$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/93C2E76EBB5911F1868CC32E3F11F970.roa File: 93C2E76EBB5911F1868CC32E3F11F970.roa (raw, json) Hash identifier: a6tFfULXfykTcwDjwd8eNo1nHn/T6rBEopD+4OtQw9s= Subject key identifier: 0A:8A:96:44:3B:3E:5E:B1:41:DD:81:4C:DE:0B:75:D8:37:84:DF:2A Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0459 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/93C2E76EBB5911F1868CC32E3F11F970.roa Signing time: Mon 28 Sep 2026 16:28:03 +0000 ROA not before: Mon 28 Sep 2026 16:28:03 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 3573 IP address blocks: 2404:3d00:4050::/47 maxlen: 47 2404:3d00:4050::/48 maxlen: 48 2404:3d00:4051::/48 maxlen: 48 2404:3d00:406c::/47 maxlen: 47 2404:3d00:406c::/48 maxlen: 48 2404:3d00:406d::/48 maxlen: 48 2404:3d00:41a8::/47 maxlen: 47 2404:3d00:41c2::/47 maxlen: 47 2404:3d00:41c2::/48 maxlen: 48 2404:3d00:41c3::/48 maxlen: 48 2404:3d00:41dc::/47 maxlen: 47 2404:3d00:41dc::/48 maxlen: 48 2404:3d00:41dd::/48 maxlen: 48 2404:3d00:41e4::/47 maxlen: 47 2404:3d00:41e4::/48 maxlen: 48 2404:3d00:41e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Sep 28 16:28:03 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6aba9593-39bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:a6:05:12:ce:01:e1:c5:d0:f9:1e:4b:94: 4a:f5:2c:41:0d:cb:68:fc:e1:68:d2:88:78:bc:a5: 65:cd:40:78:94:cd:7d:80:92:ec:07:f8:ff:84:4d: 20:88:82:12:77:ed:42:50:eb:b2:18:0d:56:0c:a8: 38:f4:73:63:5f:7a:20:26:4c:95:69:d3:68:35:cc: 0e:5c:05:e8:fa:ff:c2:5c:4e:87:d3:a9:ac:07:00: fb:95:1b:cd:72:fe:36:af:2d:71:a9:3e:de:bf:9e: 88:1a:2e:67:31:50:45:02:ed:05:15:b9:83:77:5a: 73:f2:8a:bc:02:18:7f:3e:92:35:40:c9:34:ec:ec: 52:73:92:6a:41:48:46:c8:b8:45:2d:f6:3f:7d:0c: dd:39:76:06:72:5d:26:75:c4:00:3c:cb:72:85:ac: ba:c6:97:8e:f0:f8:ff:6c:35:b7:37:c4:ad:64:4b: 43:30:f3:da:d1:77:13:e3:ed:32:e8:76:b6:e8:1f: ef:a7:13:be:6f:98:96:c6:78:b7:ae:56:f6:64:37: 00:f9:3a:30:b7:43:d9:1e:1b:0f:25:8c:f6:18:fd: dc:1c:e8:b4:54:63:c8:da:c9:62:38:64:a5:8a:cc: 5e:af:2c:be:9e:0e:bf:84:b6:b2:ce:2f:66:9b:9d: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8A:96:44:3B:3E:5E:B1:41:DD:81:4C:DE:0B:75:D8:37:84:DF:2A X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/93C2E76EBB5911F1868CC32E3F11F970.roa sbgp-ipAddrBlock: critical IPv6: 2404:3d00:4050::/47 2404:3d00:406c::/47 2404:3d00:41a8::/47 2404:3d00:41c2::/47 2404:3d00:41dc::/47 2404:3d00:41e4::/47 Signature Algorithm: sha256WithRSAEncryption 7c:2c:18:a8:55:bb:7c:33:7c:54:7c:88:08:1f:78:37:70:44: e1:27:af:cb:5e:a2:43:c4:cb:5a:6c:b4:e4:dc:c0:6c:69:63: 8a:17:74:0d:f7:33:a2:71:db:f4:6a:c4:12:1e:62:b0:f3:a1: 89:fd:03:16:af:b8:53:bf:47:f9:1f:ca:04:1f:b2:3d:0d:fd: 11:11:36:c0:2b:45:e9:42:73:a2:ea:9f:b1:68:75:f2:ee:1c: 04:63:3f:2e:8e:58:78:32:d9:c7:d9:a7:9c:09:00:03:31:1e: 90:50:ca:92:57:5d:84:11:c3:53:ab:cd:b5:7e:e7:77:58:9d: 1e:67:1c:cc:4c:3b:62:23:d4:f5:b1:5e:e1:b7:86:d1:b9:3b: 2a:d1:ff:00:e9:29:a1:69:65:f4:ee:7f:8e:ba:51:70:7e:88: c5:84:62:32:c6:57:2a:01:d9:06:cf:02:2c:3e:26:b4:76:39: 72:5c:11:af:38:6a:de:15:a0:48:1b:69:b0:23:fc:8d:9e:13: 7f:38:52:e8:dc:bf:bb:82:f2:3e:da:0b:43:c6:da:de:3e:66: 8c:52:fe:d7:62:e7:e8:9b:01:dd:43:6b:44:16:1d:56:bb:86: c0:08:79:0a:16:74:8c:a4:9a:a4:9c:be:59:d4:62:f5:c0:62: ed:f6:42:75 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwOTI4MTYyODAzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJhOTU5My0zOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk4umBRLOAeHF0PkeS5RK9SxBDcto/OFo0oh4vKVlzUB4lM19gJLsB/j/hE0g iIISd+1CUOuyGA1WDKg49HNjX3ogJkyVadNoNcwOXAXo+v/CXE6H06msBwD7lRvN cv42ry1xqT7ev56IGi5nMVBFAu0FFbmDd1pz8oq8Ahh/PpI1QMk07OxSc5JqQUhG yLhFLfY/fQzdOXYGcl0mdcQAPMtyhay6xpeO8Pj/bDW3N8StZEtDMPPa0XcT4+0y 6Ha26B/vpxO+b5iWxni3rlb2ZDcA+Towt0PZHhsPJYz2GP3cHOi0VGPI2sliOGSl isxeryy+ng6/hLayzi9mm51TZQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFAqKlkQ7 Pl6xQd2BTN4Lddg3hN8qMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI0QUYvQ0M3QjI1NUFEQ0E5MTFFQzk0RTNFMDI5QzRGOUFFMDIvOTNDMkU3NkVC QjU5MTFGMTg2OENDMzJFM0YxMUY5NzAucm9hME8GCCsGAQUFBwEHAQH/BEAwPjA8 BAIAAjA2AwcBJAQ9AEBQAwcBJAQ9AEBsAwcBJAQ9AEGoAwcBJAQ9AEHCAwcBJAQ9 AEHcAwcBJAQ9AEHkMA0GCSqGSIb3DQEBCwUAA4IBAQB8LBioVbt8M3xUfIgIH3g3 cEThJ6/LXqJDxMtabLTk3MBsaWOKF3QN9zOicdv0asQSHmKw86GJ/QMWr7hTv0f5 H8oEH7I9Df0RETbAK0XpQnOi6p+xaHXy7hwEYz8ujlh4MtnH2aecCQADMR6QUMqS V12EEcNTq821fud3WJ0eZxzMTDtiI9T1sV7ht4bRuTsq0f8A6SmhaWX07n+OulFw fojFhGIyxlcqAdkGzwIsPia0djlyXBGvOGreFaBIG2mwI/yNnhN/OFLo3L+7gvI+ 2gtDxtrePmaMUv7XYufomwHdQ2tEFh1Wu4bACHkKFnSMpJqknL5Z1GL1wGLt9kJ1 -----END CERTIFICATE-----Generated at Tue Oct 6 20:04:51 2026 by rpki-client