$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E35133A60ED911EE8A4E0A23C4F9AE02.roa File: E35133A60ED911EE8A4E0A23C4F9AE02.roa (raw, json) Hash identifier: DbFSL15/B+AzAY4T13VMLeEL4vMc7Oj15jkYJlrDFl4= Subject key identifier: 2B:F9:5A:FB:D1:73:23:10:B1:14:71:AB:22:62:BE:AA:62:1B:B6:DE Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 0310 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E35133A60ED911EE8A4E0A23C4F9AE02.roa Signing time: Fri 07 Aug 2026 02:52:07 +0000 ROA not before: Fri 07 Aug 2026 02:52:07 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 151407 IP address blocks: 2401:b60:6::/48 maxlen: 48 2401:b60:b::/48 maxlen: 48 2401:b60:2b::/48 maxlen: 48 2401:b60:100::/40 maxlen: 40 2401:b60:3000::/40 maxlen: 48 2401:b60:e200::/48 maxlen: 48 2401:b60:e201::/48 maxlen: 48 2401:b60:e203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 784 (0x310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Aug 7 02:52:07 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a754857-875d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:f9:ab:c4:df:89:47:18:d8:b0:4c:15:8a: 68:de:ef:fb:d1:ee:2a:bb:64:15:6b:f8:ad:19:5f: fb:9a:d7:12:4d:13:e7:50:38:30:a8:c0:d3:54:ec: a1:3e:c5:39:9b:11:b6:ff:6c:b7:ad:9b:b9:65:c9: 34:f8:8e:81:7e:dc:de:34:de:ca:cc:1b:ec:61:a2: a4:db:3b:06:94:e6:c7:65:d6:68:96:bc:76:6f:80: a5:0a:23:9a:55:83:fd:6c:57:67:ab:d3:42:5c:5c: 29:8c:de:67:32:85:1a:77:5f:1c:ca:e2:80:42:a6: 66:95:e4:99:06:12:d8:4e:55:78:c1:72:4d:89:28: 14:3f:a7:62:b1:ce:86:cc:b8:7a:23:93:99:2c:d6: 2e:f4:b9:18:26:8e:49:2e:15:6c:d2:7d:4c:27:e3: 08:e6:41:58:e4:5d:d5:58:a0:f5:40:55:86:06:63: a5:cc:c8:41:5c:3b:95:55:8e:39:e5:b8:e0:ff:35: f4:f1:88:91:6e:c0:b7:a7:22:12:aa:7d:81:44:3d: 5e:92:fa:4b:6c:e3:e0:8e:28:1f:05:2f:4e:98:1c: ee:8e:35:7d:2e:5e:d6:ef:68:b4:dc:6f:67:aa:6b: 4d:a7:f9:b0:81:ce:99:37:4b:1f:74:cc:c2:8a:86: bc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:5A:FB:D1:73:23:10:B1:14:71:AB:22:62:BE:AA:62:1B:B6:DE X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/E35133A60ED911EE8A4E0A23C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:b60:6::/48 2401:b60:b::/48 2401:b60:2b::/48 2401:b60:100::/40 2401:b60:3000::/40 2401:b60:e200::/47 2401:b60:e203::/48 Signature Algorithm: sha256WithRSAEncryption 90:20:b3:0c:5e:02:f0:57:f9:c6:3a:42:cf:72:e5:40:76:90: 06:11:d8:a6:16:6b:e1:eb:d4:b8:4b:2f:97:d8:77:c8:3d:b5: d1:52:68:3e:6d:fe:94:b9:a6:b0:fd:16:ed:61:28:29:41:b6: c4:1c:7e:af:2f:3d:25:a2:f9:df:0c:85:84:ff:de:2b:d2:3e: a7:8b:14:39:dc:c0:28:7d:2f:cc:65:40:4a:a3:32:aa:b0:6f: 19:7a:e9:b7:4b:10:1a:37:8c:9c:d3:2c:92:e6:7a:2e:a6:a5: e1:e7:c2:4f:b0:4f:69:bb:a2:b8:21:6e:04:94:99:48:ef:18: aa:2f:aa:d5:93:5e:9f:be:cd:09:17:c3:ad:70:7c:98:8d:9a: 52:b8:1a:0c:65:da:50:c8:02:a9:50:32:5f:85:19:d4:a7:cc: 37:55:32:25:d7:70:19:ce:80:cf:72:e1:96:d7:14:1e:4d:3c: 1c:14:05:3f:94:cc:1b:1f:ff:ec:97:d2:50:9c:6f:e9:f2:0d: 24:97:14:68:06:1b:ef:a2:0e:56:f5:cf:25:55:3c:b7:b7:bd: 09:0f:77:e9:95:38:fc:22:1c:6b:eb:91:cc:48:51:57:77:4e: 50:dc:86:e2:f3:c8:3c:82:2c:43:d4:e7:18:6e:51:12:c7:93: f5:c8:0e:9d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjYwODA3MDI1MjA3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1NDg1Ny04NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5v5q8TfiUcY2LBMFYpo3u/70e4qu2QVa/itGV/7mtcSTRPnUDgwqMDTVOyh PsU5mxG2/2y3rZu5Zck0+I6BftzeNN7KzBvsYaKk2zsGlObHZdZolrx2b4ClCiOa VYP9bFdnq9NCXFwpjN5nMoUad18cyuKAQqZmleSZBhLYTlV4wXJNiSgUP6disc6G zLh6I5OZLNYu9LkYJo5JLhVs0n1MJ+MI5kFY5F3VWKD1QFWGBmOlzMhBXDuVVY45 5bjg/zX08YiRbsC3pyISqn2BRD1ekvpLbOPgjigfBS9OmBzujjV9Ll7W72i03G9n qmtNp/mwgc6ZN0sfdMzCioa81wIDAQABo4IClzCCApMwHQYDVR0OBBYEFCv5WvvR cyMQsRRxqyJivqpiG7beMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvRTM1MTMzQTYw RUQ5MTFFRThBNEUwQTIzQzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTBD BAIAAjA9AwcAJAELYAAGAwcAJAELYAALAwcAJAELYAArAwYAJAELYAEDBgAkAQtg MAMHASQBC2DiAAMHACQBC2DiAzANBgkqhkiG9w0BAQsFAAOCAQEAkCCzDF4C8Ff5 xjpCz3LlQHaQBhHYphZr4evUuEsvl9h3yD210VJoPm3+lLmmsP0W7WEoKUG2xBx+ ry89JaL53wyFhP/eK9I+p4sUOdzAKH0vzGVASqMyqrBvGXrpt0sQGjeMnNMskuZ6 Lqal4efCT7BPabuiuCFuBJSZSO8Yqi+q1ZNen77NCRfDrXB8mI2aUrgaDGXaUMgC qVAyX4UZ1KfMN1UyJddwGc6Az3LhltcUHk08HBQFP5TMGx//7JfSUJxv6fINJJcU aAYb76IOVvXPJVU8t7e9CQ936ZU4/CIca+uRzEhRV3dOUNyG4vPIPIIsQ9TnGG5R EseT9cgOnQ== -----END CERTIFICATE-----Generated at Sat Sep 5 01:50:06 2026 by rpki-client