$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/CDADA70EAC5C11F1B3EC6F014811F970.roa File: CDADA70EAC5C11F1B3EC6F014811F970.roa (raw, json) Hash identifier: iknc7UxTk4DrYKW2ODVXcafzsP0DlYNW9/USeZUE4ng= Subject key identifier: A7:1F:EF:5F:F1:10:14:9A:DE:AD:E0:F9:C1:39:30:FE:5C:40:3D:E9 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0430 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/CDADA70EAC5C11F1B3EC6F014811F970.roa Signing time: Wed 09 Sep 2026 14:43:21 +0000 ROA not before: Wed 09 Sep 2026 14:43:21 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 3573 IP address blocks: 2404:3d00:41a8::/47 maxlen: 47 2404:3d00:41c2::/47 maxlen: 47 2404:3d00:41c2::/48 maxlen: 48 2404:3d00:41c3::/48 maxlen: 48 2404:3d00:41dc::/47 maxlen: 47 2404:3d00:41dc::/48 maxlen: 48 2404:3d00:41dd::/48 maxlen: 48 2404:3d00:41e4::/47 maxlen: 47 2404:3d00:41e4::/48 maxlen: 48 2404:3d00:41e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Sep 9 14:43:21 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6aa17089-eb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:cf:64:60:1b:cb:19:15:ef:77:5b:01:fe: cc:67:7e:a5:67:7e:a8:3a:7c:f0:87:4b:f6:b4:b0: 57:09:3f:c9:b9:a2:d4:31:2f:66:cb:1c:54:58:1c: 72:06:a5:71:3a:c2:b0:60:d1:6e:38:64:8f:03:b8: ea:87:15:35:9d:b6:be:7e:74:f6:60:1a:f9:20:25: 76:48:a6:f0:af:eb:1c:b7:ad:55:f6:58:be:c2:a2: 2e:4d:ee:5d:fd:14:9e:69:a2:b8:ca:05:14:44:04: 5e:71:0f:be:0c:51:6b:c0:57:90:a6:b6:cd:db:59: fc:db:33:13:00:2a:b0:04:7d:b9:dd:5f:70:67:42: 26:92:5a:68:37:99:0f:46:62:82:7b:00:1b:70:ba: 9f:0b:8f:46:fc:cc:cc:0e:ef:5f:db:b4:0d:04:56: e3:8a:21:ed:4e:cf:3d:17:b1:b8:a9:9f:40:56:ec: 94:93:7b:b9:1a:e4:0f:18:22:81:d3:42:13:5b:7a: ee:38:3c:dc:98:e3:98:da:85:65:af:19:b9:d4:45: ae:df:9b:1f:72:ea:72:c1:ca:74:c4:b3:b3:26:c8: 35:3a:46:1e:21:26:a1:38:7b:3d:98:55:9d:71:d2: 1d:dc:dc:6d:30:20:55:28:d1:5d:a6:9c:f9:4a:54: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1F:EF:5F:F1:10:14:9A:DE:AD:E0:F9:C1:39:30:FE:5C:40:3D:E9 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/CDADA70EAC5C11F1B3EC6F014811F970.roa sbgp-ipAddrBlock: critical IPv6: 2404:3d00:41a8::/47 2404:3d00:41c2::/47 2404:3d00:41dc::/47 2404:3d00:41e4::/47 Signature Algorithm: sha256WithRSAEncryption 92:ed:48:dc:10:7f:8e:00:b9:36:e7:52:b4:62:1d:f3:5a:b1: 27:a0:fb:9e:80:50:a1:22:d8:29:9b:0c:aa:d5:7f:d9:46:7f: e3:1b:5c:f0:85:d0:78:c1:6f:c1:a7:cc:0d:9b:da:a2:cf:32: 16:de:bd:92:f3:12:e2:cf:fa:13:8f:a3:0c:4e:be:e5:26:a0: 1d:a8:cc:2b:28:f1:4b:3b:12:38:f7:68:ad:15:eb:f4:31:98: fc:67:9e:5a:e4:61:c8:ed:fa:a4:3e:34:19:dc:d6:cd:58:d2: 22:96:4a:a8:e4:9c:1e:4e:0f:04:67:5c:a8:4b:80:00:14:f4: fe:cd:ed:b0:dd:79:19:97:38:e3:7b:90:bf:f2:99:58:03:99: 67:61:ad:6d:80:04:9c:47:1b:ed:63:70:56:ef:e7:34:99:e0: 96:f5:25:60:4b:08:91:05:30:3a:14:c5:f3:23:99:fb:94:ae: a1:78:84:16:7c:1a:a1:e8:12:47:8d:bb:29:ce:76:3c:49:8d: 40:63:36:be:4a:88:0a:79:7f:72:26:96:7d:0a:48:82:6e:ae: 52:c1:2e:36:08:44:14:73:f1:77:49:1b:3f:64:46:8c:19:7a: 68:d2:3c:49:30:28:55:5f:6c:32:74:5a:30:41:5a:12:d1:c3: a8:2e:c9:40 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwOTA5MTQ0MzIxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWExNzA4OS1lYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC/PZGAbyxkV73dbAf7MZ36lZ36oOnzwh0v2tLBXCT/JuaLUMS9myxxUWBxy BqVxOsKwYNFuOGSPA7jqhxU1nba+fnT2YBr5ICV2SKbwr+sct61V9li+wqIuTe5d /RSeaaK4ygUURARecQ++DFFrwFeQprbN21n82zMTACqwBH253V9wZ0ImklpoN5kP RmKCewAbcLqfC49G/MzMDu9f27QNBFbjiiHtTs89F7G4qZ9AVuyUk3u5GuQPGCKB 00ITW3ruODzcmOOY2oVlrxm51EWu35sfcupywcp0xLOzJsg1OkYeISahOHs9mFWd cdId3NxtMCBVKNFdppz5SlT1wQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKcf71/x EBSa3q3g+cE5MP5cQD3pMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI0QUYvQ0M3QjI1NUFEQ0E5MTFFQzk0RTNFMDI5QzRGOUFFMDIvQ0RBREE3MEVB QzVDMTFGMUIzRUM2RjAxNDgxMUY5NzAucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAAjAkAwcBJAQ9AEGoAwcBJAQ9AEHCAwcBJAQ9AEHcAwcBJAQ9AEHkMA0GCSqG SIb3DQEBCwUAA4IBAQCS7UjcEH+OALk251K0Yh3zWrEnoPuegFChItgpmwyq1X/Z Rn/jG1zwhdB4wW/Bp8wNm9qizzIW3r2S8xLiz/oTj6MMTr7lJqAdqMwrKPFLOxI4 92itFev0MZj8Z55a5GHI7fqkPjQZ3NbNWNIilkqo5JweTg8EZ1yoS4AAFPT+ze2w 3XkZlzjje5C/8plYA5lnYa1tgAScRxvtY3BW7+c0meCW9SVgSwiRBTA6FMXzI5n7 lK6heIQWfBqh6BJHjbspznY8SY1AYza+SogKeX9yJpZ9CkiCbq5SwS42CEQUc/F3 SRs/ZEaMGXpo0jxJMChVX2wydFowQVoS0cOoLslA -----END CERTIFICATE-----Generated at Wed Sep 16 18:02:19 2026 by rpki-client