$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/A0A9D60C807511EFAD8C4257C4F9AE02.roa File: A0A9D60C807511EFAD8C4257C4F9AE02.roa (raw, json) Hash identifier: /6Pq80Gx56ZFBPBtnhjbMbxhhA7hiQGMfNWAnIYq0MM= Subject key identifier: 69:A3:39:84:80:25:F3:B6:4E:C8:00:AC:AF:AB:6B:2F:42:78:5F:26 Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Certificate serial: 0155 Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/A0A9D60C807511EFAD8C4257C4F9AE02.roa Signing time: Fri 03 Jul 2026 06:32:42 +0000 ROA not before: Fri 03 Jul 2026 06:32:42 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 153055 IP address blocks: 2401:afe0::/32 maxlen: 33 2401:afe0::/34 maxlen: 36 2401:afe0:4000::/35 maxlen: 36 2401:afe0:6000::/35 maxlen: 35 2401:afe0:6000::/36 maxlen: 36 2401:afe0:8000::/33 maxlen: 34 2401:afe0:8000::/36 maxlen: 36 2401:afe0:9000::/36 maxlen: 36 2401:afe0:a000::/35 maxlen: 35 2401:afe0:b000::/36 maxlen: 36 2401:afe0:c000::/34 maxlen: 35 2401:afe0:c000::/36 maxlen: 36 2401:afe0:e000::/35 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Validity Not Before: Jul 3 06:32:42 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a47578a-5b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:81:70:25:a6:64:08:c2:4c:49:da:c8:7d: 48:f2:f9:8a:29:1f:01:54:15:17:91:b4:09:e3:b6: a2:26:90:e0:09:a7:bb:43:c6:60:62:69:0a:7f:47: fe:3f:e4:0e:e2:74:fb:ff:d7:78:89:81:81:4e:73: dc:53:c0:f9:0c:69:c4:dd:70:b3:28:d4:36:18:e0: 3f:6d:2b:b4:0c:09:92:3c:87:b4:b9:a8:d4:2f:80: 34:8f:45:5c:25:5c:93:6e:b9:6e:3d:97:26:d8:f4: 9b:b7:07:bf:62:29:c1:25:b9:b4:fb:ce:ac:25:e3: f6:3c:01:f3:b4:a3:0d:12:09:5f:35:5d:ca:5c:0f: b2:c7:18:a5:7a:aa:63:c4:f8:5d:fa:47:c5:07:5c: 89:e5:4b:08:a1:44:b8:7c:a0:5b:0b:36:24:3b:9d: 82:57:97:a7:df:0d:fc:c7:ba:fa:5e:a3:a0:4b:b1: 9a:57:0c:72:0f:52:94:32:68:25:52:bd:0f:4c:ff: fb:79:41:ca:f9:f8:62:47:e5:10:4c:05:2e:00:d5: 48:2a:af:7a:f4:39:17:a5:4f:f1:a9:48:15:01:1a: b0:c3:bc:f7:04:69:38:41:a3:f8:15:48:26:2a:46: 50:27:23:56:fd:98:48:a4:56:0d:2d:2a:9a:4b:a7: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A3:39:84:80:25:F3:B6:4E:C8:00:AC:AF:AB:6B:2F:42:78:5F:26 X509v3 Authority Key Identifier: keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/A0A9D60C807511EFAD8C4257C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:afe0::/32 Signature Algorithm: sha256WithRSAEncryption 32:d9:50:63:43:2b:47:ae:89:58:5a:5a:1e:ae:63:41:42:e0: 14:11:00:5f:87:40:26:bd:4d:18:03:58:18:b4:43:c6:8d:ce: 65:0c:0e:48:33:cb:58:40:65:ef:72:48:1e:f2:67:9f:5e:83: 97:25:e6:bc:77:d1:d1:27:2b:1d:c6:aa:c5:83:c9:2b:de:a5: 2f:91:2d:44:af:07:28:24:f1:b1:2c:0a:7e:c3:91:35:3a:2b: 6d:03:ef:cd:89:6d:11:4f:8e:e4:40:a0:0c:29:5a:5b:1f:f3: b6:bd:5e:eb:00:96:49:95:d2:89:93:fa:c4:5d:42:2e:d8:7b: 69:fb:15:f5:8d:f4:e0:fd:47:b9:ee:f4:30:62:b5:49:c9:14: 28:ce:e7:06:0f:8d:d7:d6:d5:00:57:4f:d7:c3:38:2b:15:35: d4:2c:9f:fe:07:de:a0:bb:69:c7:eb:bd:9d:5f:a8:48:0f:5f: d7:4c:09:dd:72:53:79:8a:c1:62:7f:ff:6e:05:fa:56:0a:7a: 82:ed:44:86:48:18:43:c0:14:ed:1c:3e:e1:22:8e:e9:48:53: 07:45:2f:e2:aa:65:ae:b3:97:04:92:0e:aa:f2:fd:7a:55:10: 79:d3:aa:f2:38:45:91:6f:6e:5a:d3:f6:79:85:7d:32:35:06: 99:1b:d1:e0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMEUxMTAvBgNVBAUTKDk1N0U1MEE3NUZCRTUwMkYzOEUzRURCRjNGNEFBQUU2 NjVBRTE0OEIwHhcNMjYwNzAzMDYzMjQyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3NTc4YS01YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOmBcCWmZAjCTEnayH1I8vmKKR8BVBUXkbQJ47aiJpDgCae7Q8ZgYmkKf0f+ P+QO4nT7/9d4iYGBTnPcU8D5DGnE3XCzKNQ2GOA/bSu0DAmSPIe0uajUL4A0j0Vc JVyTbrluPZcm2PSbtwe/YinBJbm0+86sJeP2PAHztKMNEglfNV3KXA+yxxileqpj xPhd+kfFB1yJ5UsIoUS4fKBbCzYkO52CV5en3w38x7r6XqOgS7GaVwxyD1KUMmgl Ur0PTP/7eUHK+fhiR+UQTAUuANVIKq969DkXpU/xqUgVARqww7z3BGk4QaP4FUgm KkZQJyNW/ZhIpFYNLSqaS6dKqQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFGmjOYSA JfO2TsgArK+ray9CeF8mMB8GA1UdIwQYMBaAFJV+UKdfvlAvOOPtvz9KquZlrhSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIwRS80RTZDQjRGNjgw NjkxMUVGODg3QjcwM0NDNEY5QUUwMi9sWDVRcDEtLVVDODQ0LTJfUDBxcTVtV3VG SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xYNVFwMS0tVUM4NDQtMl9QMHFxNW1XdUZJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBCMEUvNEU2Q0I0RjY4MDY5MTFFRjg4N0I3MDNDQzRGOUFFMDIvQTBBOUQ2MEM4 MDc1MTFFRkFEOEM0MjU3QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAGv4DANBgkqhkiG9w0BAQsFAAOCAQEAMtlQY0MrR66JWFpaHq5j QULgFBEAX4dAJr1NGANYGLRDxo3OZQwOSDPLWEBl73JIHvJnn16DlyXmvHfR0Scr HcaqxYPJK96lL5EtRK8HKCTxsSwKfsORNTorbQPvzYltEU+O5ECgDClaWx/ztr1e 6wCWSZXSiZP6xF1CLth7afsV9Y304P1Hue70MGK1SckUKM7nBg+N19bVAFdP18M4 KxU11Cyf/gfeoLtpx+u9nV+oSA9f10wJ3XJTeYrBYn//bgX6Vgp6gu1EhkgYQ8AU 7Rw+4SKO6UhTB0Uv4qplrrOXBJIOqvL9elUQedOq8jhFkW9uWtP2eYV9MjUGmRvR 4A== -----END CERTIFICATE-----Generated at Sat Jul 18 07:24:21 2026 by rpki-client