$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/9CFD6C4E8B9F11F1A015FFA56211F970.roa File: 9CFD6C4E8B9F11F1A015FFA56211F970.roa (raw, json) Hash identifier: ae75i1UsURK661qHNvPqlVIMqk92KChqVwayxmO6Y0A= Subject key identifier: AA:EC:CE:79:C3:23:63:CA:0F:E1:7E:B4:BE:25:8E:60:ED:65:02:2C Certificate issuer: /CN=A91C0657/serialNumber=634456A49A5B2CB61CCD90A9DC61F26029E87CD4 Certificate serial: 02 Authority key identifier: 63:44:56:A4:9A:5B:2C:B6:1C:CD:90:A9:DC:61:F2:60:29:E8:7C:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/9CFD6C4E8B9F11F1A015FFA56211F970.roa Signing time: Wed 29 Jul 2026 22:48:28 +0000 ROA not before: Wed 29 Jul 2026 22:48:28 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 154710 IP address blocks: 2402:63e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.crl rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0657, serialNumber=634456A49A5B2CB61CCD90A9DC61F26029E87CD4 Validity Not Before: Jul 29 22:48:28 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6a833b-b672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:49:ba:d4:d1:54:a8:f7:80:63:df:f4:86: 32:95:f1:41:a2:83:6c:10:8d:f1:82:a7:e7:6c:da: 91:bd:a6:07:8c:bb:64:c0:92:07:4f:b2:b8:a2:51: 61:77:d8:c8:f8:34:1c:34:90:45:a8:81:06:a2:4d: b9:51:41:b0:78:7a:59:33:f0:4b:92:90:60:5e:4a: 61:b0:9f:b5:4c:67:db:89:05:a4:b3:3d:bb:77:97: 21:38:db:29:67:b3:76:52:3f:c5:4a:43:7b:f1:19: f0:a2:79:a3:a9:dd:46:e6:98:39:c3:19:40:21:b0: 2e:9d:da:32:aa:f7:a8:31:d1:bf:b1:3a:c3:04:19: 4c:7d:81:6c:3f:51:4b:d6:c0:c7:a5:fd:04:26:5e: 6e:83:45:06:c6:3c:71:20:43:76:14:38:94:16:b4: 3f:ca:7a:ca:16:e9:44:84:13:e1:29:b8:67:5d:ad: 29:89:9a:f6:64:a8:97:45:ac:29:50:ce:3f:63:a0: 59:e2:34:95:7a:cc:11:ac:b1:42:36:30:6d:79:75: 12:ef:33:1c:ee:65:04:9f:46:ba:fd:a9:47:47:e6: cd:85:84:90:4c:7c:8d:31:c9:c7:00:5b:92:87:f3: 59:f4:0a:60:d6:4c:f8:3f:9e:dc:ba:e1:04:f1:90: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EC:CE:79:C3:23:63:CA:0F:E1:7E:B4:BE:25:8E:60:ED:65:02:2C X509v3 Authority Key Identifier: keyid:63:44:56:A4:9A:5B:2C:B6:1C:CD:90:A9:DC:61:F2:60:29:E8:7C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/Y0RWpJpbLLYczZCp3GHyYCnofNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0RWpJpbLLYczZCp3GHyYCnofNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0657/DF69345C8B9D11F1BD7812416211F970/9CFD6C4E8B9F11F1A015FFA56211F970.roa sbgp-ipAddrBlock: critical IPv6: 2402:63e0::/48 Signature Algorithm: sha256WithRSAEncryption 82:f0:c8:6e:e6:3f:f9:4a:3a:70:db:f2:22:5b:c1:d3:20:28: 69:cc:37:b1:6a:b6:08:51:fd:2b:ea:0e:37:85:ad:1d:9b:45: f6:d4:d7:6a:e6:03:3a:82:ce:46:d7:26:f4:86:6f:b0:c1:10: b2:12:a4:b3:ff:b9:0a:f3:2b:5a:22:aa:24:b2:8a:32:00:c2: 4f:cd:42:c6:5e:e5:e4:ff:f6:b8:d9:43:c8:fc:a6:3d:83:f5: cd:5a:ae:43:34:cc:d3:c4:96:6e:08:98:fd:c7:94:ca:22:4e: 5d:a3:53:e5:06:90:5b:55:3d:cb:cd:49:a0:e6:d3:16:9c:bc: 23:9b:b6:ca:ac:02:79:1a:7e:1d:47:03:3c:2e:e2:fc:7a:2b: 02:df:19:a3:6a:65:f4:e7:3f:f1:ae:a5:21:bd:8d:51:45:62: cb:df:54:0f:30:6c:71:5f:3b:9c:92:31:b9:1b:9d:ef:83:db: 1f:dc:60:2b:d0:4c:21:7d:e4:9f:4a:4e:76:c0:88:be:24:9b: 01:f1:d1:31:6d:6a:cf:c0:a5:a4:12:67:0b:26:82:b9:bf:cf: dc:be:f4:a4:4b:2b:89:dd:e4:c3:8c:88:db:4d:be:1e:cc:bc: 8b:e7:c1:6b:82:bc:03:74:b0:fb:cd:d1:38:3c:72:72:b8:4e: 1f:06:1f:85 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDY1NzExMC8GA1UEBRMoNjM0NDU2QTQ5QTVCMkNCNjFDQ0Q5MEE5REM2MUYyNjAy OUU4N0NENDAeFw0yNjA3MjkyMjQ4MjhaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNmE4MzNiLWI2NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJPkm61NFUqPeAY9/0hjKV8UGig2wQjfGCp+ds2pG9pgeMu2TAkgdPsriiUWF3 2Mj4NBw0kEWogQaiTblRQbB4elkz8EuSkGBeSmGwn7VMZ9uJBaSzPbt3lyE42yln s3ZSP8VKQ3vxGfCieaOp3UbmmDnDGUAhsC6d2jKq96gx0b+xOsMEGUx9gWw/UUvW wMel/QQmXm6DRQbGPHEgQ3YUOJQWtD/KesoW6USEE+EpuGddrSmJmvZkqJdFrClQ zj9joFniNJV6zBGssUI2MG15dRLvMxzuZQSfRrr9qUdH5s2FhJBMfI0xyccAW5KH 81n0CmDWTPg/nty64QTxkCynAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUquzOecMj Y8oP4X60viWOYO1lAiwwHwYDVR0jBBgwFoAUY0RWpJpbLLYczZCp3GHyYCnofNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwNjU3L0RGNjkzNDVDOEI5 RDExRjFCRDc4MTI0MTYyMTFGOTcwL1kwUldwSnBiTExZY3paQ3AzR0h5WUNub2ZO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTBSV3BKcGJMTFljelpDcDNHSHlZQ25vZk5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY1Ny9ERjY5MzQ1QzhCOUQxMUYxQkQ3ODEyNDE2MjExRjk3MC85Q0ZENkM0RThC OUYxMUYxQTAxNUZGQTU2MjExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAmPgAAAwDQYJKoZIhvcNAQELBQADggEBAILwyG7mP/lKOnDb8iJb wdMgKGnMN7FqtghR/SvqDjeFrR2bRfbU12rmAzqCzkbXJvSGb7DBELISpLP/uQrz K1oiqiSyijIAwk/NQsZe5eT/9rjZQ8j8pj2D9c1arkM0zNPElm4ImP3HlMoiTl2j U+UGkFtVPcvNSaDm0xacvCObtsqsAnkafh1HAzwu4vx6KwLfGaNqZfTnP/GupSG9 jVFFYsvfVA8wbHFfO5ySMbkbne+D2x/cYCvQTCF95J9KTnbAiL4kmwHx0TFtas/A paQSZwsmgrm/z9y+9KRLK4nd5MOMiNtNvh7MvIvnwWuCvAN0sPvN0Tg8cnK4Th8G H4U= -----END CERTIFICATE-----Generated at Wed Aug 19 14:25:15 2026 by rpki-client