$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa File: 02389B7670E811EFA8DBE571C4F9AE02.roa (raw, json) Hash identifier: ZtI1ULWvNzaGuOxzNApdN7RurMHYNZ/g5Q6BC00hvHs= Subject key identifier: 0D:C1:4E:AB:A0:8D:C1:81:76:36:AE:CC:7E:C8:A2:2C:AA:AB:8E:06 Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: 0191 Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa Signing time: Tue 13 Oct 2026 05:54:34 +0000 ROA not before: Tue 13 Oct 2026 05:54:34 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 133453 IP address blocks: 2001:df4:4340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 05:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Oct 13 05:54:34 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acdc799-d927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bc:73:cb:e1:ac:0e:cd:1d:aa:3a:76:81:26: 82:be:59:4e:89:48:0e:28:60:06:55:1c:4a:e7:d8: 87:1a:e5:99:ca:06:7c:c7:f2:6b:af:6e:b8:56:23: 81:6f:5d:7c:2b:f7:d1:ea:fa:e5:81:3b:28:a8:b7: a2:2b:97:07:69:5b:49:20:41:8a:d3:1e:20:4c:ba: be:69:54:0a:c0:a4:d9:1d:59:01:60:9b:3f:b3:5f: 2e:d2:25:8f:d9:03:ec:a0:70:56:8e:dd:5f:83:a6: 87:e9:85:90:a4:d9:00:50:8e:6d:c7:4a:72:ac:d1: 7e:84:18:3b:ca:b7:94:33:5c:83:3f:4e:89:4f:ae: 77:76:e6:94:db:b9:13:01:0c:7f:93:83:7f:97:1e: c3:3d:8f:4d:ae:32:65:f3:e1:d7:3c:33:19:60:01: ec:f5:c0:e5:72:0e:12:78:5e:dd:01:06:45:91:80: 52:f7:4c:e9:cf:6d:bc:fa:ed:44:47:ff:0e:d2:66: 6a:8c:15:55:39:79:62:45:52:07:3f:94:d5:e6:1d: 6f:46:b9:f4:53:57:e8:b7:3d:a3:b9:05:fc:59:85: 82:bc:ed:20:cf:e0:0f:5f:f7:08:d1:8a:18:2f:0d: 59:69:21:7c:43:23:1d:f4:c4:b7:a9:2a:02:ba:87: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C1:4E:AB:A0:8D:C1:81:76:36:AE:CC:7E:C8:A2:2C:AA:AB:8E:06 X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:4340::/48 Signature Algorithm: sha256WithRSAEncryption 4c:b0:69:a1:30:43:0a:63:0f:c3:31:cd:67:c0:be:b0:e0:44: 6c:ee:4c:61:64:c5:5c:ad:d9:97:07:70:c5:cf:3a:2c:bb:cb: 85:42:43:1d:93:89:eb:f3:37:cd:55:81:a9:f4:8e:e9:9b:be: 9a:34:e7:fd:c2:46:78:51:b3:09:e6:6b:79:cc:c8:25:d3:b5: 27:eb:21:b0:05:4b:6e:40:d2:a0:47:76:63:df:d5:c9:c9:81: 2e:55:3f:8e:7e:31:15:2d:6c:d6:99:40:50:c6:aa:f2:34:f8: d3:4f:ae:5f:89:a8:ea:fa:c5:c2:b3:b8:17:75:ff:ab:14:ca: b2:32:9c:e2:eb:fe:02:d8:e5:31:62:2a:2b:48:f7:54:91:06: e5:92:83:a7:0e:a2:0b:82:c7:2d:0b:59:54:d6:e6:f1:34:7a: c6:73:70:77:bc:1c:9e:f3:90:7b:cb:f3:2f:24:63:78:1b:d0: 3a:49:c8:cf:e2:2d:63:9b:70:39:ed:65:1f:33:7e:e6:3e:e4: af:9f:78:38:28:9c:60:61:46:04:09:a9:ce:c7:e2:4f:09:9e: bb:d3:60:b7:db:79:98:d3:da:73:ab:e5:5e:9a:6f:cc:b9:fa: 6d:d2:f8:48:59:47:4a:5c:1a:8c:2a:27:0d:60:8f:bb:c3:a8: f2:bd:46:1b -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjYxMDEzMDU1NDM0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkYzc5OS1kOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87xzy+GsDs0dqjp2gSaCvllOiUgOKGAGVRxK59iHGuWZygZ8x/Jrr264ViOB b118K/fR6vrlgTsoqLeiK5cHaVtJIEGK0x4gTLq+aVQKwKTZHVkBYJs/s18u0iWP 2QPsoHBWjt1fg6aH6YWQpNkAUI5tx0pyrNF+hBg7yreUM1yDP06JT653duaU27kT AQx/k4N/lx7DPY9NrjJl8+HXPDMZYAHs9cDlcg4SeF7dAQZFkYBS90zpz228+u1E R/8O0mZqjBVVOXliRVIHP5TV5h1vRrn0U1fotz2juQX8WYWCvO0gz+APX/cI0YoY Lw1ZaSF8QyMd9MS3qSoCuocCMQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFA3BTqug jcGBdjauzH7Ioiyqq44GMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBNUIvNTgwMDRBQUE3MEU3MTFFRkI0NDRBRjcwQzRGOUFFMDIvMDIzODlCNzY3 MEU4MTFFRkE4REJFNTcxQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9ENAMA0GCSqGSIb3DQEBCwUAA4IBAQBMsGmhMEMKYw/DMc1n wL6w4ERs7kxhZMVcrdmXB3DFzzosu8uFQkMdk4nr8zfNVYGp9I7pm76aNOf9wkZ4 UbMJ5mt5zMgl07Un6yGwBUtuQNKgR3Zj39XJyYEuVT+OfjEVLWzWmUBQxqryNPjT T65fiajq+sXCs7gXdf+rFMqyMpzi6/4C2OUxYiorSPdUkQblkoOnDqILgsctC1lU 1ubxNHrGc3B3vBye85B7y/MvJGN4G9A6ScjP4i1jm3A57WUfM37mPuSvn3g4KJxg YUYECanOx+JPCZ6702C323mY09pzq+Vemm/Mufpt0vhIWUdKXBqMKicNYI+7w6jy vUYb -----END CERTIFICATE-----Generated at Sat Oct 24 20:42:56 2026 by rpki-client