$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/86D7036A0E1011F1BB4320E6093D8C67.roa File: 86D7036A0E1011F1BB4320E6093D8C67.roa (raw, json) Hash identifier: 1LNNXkd+Q9F2+XYaHqlpvMElvIg5HAkgkTyIWH3Jb34= Subject key identifier: 48:8F:C2:F9:1D:36:10:0B:EF:4A:CC:41:06:1C:A4:26:48:81:BF:D3 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 265C Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/86D7036A0E1011F1BB4320E6093D8C67.roa Signing time: Thu 02 Jul 2026 16:15:41 +0000 ROA not before: Thu 02 Jul 2026 16:15:41 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38887 IP address blocks: 2001:df3:a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 15:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9820 (0x265c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Jul 2 16:15:41 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a468ead-3491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:4f:bb:33:f9:a9:7f:c6:59:54:d8:b8:3e: 3e:b0:dd:82:c6:30:e1:e8:d8:e7:d9:36:1d:a9:1e: c6:eb:a0:17:ad:37:3e:4a:ec:bd:e4:2f:7b:9d:d7: 6a:fe:c0:97:b2:f7:6c:fc:24:05:f5:f7:b3:26:6e: ac:d0:bd:8c:3e:5a:f6:1e:aa:ec:dd:e3:66:f2:f8: cb:33:bc:73:a0:54:8f:22:1c:71:97:da:8b:49:86: db:37:86:a7:9e:68:1d:db:10:98:f9:e9:03:39:67: 3a:ce:30:ff:7e:86:e7:64:7f:8f:bf:8e:58:93:a1: 76:28:39:d1:7a:61:79:c5:3b:e6:11:05:5b:66:b1: 0d:3b:0a:ff:e1:d6:06:6f:e6:25:cf:d7:07:99:20: 6a:75:6d:f3:f8:cf:d5:80:30:01:3f:9c:ca:aa:2d: d1:d2:01:27:2f:b5:48:74:a9:6b:55:8f:31:ac:5a: 35:c9:8c:ee:85:e2:7e:9d:df:35:76:e8:b8:03:c9: 40:cb:b9:e9:f2:18:71:3b:3f:64:9d:80:58:2e:26: 65:d0:da:5f:2b:65:b9:82:fc:0d:df:32:ec:e9:15: 78:cf:af:e8:3b:1c:0d:fc:77:13:42:9f:26:2e:0d: 7a:b9:78:f6:f1:92:dd:e0:1b:2a:85:6a:95:24:d6: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:C2:F9:1D:36:10:0B:EF:4A:CC:41:06:1C:A4:26:48:81:BF:D3 X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/86D7036A0E1011F1BB4320E6093D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:a00::/48 Signature Algorithm: sha256WithRSAEncryption cd:86:d1:ea:46:e7:e3:49:c3:ea:ab:26:19:04:35:d7:a9:cf: 5d:a3:d4:69:cd:07:51:10:11:6b:6f:b9:99:42:be:09:b3:c4: 11:3c:58:d8:f1:83:c4:44:f8:3f:ae:7d:31:0e:8d:03:a5:31: 74:f5:e6:22:95:47:59:99:7c:2b:26:c8:28:3a:c7:61:68:ad: 09:d6:a8:8e:c9:5e:c3:e8:ce:34:73:a5:2f:19:c1:cc:3a:c7: d6:60:12:ae:c7:2a:bf:4f:2e:c4:92:a9:ee:d5:b4:ee:3e:0f: 11:a6:00:b6:1c:02:4d:e3:ee:31:50:4b:cc:21:ad:d9:9b:d2: fa:26:6e:d6:aa:ab:a4:a5:b6:18:14:69:3d:ac:de:59:52:40: 13:8f:31:25:0a:22:7e:3a:95:0d:70:d7:d6:2a:19:39:59:13: 65:db:40:c5:1f:64:58:5c:88:ca:85:13:19:83:cc:bd:62:75: af:b0:58:42:9a:4e:54:36:53:15:17:7f:72:11:c8:f5:c0:a3: 7d:50:31:99:60:d0:11:87:56:07:4c:fb:01:49:46:a5:50:59: 7c:00:ac:bf:c7:a2:26:36:9f:aa:ea:90:bf:f6:88:8d:3b:e6: 4d:43:59:af:6b:d2:1c:68:f5:d1:61:30:37:b3:d3:85:15:fd: 3f:d3:02:94 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICJlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjYwNzAyMTYxNTQxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2OGVhZC0zNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjytPuzP5qX/GWVTYuD4+sN2CxjDh6Njn2TYdqR7G66AXrTc+Suy95C97nddq /sCXsvds/CQF9fezJm6s0L2MPlr2Hqrs3eNm8vjLM7xzoFSPIhxxl9qLSYbbN4an nmgd2xCY+ekDOWc6zjD/fobnZH+Pv45Yk6F2KDnRemF5xTvmEQVbZrENOwr/4dYG b+Ylz9cHmSBqdW3z+M/VgDABP5zKqi3R0gEnL7VIdKlrVY8xrFo1yYzuheJ+nd81 dui4A8lAy7np8hhxOz9knYBYLiZl0NpfK2W5gvwN3zLs6RV4z6/oOxwN/HcTQp8m Lg16uXj28ZLd4BsqhWqVJNYGGwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFEiPwvkd NhAL70rMQQYcpCZIgb/TMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2RUMvRDNBQjYwMTYxNEM4MTFFNUEyRkNFRjE1QzRGOUFFMDIvODZENzAzNkEw RTEwMTFGMUJCNDMyMEU2MDkzRDhDNjcucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN8woAMA0GCSqGSIb3DQEBCwUAA4IBAQDNhtHqRufjScPqqyYZ BDXXqc9do9RpzQdREBFrb7mZQr4Js8QRPFjY8YPERPg/rn0xDo0DpTF09eYilUdZ mXwrJsgoOsdhaK0J1qiOyV7D6M40c6UvGcHMOsfWYBKuxyq/Ty7Ekqnu1bTuPg8R pgC2HAJN4+4xUEvMIa3Zm9L6Jm7WqqukpbYYFGk9rN5ZUkATjzElCiJ+OpUNcNfW Khk5WRNl20DFH2RYXIjKhRMZg8y9YnWvsFhCmk5UNlMVF39yEcj1wKN9UDGZYNAR h1YHTPsBSUalUFl8AKy/x6ImNp+q6pC/9oiNO+ZNQ1mva9IcaPXRYTA3s9OFFf0/ 0wKU -----END CERTIFICATE-----Generated at Sat Jul 18 06:13:04 2026 by rpki-client