$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa File: 139300E4BA6911EFA78E2F66C4F9AE02.roa (raw, json) Hash identifier: wkKDUCmsQSMjyixWGLENAK6CiAfip7g6NUfyzce9GkA= Subject key identifier: DD:6B:5A:B0:7C:FD:50:57:03:AE:1E:7A:F4:EF:EF:01:3F:6C:70:38 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 031D Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa Signing time: Fri 07 Aug 2026 02:52:35 +0000 ROA not before: Fri 07 Aug 2026 02:52:35 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 32167 IP address blocks: 2401:b60:2d::/48 maxlen: 48 2401:b60:1000::/36 maxlen: 44 2401:b60:e300::/40 maxlen: 48 2401:b60:e400::/40 maxlen: 48 2401:b60:e500::/40 maxlen: 48 2401:b60:e600::/40 maxlen: 48 2401:b60:e700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Aug 7 02:52:35 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a754873-47e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:87:94:6d:73:11:77:e8:b9:21:f5:65:b4: 4d:6e:34:10:b2:83:03:f6:62:d9:d3:47:b1:d1:58: 42:d5:6e:3f:a6:0e:02:e8:a3:f0:a8:6e:fa:0c:3a: 32:40:d1:7c:77:14:4a:c7:2d:aa:24:3e:ab:5e:50: 93:ff:27:11:aa:5e:e8:a5:62:e9:ec:e0:b2:dc:ea: 00:d9:ca:93:9d:ea:50:f2:c0:f6:b7:39:b2:08:a8: 6c:ce:aa:a1:cb:f3:ca:66:22:bd:38:7f:2f:98:bb: b6:db:dc:bb:e7:c9:ef:10:e5:21:24:5f:c7:d9:5f: e3:0a:a2:30:9c:89:2c:c3:04:b0:6d:d9:ac:06:b4: 86:8a:b6:31:18:1b:5e:ca:06:51:af:e6:94:15:d5: 12:b8:f0:06:0c:2a:93:fb:f2:af:64:98:5d:1c:0a: b3:c8:22:69:35:98:27:d9:23:1c:d1:30:27:d9:24: e1:a7:31:00:1f:21:38:9d:e0:ca:81:84:74:ac:47: e6:d5:bb:0a:95:24:db:a9:d3:a2:47:a1:dc:46:13: 4e:98:9e:c6:d6:30:f5:f5:68:83:f2:46:74:05:ae: 9e:8f:e6:61:6c:8e:5b:44:2a:22:a1:7c:ea:a0:51: a5:0f:d5:7b:18:10:11:ba:db:12:90:64:51:eb:df: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:5A:B0:7C:FD:50:57:03:AE:1E:7A:F4:EF:EF:01:3F:6C:70:38 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:b60:2d::/48 2401:b60:1000::/36 2401:b60:e300::-2401:b60:e7ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 07:6e:5c:45:69:86:af:79:71:43:9e:de:f6:7b:a9:00:3c:33: 0f:ea:94:30:6c:e6:9d:a5:9f:69:2f:62:81:b4:cf:83:af:54: 5c:ba:17:7f:3d:ca:6f:62:ff:27:ae:c6:5c:7e:3f:b5:60:61: 01:b0:bb:0d:ce:c6:e4:d4:88:4c:78:40:d8:e6:87:88:ec:8c: 4e:38:b0:40:ca:e6:b7:e3:56:39:36:00:82:f9:86:0c:6e:f0: a3:87:a6:ff:54:c9:98:df:f2:59:59:0a:39:a4:40:97:f8:4c: dd:1b:80:a0:cf:eb:6b:db:c8:79:fe:7b:44:9e:4d:9c:fb:61: 0b:30:92:0f:7e:64:c6:4e:9b:aa:22:ce:8d:45:d5:1f:9b:ef: 5f:ee:ca:20:d6:e2:74:a6:84:d5:80:6c:b9:6c:23:81:43:f4: ea:fb:60:53:dd:71:d8:33:89:1b:8b:ab:9b:e9:f9:bf:d8:9d: de:5c:94:f1:df:ac:90:0d:61:fe:04:6e:6d:6e:f9:f7:de:64: 54:ad:8c:2d:a8:fb:c0:20:11:05:aa:5b:8a:21:db:a0:ef:a6: 5f:a4:89:8e:33:e3:e9:f8:67:fa:f4:51:e5:6a:c0:1d:27:3f: e7:00:4b:a0:33:35:7c:e6:e9:c3:ab:c1:ff:f0:d8:e6:52:c1: 28:07:ce:15 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjYwODA3MDI1MjM1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1NDg3My00N2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmKHlG1zEXfouSH1ZbRNbjQQsoMD9mLZ00ex0VhC1W4/pg4C6KPwqG76DDoy QNF8dxRKxy2qJD6rXlCT/ycRql7opWLp7OCy3OoA2cqTnepQ8sD2tzmyCKhszqqh y/PKZiK9OH8vmLu229y758nvEOUhJF/H2V/jCqIwnIkswwSwbdmsBrSGirYxGBte ygZRr+aUFdUSuPAGDCqT+/KvZJhdHAqzyCJpNZgn2SMc0TAn2SThpzEAHyE4neDK gYR0rEfm1bsKlSTbqdOiR6HcRhNOmJ7G1jD19WiD8kZ0Ba6ej+ZhbI5bRCoioXzq oFGlD9V7GBARutsSkGRR699xgwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFN1rWrB8 /VBXA64eevTv7wE/bHA4MB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvMTM5MzAwRTRC QTY5MTFFRkE3OEUyRjY2QzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAp BAIAAjAjAwcAJAELYAAtAwYEJAELYBAwEAMGACQBC2DjAwYDJAELYOAwDQYJKoZI hvcNAQELBQADggEBAAduXEVphq95cUOe3vZ7qQA8Mw/qlDBs5p2ln2kvYoG0z4Ov VFy6F389ym9i/yeuxlx+P7VgYQGwuw3OxuTUiEx4QNjmh4jsjE44sEDK5rfjVjk2 AIL5hgxu8KOHpv9UyZjf8llZCjmkQJf4TN0bgKDP62vbyHn+e0SeTZz7YQswkg9+ ZMZOm6oizo1F1R+b71/uyiDW4nSmhNWAbLlsI4FD9Or7YFPdcdgziRuLq5vp+b/Y nd5clPHfrJANYf4Ebm1u+ffeZFStjC2o+8AgEQWqW4oh26Dvpl+kiY4z4+n4Z/r0 UeVqwB0nP+cAS6AzNXzm6cOrwf/w2OZSwSgHzhU= -----END CERTIFICATE-----Generated at Fri Sep 4 21:12:22 2026 by rpki-client