$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/8EE35FC2B8B511F18673AEE56911F970.roa File: 8EE35FC2B8B511F18673AEE56911F970.roa (raw, json) Hash identifier: 5MsCr/6liDkkYfq0jIAY9bmaiuJZCi34eFmD0V3/xGY= Subject key identifier: 8B:63:05:72:89:29:32:01:4B:7A:1B:87:C8:AB:AC:C9:D8:9B:C5:DF Certificate issuer: /CN=A91BB63F/serialNumber=654A442AE867200635C4396BB53A35AB487DD6BE Certificate serial: 02 Authority key identifier: 65:4A:44:2A:E8:67:20:06:35:C4:39:6B:B5:3A:35:AB:48:7D:D6:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUpEKuhnIAY1xDlrtTo1q0h91r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/8EE35FC2B8B511F18673AEE56911F970.roa Signing time: Fri 25 Sep 2026 07:48:56 +0000 ROA not before: Fri 25 Sep 2026 07:48:55 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 154835 IP address blocks: 2001:df7:5dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.crl rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUpEKuhnIAY1xDlrtTo1q0h91r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB63F, serialNumber=654A442AE867200635C4396BB53A35AB487DD6BE Validity Not Before: Sep 25 07:48:55 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab62767-ce68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:63:28:d4:6d:bd:54:c2:ba:68:7a:ad:12: f6:cd:25:7a:a8:e1:7c:51:85:e6:fe:0c:7d:43:c2: 55:bb:b9:b2:55:40:92:cf:d2:be:20:3b:cd:4b:12: 83:73:63:3c:08:d5:dd:e3:26:c6:c2:c4:c4:8e:9d: 73:f3:fc:0d:ac:34:be:90:79:71:3d:64:f6:20:66: bb:a5:fa:d0:f5:06:7a:77:10:49:8c:54:ef:68:b3: 8e:9a:15:75:a2:d6:b2:56:74:ea:23:bf:dc:02:71: c7:af:7b:da:46:e1:6a:c4:b9:45:d8:84:6a:19:20: db:6e:80:b8:ff:4e:e5:4c:15:6f:ad:e4:9e:f5:e9: 66:7e:65:11:1e:a8:cc:2c:ed:7f:63:e9:56:71:47: c4:86:96:a8:63:04:ce:bc:ac:14:5e:a1:20:29:5d: b9:cb:8c:14:e0:0c:31:15:cf:73:07:2e:4d:1e:88: 0c:98:c2:d5:49:80:d0:e3:78:7f:f6:51:16:19:47: 7a:bf:fe:f9:6e:78:31:a0:59:49:9f:98:ed:7e:81: 3f:e9:ec:81:a6:b7:ae:c1:65:10:cf:7e:79:44:96: 7f:19:f5:df:90:04:d2:14:f4:23:03:55:3f:fa:c9: f1:e6:7a:5f:b8:0d:5e:25:fe:26:66:56:30:3d:54: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:05:72:89:29:32:01:4B:7A:1B:87:C8:AB:AC:C9:D8:9B:C5:DF X509v3 Authority Key Identifier: keyid:65:4A:44:2A:E8:67:20:06:35:C4:39:6B:B5:3A:35:AB:48:7D:D6:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/ZUpEKuhnIAY1xDlrtTo1q0h91r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUpEKuhnIAY1xDlrtTo1q0h91r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB63F/8EABC14AB8B311F1B544707E6911F970/8EE35FC2B8B511F18673AEE56911F970.roa sbgp-ipAddrBlock: critical IPv6: 2001:df7:5dc0::/48 Signature Algorithm: sha256WithRSAEncryption 94:5a:f8:1e:53:d4:07:05:ca:5f:14:aa:9d:f6:7a:8e:62:ee: 2d:61:ac:a1:97:c1:6a:11:8a:9d:ce:8f:96:2b:77:77:68:3f: 09:d2:e1:57:39:4d:4c:31:1e:9f:4d:9c:1e:e9:9f:6d:5b:fc: 73:cd:45:b5:3b:3e:a9:7f:f1:c0:7d:f4:3d:99:06:0b:cc:20: ba:06:48:68:1f:31:b8:b8:80:3a:ef:d0:9e:66:c9:c4:fb:e9: 71:29:9e:a9:92:0c:2d:1e:d0:7a:50:fd:24:86:14:c5:eb:1e: 07:b0:3e:9e:34:39:0d:2b:07:93:ef:3c:65:36:3b:a5:9c:4e: ee:ef:36:7c:15:34:ce:3a:4b:b6:81:ad:2b:16:0f:91:bd:6d: b2:1f:50:11:a9:d2:a9:1f:37:72:3f:56:69:f0:cc:b1:74:a0: 2a:25:74:ae:d8:4f:69:17:c3:44:3d:33:0c:e7:37:50:80:37: d2:bd:64:50:a5:8c:11:40:8d:28:ef:98:58:83:35:4f:1d:46: a6:c0:47:03:6b:14:d1:78:c3:f7:91:93:78:81:6e:8b:d1:d2: c8:39:1c:d9:c4:92:e0:83:25:99:6f:18:06:d2:8f:ac:7e:b3: 7e:8e:8c:26:53:5f:9c:c5:11:17:76:01:bd:47:0c:0a:d7:84: 0f:92:78:25 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjYzRjExMC8GA1UEBRMoNjU0QTQ0MkFFODY3MjAwNjM1QzQzOTZCQjUzQTM1QUI0 ODdERDZCRTAeFw0yNjA5MjUwNzQ4NTVaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYjYyNzY3LWNlNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPwWMo1G29VMK6aHqtEvbNJXqo4XxRheb+DH1DwlW7ubJVQJLP0r4gO81LEoNz YzwI1d3jJsbCxMSOnXPz/A2sNL6QeXE9ZPYgZrul+tD1Bnp3EEmMVO9os46aFXWi 1rJWdOojv9wCcceve9pG4WrEuUXYhGoZINtugLj/TuVMFW+t5J716WZ+ZREeqMws 7X9j6VZxR8SGlqhjBM68rBReoSApXbnLjBTgDDEVz3MHLk0eiAyYwtVJgNDjeH/2 URYZR3q//vlueDGgWUmfmO1+gT/p7IGmt67BZRDPfnlEln8Z9d+QBNIU9CMDVT/6 yfHmel+4DV4l/iZmVjA9VLXVAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUi2MFcokp MgFLehuHyKusydibxd8wHwYDVR0jBBgwFoAUZUpEKuhnIAY1xDlrtTo1q0h91r4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNjNGLzhFQUJDMTRBQjhC MzExRjFCNTQ0NzA3RTY5MTFGOTcwL1pVcEVLdWhuSUFZMXhEbHJ0VG8xcTBoOTFy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlVwRUt1aG5JQVkxeERscnRUbzFxMGg5MXI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYzRi84RUFCQzE0QUI4QjMxMUYxQjU0NDcwN0U2OTExRjk3MC84RUUzNUZDMkI4 QjUxMUYxODY3M0FFRTU2OTExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ33XcAwDQYJKoZIhvcNAQELBQADggEBAJRa+B5T1AcFyl8Uqp32 eo5i7i1hrKGXwWoRip3Oj5Yrd3doPwnS4Vc5TUwxHp9NnB7pn21b/HPNRbU7Pql/ 8cB99D2ZBgvMILoGSGgfMbi4gDrv0J5mycT76XEpnqmSDC0e0HpQ/SSGFMXrHgew Pp40OQ0rB5PvPGU2O6WcTu7vNnwVNM46S7aBrSsWD5G9bbIfUBGp0qkfN3I/Vmnw zLF0oColdK7YT2kXw0Q9MwznN1CAN9K9ZFCljBFAjSjvmFiDNU8dRqbARwNrFNF4 w/eRk3iBbovR0sg5HNnEkuCDJZlvGAbSj6x+s36OjCZTX5zFERd2Ab1HDArXhA+S eCU= -----END CERTIFICATE-----Generated at Sun Oct 11 11:11:07 2026 by rpki-client