$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/9D003F28621711E9B8C69E15C4F9AE02.roa File: 9D003F28621711E9B8C69E15C4F9AE02.roa (raw, json) Hash identifier: IkNZoaRzi6fB9RRMWn5BH65RrfY+xv1Hx872Jrr8QIw= Subject key identifier: 29:73:C4:5E:0B:70:79:71:03:57:6E:3C:E5:5F:31:50:50:FB:6D:09 Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12DD Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/9D003F28621711E9B8C69E15C4F9AE02.roa Signing time: Thu 24 Sep 2026 05:32:08 +0000 ROA not before: Thu 24 Sep 2026 05:32:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 13335 IP address blocks: 2405:8100:52::/48 maxlen: 48 2405:8100:57::/48 maxlen: 48 2405:8100:8001::/48 maxlen: 48 2405:8100:8002::/48 maxlen: 48 2405:8100:8003::/48 maxlen: 48 2405:8100:8004::/48 maxlen: 48 2405:8100:8005::/48 maxlen: 48 2405:8100:c000::/38 maxlen: 38 2405:8100:c400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4829 (0x12dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Sep 24 05:32:08 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6ab4b5d8-d2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b8:1e:f7:71:4e:64:f5:5b:f1:bc:d3:22:a6: b8:d3:c7:40:63:f6:d2:22:21:58:3d:95:70:c6:3d: 3d:2c:b4:29:e4:f9:4d:1b:ae:06:85:cd:7e:ec:af: b1:3a:fe:cd:2d:c6:a6:af:36:7f:16:df:63:7e:22: f3:60:1f:b7:e8:83:0b:29:22:a3:a1:67:00:c2:19: fa:61:7c:8a:42:f6:e8:82:9e:f4:fe:a1:c9:ec:1b: 25:a7:ac:87:c9:77:76:b3:41:4b:fc:91:21:3b:38: 23:e4:31:0d:b1:5a:af:e9:70:39:53:ec:dd:db:cb: 89:76:55:c9:ff:f3:02:ce:fa:79:25:73:aa:42:51: 83:17:21:f7:e2:e2:24:ae:18:f2:34:1c:cd:6d:d5: a5:6d:cb:04:db:39:24:4c:74:68:8d:22:fa:cf:ca: 66:48:37:41:27:d1:ef:28:c7:3b:2a:47:1d:82:dc: c2:f5:70:7d:05:70:1f:60:d0:2a:9f:53:2f:c9:35: a0:f0:86:b8:b8:b7:98:e2:1f:3b:2b:7f:a5:e3:b2: 39:6e:80:c5:28:29:77:66:cf:3d:eb:9e:fc:c9:52: 65:f5:12:d2:f6:85:17:17:cd:b4:b9:21:8b:a8:de: 44:e8:35:90:78:37:ff:2a:60:ea:6e:cd:13:ce:52: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:73:C4:5E:0B:70:79:71:03:57:6E:3C:E5:5F:31:50:50:FB:6D:09 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/9D003F28621711E9B8C69E15C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2405:8100:52::/48 2405:8100:57::/48 2405:8100:8001::-2405:8100:8005:ffff:ffff:ffff:ffff:ffff 2405:8100:c000::-2405:8100:c400:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b9:57:23:cf:89:76:42:07:80:8e:6c:1b:ac:42:fb:b6:7b:86: 49:36:99:81:7d:2d:a9:5c:cc:a7:23:38:89:45:c5:6d:c1:6d: 11:6c:24:e0:67:c2:24:17:a9:5a:d9:b5:0f:42:aa:4e:e2:d0: 90:db:81:7d:87:7d:31:60:24:a1:3c:12:03:3d:2e:72:6b:11: 4a:2a:5a:0d:69:9c:3e:b3:6d:cf:73:94:8c:57:56:d7:50:af: c5:69:21:90:79:da:b9:4e:94:64:27:fc:20:30:55:3f:98:41: 93:07:a8:99:6c:bc:34:1d:0f:0a:5f:2f:72:d1:3e:07:cf:ac: 3f:7f:dc:92:9e:0d:a3:a6:a3:b7:d3:f9:4e:e7:6c:76:f1:76: db:06:4a:6b:b9:b1:a9:aa:39:9a:a3:bc:89:6e:b2:79:54:76: d7:7b:43:b8:2f:4f:34:b6:43:f8:b4:35:dc:3b:ed:32:25:38: 7a:d2:94:b3:2a:f3:42:6e:1f:28:28:6a:19:00:ae:ff:b8:6a: cc:55:14:ed:cb:e8:0a:98:e3:73:4a:fa:22:ac:a8:39:49:5c: 0f:1f:29:82:e8:11:77:52:ed:18:8c:06:1b:d5:5f:16:73:37: 17:f4:29:37:9b:fe:76:77:ee:bc:d0:d2:7f:1c:b6:3d:93:eb: 57:de:77:97 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYwOTI0MDUzMjA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI0YjVkOC1kMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLge93FOZPVb8bzTIqa408dAY/bSIiFYPZVwxj09LLQp5PlNG64Ghc1+7K+x Ov7NLcamrzZ/Ft9jfiLzYB+36IMLKSKjoWcAwhn6YXyKQvbogp70/qHJ7Bslp6yH yXd2s0FL/JEhOzgj5DENsVqv6XA5U+zd28uJdlXJ//MCzvp5JXOqQlGDFyH34uIk rhjyNBzNbdWlbcsE2zkkTHRojSL6z8pmSDdBJ9HvKMc7KkcdgtzC9XB9BXAfYNAq n1MvyTWg8Ia4uLeY4h87K3+l47I5boDFKCl3Zs896578yVJl9RLS9oUXF820uSGL qN5E6DWQeDf/KmDqbs0TzlJOEwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFClzxF4L cHlxA1duPOVfMVBQ+20JMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM3RjIvNDhFRkQxN0NGMUE3MTFFOEFBNjE0RjUxQzRGOUFFMDIvOUQwMDNGMjg2 MjE3MTFFOUI4QzY5RTE1QzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTA/ BAIAAjA5AwcAJAWBAABSAwcAJAWBAABXMBIDBwAkBYEAgAEDBwEkBYEAgAQwEQMG BiQFgQDAAwcAJAWBAMQAMA0GCSqGSIb3DQEBCwUAA4IBAQC5VyPPiXZCB4CObBus Qvu2e4ZJNpmBfS2pXMynIziJRcVtwW0RbCTgZ8IkF6la2bUPQqpO4tCQ24F9h30x YCShPBIDPS5yaxFKKloNaZw+s23Pc5SMV1bXUK/FaSGQedq5TpRkJ/wgMFU/mEGT B6iZbLw0HQ8KXy9y0T4Hz6w/f9ySng2jpqO30/lO52x28XbbBkprubGpqjmao7yJ brJ5VHbXe0O4L080tkP4tDXcO+0yJTh60pSzKvNCbh8oKGoZAK7/uGrMVRTty+gK mONzSvoirKg5SVwPHymC6BF3Uu0YjAYb1V8WczcX9Ck3m/52d+680NJ/HLY9k+tX 3neX -----END CERTIFICATE-----Generated at Fri Oct 9 09:53:04 2026 by rpki-client