22:7b:4e:83:21:6a:e0:86:e2:84:a6:c5:45:92:01:ba:79: 3b:b5:79:d4:f8:e5:29:e6:d4:f7:de:b0:7c:0f:43:98:51:b1: 5a:4e:4c:b5:39:62:47:62:cf:5d:ff:ed:30:6a:37:3f:3e:a7: 94:6d:98:c5:35:7a:b8:e2:96:ca:ca:54:86:47:ce:a9:7c:df: fe:49:5a:71:10:36:ac:18:c8:39:e7:fe:26:4c:6f:8f:81:e9: c4:97:6a:a6:ca:f9:e3:43:d7:73:9a:7b:04:25:15:34:f4:3a: ab:b3:97:c3:b7:94:d7:6d:70:09:dc:3e:95:4d:39:e2:02:2c: 6a:28:cc:f0:20:97:06:7b:0d:7e:dc:b0:e1:ef:c4:f0:28:2b: 7e:9f:93:36:d1:7e:01:23:e4:07:71:9e:8b:ca:41:19:fa:e5: c7:64:4b:c4 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTU4NTExMC8GA1UEBRMoNUJBNDg2OTk2MUU5QUIwOTQ4NDlEMkQ1NTAwRjU1MjYy NjM5MEE0RDAeFw0yNjA4MjUwMzUzMzRaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOGQxMWJlLTAyYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9fadlWmsPeZSxx86WzpYdml7XX0YlNb+tEN/7A8Dy0rJ2R8iIXiYlutWV+n4r 0SyfBTwdYG+Tftsjs+TOENhbCVBPdL7fN8cQ3zhC8Qf6ZeX006EYw72sczJOaVps RtE9XHS3D4oo4knGj2NvSdmCVP1kmfWd1TsQXCyzfPRbw6M8m1MMQlXwS1AoRxd5 UFHkNe0q0bQoneVPNuxLEQ/wEFBrmUm6QI01TwD+zAUpwzq/aGKRRyWGvi/Nw1Ku 8tph73eh5HVrVWqjOXDDLYm233cCVym18HhGVJDuxDqcs+slTEUqNmleLo6rmZU1 l15MqcjGCnWWgJPViALTF++zAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUkPhrAcVT a6AwgP8S291HvXLZPZswHwYDVR0jBBgwFoAUW6SGmWHpqwlISdLVUA9VJiY5Ck0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1NTg1LzAzOUQyMzdBQTAz ODExRjE4NkMwNTY4NDM3MTFGOTcwL1c2U0dtV0hwcXdsSVNkTFZVQTlWSmlZNUNr MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVzZTR21XSHBxd2xJU2RMVlVBOVZKaVk1Q2swLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU4NS8wMzlEMjM3QUEwMzgxMUYxODZDMDU2ODQzNzExRjk3MC84QjQ4QjlCQUEw MzgxMUYxOThFRTQxOEUzNzExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32ssAwDQYJKoZIhvcNAQELBQADggEBABvQuJKAwNdoy/svsj/n wbLqXsOAgtRUHOx6XRgfF81VAKJlzNOFt2YbzhYnwh6/OQSY6DF+NiKv725X4YLY 3zBVPPNbBvzPRA5jxsPFfcZIAHAgpbkqnE0HZ5Eie06DIWrghuKEpsVFkgG6eTu1 edT45Snm1PfesHwPQ5hRsVpOTLU5Ykdiz13/7TBqNz8+p5RtmMU1erjilsrKVIZH zql83/5JWnEQNqwYyDnn/iZMb4+B6cSXaqbK+eND13OaewQlFTT0Oquzl8O3lNdt cAncPpVNOeICLGoozPAglwZ7DX7csOHvxPAoK36fkzbRfgEj5AdxnovKQRn65cdk S8Q= -----END CERTIFICATE-----Generated at Tue Sep 1 03:07:20 2026 by rpki-client