$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/A5F4101E265F11F1B94C1E8FA7833773.roa File: A5F4101E265F11F1B94C1E8FA7833773.roa (raw, json) Hash identifier: 6wNq+k1j2pl/PUmuttDlxrYQRBm/XnR1x2JHzgOX+9k= Subject key identifier: 69:B9:43:24:4B:CF:EF:46:94:39:4A:8D:E3:E0:EC:4E:95:9C:D4:44 Certificate issuer: /CN=A91B65F5/serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7 Certificate serial: 3C Authority key identifier: 0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/A5F4101E265F11F1B94C1E8FA7833773.roa Signing time: Tue 07 Jul 2026 10:36:05 +0000 ROA not before: Tue 07 Jul 2026 10:36:05 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 290 IP address blocks: 2001:3e8::/32 maxlen: 32 2001:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 10:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65F5, serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7 Validity Not Before: Jul 7 10:36:05 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4cd695-90e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:aa:19:d0:51:2d:a4:c0:11:89:b7:33:4d: 13:96:12:45:ce:e8:41:c7:f8:60:5c:92:cf:03:b4: 20:43:d1:49:4d:3e:ee:02:4b:62:e6:fe:66:89:11: 29:c2:70:cd:63:7b:66:c6:7c:6c:cf:33:29:da:4c: 19:74:bf:df:5c:a3:08:27:80:92:ee:d9:ee:47:b0: 70:03:78:ce:fd:22:7a:f9:fe:f2:ce:a5:49:ec:71: 01:b4:1b:17:c0:80:6e:45:f0:01:ba:d5:e0:e9:1a: 6f:db:72:4c:23:8d:a0:65:07:07:16:bb:fe:5c:18: 0f:42:e9:ff:e3:11:0f:9f:97:c4:72:2e:d4:86:13: 5d:65:f1:f1:1f:43:86:64:99:03:29:af:a6:c0:0a: fd:bb:6b:08:fc:3e:4d:c7:db:7d:04:a7:c8:1a:9a: 06:5e:8a:fb:8a:69:8e:cb:76:31:61:62:dc:35:c5: 24:bc:0e:03:83:4e:3a:1b:0b:a5:c8:da:b4:02:69: c2:9e:ee:1a:95:a5:e0:02:b6:92:3c:0c:69:f2:6d: 4d:1f:fa:e7:7f:92:3e:40:ae:f9:53:f0:31:c9:ce: d7:cd:c5:ea:df:ff:79:6f:2e:8a:b0:b4:e5:b2:92: 18:0e:8e:b2:f8:60:ce:6e:1d:e6:30:de:3e:a9:b8: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B9:43:24:4B:CF:EF:46:94:39:4A:8D:E3:E0:EC:4E:95:9C:D4:44 X509v3 Authority Key Identifier: keyid:0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/A5F4101E265F11F1B94C1E8FA7833773.roa sbgp-ipAddrBlock: critical IPv6: 2001:3e8::/32 Signature Algorithm: sha256WithRSAEncryption a6:4f:bf:2c:e8:8a:59:c8:c1:bb:13:b9:7b:98:98:7c:0d:2e: 08:6e:06:97:27:36:84:a8:47:6d:6b:7c:38:d1:89:4b:9c:c5: dd:e7:c2:9c:90:b3:4d:8a:d8:48:f2:c3:df:fc:89:f2:36:db: ef:16:1f:d2:b0:fb:dd:13:05:29:65:df:04:a0:50:38:c8:83: 3a:2f:c9:3c:48:c5:45:90:d9:78:b0:a6:a7:29:73:a8:19:f7: 6f:b9:72:49:44:e3:cd:70:e9:3d:bb:3c:e1:e5:6c:b1:b4:30: 9a:69:3d:59:26:bc:31:f6:34:5f:54:5a:11:55:44:8f:d0:a1: 41:ed:3b:39:8a:26:00:45:33:0d:47:94:85:12:bf:7c:66:6e: bf:cc:b2:bf:19:39:2f:12:fc:b1:b9:5b:51:fc:50:ea:83:9f: 1b:a4:85:0e:3d:25:d3:3b:5e:5a:bc:96:e6:76:27:63:e5:fc: fe:06:b7:95:8c:71:b9:a4:21:82:33:9d:f0:05:85:63:00:59: 91:42:32:ea:df:6e:e7:63:e8:0b:a1:65:c2:ee:f2:28:cb:1e: c5:fd:11:8b:71:20:7f:e6:06:e0:fb:cc:d2:7d:85:02:05:ec: 48:52:46:28:21:51:7c:57:12:73:9d:1c:2c:17:64:34:f2:7c: 16:36:4d:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjVGNTExMC8GA1UEBRMoMEMzNTNGMzU1MEVERTEzRUE3RTVGMjhEMjNBMzQxNjE0 RTY5RDhDNzAeFw0yNjA3MDcxMDM2MDVaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNGNkNjk1LTkwZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC25qoZ0FEtpMARibczTROWEkXO6EHH+GBcks8DtCBD0UlNPu4CS2Lm/maJESnC cM1je2bGfGzPMynaTBl0v99cowgngJLu2e5HsHADeM79Inr5/vLOpUnscQG0GxfA gG5F8AG61eDpGm/bckwjjaBlBwcWu/5cGA9C6f/jEQ+fl8RyLtSGE11l8fEfQ4Zk mQMpr6bACv27awj8Pk3H230Ep8gamgZeivuKaY7LdjFhYtw1xSS8DgODTjobC6XI 2rQCacKe7hqVpeACtpI8DGnybU0f+ud/kj5ArvlT8DHJztfNxerf/3lvLoqwtOWy khgOjrL4YM5uHeYw3j6puCTFAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUablDJEvP 70aUOUqN4+DsTpWc1EQwHwYDVR0jBBgwFoAUDDU/NVDt4T6n5fKNI6NBYU5p2Mcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NUY1L0E1NTk2QzJDMjY1 RTExRjFBRDZGMUUwMkE3ODMzNzczL0REVV9OVkR0NFQ2bjVmS05JNk5CWVU1cDJN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRERVX05WRHQ0VDZuNWZLTkk2TkJZVTVwMk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVGNS9BNTU5NkMyQzI2NUUxMUYxQUQ2RjFFMDJBNzgzMzc3My9BNUY0MTAxRTI2 NUYxMUYxQjk0QzFFOEZBNzgzMzc3My5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQPoMA0GCSqGSIb3DQEBCwUAA4IBAQCmT78s6IpZyMG7E7l7mJh8 DS4IbgaXJzaEqEdta3w40YlLnMXd58KckLNNithI8sPf/InyNtvvFh/SsPvdEwUp Zd8EoFA4yIM6L8k8SMVFkNl4sKanKXOoGfdvuXJJROPNcOk9uzzh5WyxtDCaaT1Z Jrwx9jRfVFoRVUSP0KFB7Ts5iiYARTMNR5SFEr98Zm6/zLK/GTkvEvyxuVtR/FDq g58bpIUOPSXTO15avJbmdidj5fz+BreVjHG5pCGCM53wBYVjAFmRQjLq327nY+gL oWXC7vIoyx7F/RGLcSB/5gbg+8zSfYUCBexIUkYoIVF8VxJznRwsF2Q08nwWNk05 -----END CERTIFICATE-----Generated at Tue Jul 7 15:42:18 2026 by rpki-client