$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/3967609C970A11F1BDE754DEADEE528E.roa File: 3967609C970A11F1BDE754DEADEE528E.roa (raw, json) Hash identifier: dsUgDXki61yZn9xzFp1VM6D9mMTVDZRW77YFAeemlPg= Subject key identifier: C9:AF:82:F0:02:64:1E:17:E0:93:F7:54:0F:1D:86:AC:1C:68:BA:AE Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 083F Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/3967609C970A11F1BDE754DEADEE528E.roa Signing time: Thu 13 Aug 2026 11:29:19 +0000 ROA not before: Thu 13 Aug 2026 11:29:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136917 IP address blocks: 2401:a840::/32 maxlen: 32 2401:a840::/36 maxlen: 36 2401:a840::/40 maxlen: 40 2401:a840:100::/40 maxlen: 40 2401:a840:200::/40 maxlen: 40 2401:a840:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Aug 13 11:29:19 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a7daa8f-d6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:0c:12:57:bd:4b:43:86:48:72:7d:fe:30: 94:84:8c:ca:63:3f:26:e3:ff:01:98:a8:d0:93:ea: 7c:34:b1:bc:2e:71:9c:b6:0b:f4:5f:8c:5b:7d:bd: a1:16:9e:e2:77:f4:83:fd:0c:af:fa:19:2d:c6:13: 77:86:6d:de:2c:23:d5:50:7c:ab:fd:bf:78:11:54: bd:10:92:cd:f4:ea:f5:2f:f2:97:c0:70:20:67:30: 27:89:54:63:33:54:53:7e:6b:11:dc:e5:1f:03:52: 19:01:42:b9:4a:a1:5e:ac:e6:f2:77:d1:cb:88:60: 2c:a8:a4:ba:94:e3:9e:9e:31:5e:62:e9:0f:1c:f3: 84:53:d2:75:b5:7f:2a:b5:04:91:72:b8:b5:d7:66: ac:fb:76:f5:b2:8e:30:ac:e5:37:e8:86:09:bf:c3: f0:ca:75:53:cc:ac:cb:53:ed:aa:61:53:5e:9c:f5: 62:6b:72:ba:80:52:ec:96:1d:36:a7:6c:20:a4:6b: 17:75:fb:d4:a8:bd:fc:92:23:90:31:95:76:7b:11: 7d:f7:69:5c:30:32:e4:13:7b:da:45:b8:f9:71:f4: 23:76:0b:f1:ef:86:c4:bb:36:97:c9:68:ff:f8:14: 8b:aa:fe:4f:40:e0:ca:ee:5c:9c:2f:24:56:d9:bd: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AF:82:F0:02:64:1E:17:E0:93:F7:54:0F:1D:86:AC:1C:68:BA:AE X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/3967609C970A11F1BDE754DEADEE528E.roa sbgp-ipAddrBlock: critical IPv6: 2401:a840::/32 Signature Algorithm: sha256WithRSAEncryption 4c:d1:8f:13:87:c7:8b:f2:7c:9e:8f:a0:b3:a3:5f:9a:97:9c: a7:d2:7d:18:91:c8:25:5e:c6:0e:9f:f9:3e:af:49:d6:23:c4: 47:49:2d:4e:43:58:ec:a1:b4:b9:53:96:44:a5:72:52:6b:57: ca:f2:7c:65:78:fa:65:58:ab:f8:67:8b:f5:23:cb:da:5e:35: 9a:e5:44:51:f7:b7:f3:fd:78:5f:39:6d:ad:b6:49:81:d0:34: 5f:3a:d6:6e:a3:3b:fe:c5:1e:b0:6c:5d:24:a6:ad:f9:87:78: 1b:ca:b9:84:70:cc:39:01:70:08:a1:58:88:a0:e6:d8:81:62: 39:10:0d:a4:99:45:49:e3:6d:e1:f3:99:3d:03:45:51:eb:d1: d2:4d:fb:18:fb:f1:2c:4f:0a:48:65:09:85:04:08:36:79:fb: 13:c5:9d:f4:a0:fc:8c:1c:0c:ab:43:1f:77:93:88:07:a7:40: 6d:32:17:5b:37:c1:6e:da:8c:42:1c:91:f2:16:1f:02:44:6a: 06:09:17:dc:5d:c3:04:14:7b:ab:d6:8c:50:d6:b5:f9:05:e9: ee:0f:2d:b8:a5:43:d1:e7:de:46:9a:c6:3e:7a:5c:ea:c9:55: be:0b:de:8d:d2:1d:25:54:ae:51:bb:54:16:35:51:fd:69:7a: fe:6a:ee:de -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjYwODEzMTEyOTE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdkYWE4Zi1kNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptEMEle9S0OGSHJ9/jCUhIzKYz8m4/8BmKjQk+p8NLG8LnGctgv0X4xbfb2h Fp7id/SD/Qyv+hktxhN3hm3eLCPVUHyr/b94EVS9EJLN9Or1L/KXwHAgZzAniVRj M1RTfmsR3OUfA1IZAUK5SqFerObyd9HLiGAsqKS6lOOenjFeYukPHPOEU9J1tX8q tQSRcri112as+3b1so4wrOU36IYJv8PwynVTzKzLU+2qYVNenPVia3K6gFLslh02 p2wgpGsXdfvUqL38kiOQMZV2exF992lcMDLkE3vaRbj5cfQjdgvx74bEuzaXyWj/ +BSLqv5PQODK7lycLyRW2b0XtwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFMmvgvAC ZB4X4JP3VA8dhqwcaLquMB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVDM0IvNkIzN0UxOUM4NDE3MTFFNzg1RjE3MDgwQzRGOUFFMDIvMzk2NzYwOUM5 NzBBMTFGMUJERTc1NERFQURFRTUyOEUucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAGoQDANBgkqhkiG9w0BAQsFAAOCAQEATNGPE4fHi/J8no+gs6Nf mpecp9J9GJHIJV7GDp/5Pq9J1iPER0ktTkNY7KG0uVOWRKVyUmtXyvJ8ZXj6ZVir +GeL9SPL2l41muVEUfe38/14XzltrbZJgdA0XzrWbqM7/sUesGxdJKat+Yd4G8q5 hHDMOQFwCKFYiKDm2IFiORANpJlFSeNt4fOZPQNFUevR0k37GPvxLE8KSGUJhQQI Nnn7E8Wd9KD8jBwMq0Mfd5OIB6dAbTIXWzfBbtqMQhyR8hYfAkRqBgkX3F3DBBR7 q9aMUNa1+QXp7g8tuKVD0efeRprGPnpc6slVvgvejdIdJVSuUbtUFjVR/Wl6/mru 3g== -----END CERTIFICATE-----Generated at Wed Aug 19 13:37:12 2026 by rpki-client