$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/DC7D21D4BFC011F1A6C9C50E5611F970.roa File: DC7D21D4BFC011F1A6C9C50E5611F970.roa (raw, json) Hash identifier: FjDfd5gP953mEdZJNCoYmPBfdfDkCajTmYnWPY6JOIM= Subject key identifier: 29:CE:CE:B5:E3:E5:F5:37:A2:85:B9:1B:8C:C6:42:14:AE:AD:11:20 Certificate issuer: /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Certificate serial: 67 Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/DC7D21D4BFC011F1A6C9C50E5611F970.roa Signing time: Sun 04 Oct 2026 06:57:28 +0000 ROA not before: Sun 04 Oct 2026 06:57:28 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45176 IP address blocks: 2405:dbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Validity Not Before: Oct 4 06:57:28 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6ac1f8d8-962d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:d7:06:01:b6:42:14:f5:92:97:5a:c9:8f: 65:01:21:41:f0:fb:a9:93:8a:ae:e8:5e:a4:df:11: 21:52:a3:d5:af:f5:53:44:cd:af:d7:70:29:62:b2: 56:d9:96:4d:25:c1:0c:58:2a:7e:5d:fd:14:98:7b: 2b:fc:7d:1c:48:92:63:55:8a:94:68:77:01:52:33: e6:c8:b6:19:91:35:f7:ac:df:89:a1:12:32:27:cf: aa:66:e9:04:8c:02:0a:7a:bd:77:fd:2f:7a:1d:44: bb:e0:81:1f:64:fa:97:1b:83:f0:d7:48:66:88:61: df:fd:cf:2d:23:d8:51:21:b9:4f:65:95:4c:7e:8e: 09:c6:bb:c5:d2:c6:17:a7:cf:87:3f:c9:7a:f9:90: 08:72:29:c3:a6:97:f6:ca:1e:ea:d5:d4:e5:75:7a: 6a:88:4e:48:55:9b:c1:4a:f9:89:d9:59:eb:6f:b3: c1:9b:7b:d2:3a:97:3f:e9:5f:8a:fe:df:34:fc:90: 0b:f5:72:18:14:51:b4:e1:5d:22:6c:5a:24:54:e8: 7c:e8:55:a1:0c:35:19:c9:af:f0:72:8c:a0:5b:e1: ef:4e:63:c0:c1:65:1d:7e:df:d8:4e:db:a5:f8:06: 4a:5b:54:c3:9c:64:1f:80:e7:52:7d:3d:f6:8a:cf: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CE:CE:B5:E3:E5:F5:37:A2:85:B9:1B:8C:C6:42:14:AE:AD:11:20 X509v3 Authority Key Identifier: keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/DC7D21D4BFC011F1A6C9C50E5611F970.roa sbgp-ipAddrBlock: critical IPv6: 2405:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 35:64:64:88:e4:68:82:08:44:2a:bc:51:76:b9:05:42:30:70: e3:6e:21:ce:24:da:2e:22:f7:89:c0:6e:90:b0:5b:d5:10:29: ad:d2:63:82:24:b0:d0:6a:f2:2a:70:7f:52:8a:e8:75:fe:7b: 79:e3:2e:56:84:f7:b6:af:1e:90:30:32:ca:5d:b8:1e:6a:4f: 37:a4:63:67:be:cc:f6:d4:b8:ff:ce:54:ac:4e:76:ca:93:58: c7:f2:8c:27:a5:de:4b:b8:f7:f6:f5:60:d3:71:01:15:fe:88: ae:b6:cc:3b:91:87:be:5a:c9:12:bc:33:11:6b:23:87:b7:5b: 9b:62:ef:eb:cf:34:19:10:6b:1b:06:2e:d5:f9:65:b3:9e:c2: 42:04:9a:68:c0:4f:e4:a8:60:c4:4e:4b:2e:41:c8:e3:8a:d2: 17:71:58:1a:c5:31:90:69:02:8d:92:11:ad:6c:b5:bc:91:c1: 96:0d:08:d3:38:6b:d1:cd:15:44:39:37:a1:3e:4a:25:49:92: 98:40:cc:79:5a:50:bc:ee:b7:95:d5:da:44:6d:b0:78:cc:4a: 2b:73:63:51:9c:f7:bf:73:1f:89:a3:5a:e4:60:d9:9e:94:72: 44:06:18:f2:1e:ec:51:1e:2a:ee:fe:9b:ea:2e:61:20:fa:46: 5d:b1:8b:61 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDkwQzExMC8GA1UEBRMoOEFFRTI5REIyRkU5MTQwN0ZFNDBFNEJFNzhDNDA2MjZE N0UxOEZCMTAeFw0yNjEwMDQwNjU3MjhaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYzFmOGQ4LTk2MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSEtcGAbZCFPWSl1rJj2UBIUHw+6mTiq7oXqTfESFSo9Wv9VNEza/XcClislbZ lk0lwQxYKn5d/RSYeyv8fRxIkmNVipRodwFSM+bIthmRNfes34mhEjInz6pm6QSM Agp6vXf9L3odRLvggR9k+pcbg/DXSGaIYd/9zy0j2FEhuU9llUx+jgnGu8XSxhen z4c/yXr5kAhyKcOml/bKHurV1OV1emqITkhVm8FK+YnZWetvs8Gbe9I6lz/pX4r+ 3zT8kAv1chgUUbThXSJsWiRU6HzoVaEMNRnJr/ByjKBb4e9OY8DBZR1+39hO26X4 BkpbVMOcZB+A51J9PfaKz4lfAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUKc7OtePl 9TeihbkbjMZCFK6tESAwHwYDVR0jBBgwFoAUiu4p2y/pFAf+QOS+eMQGJtfhj7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOTBDL0I3QzRFOTM2NUQy OTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFmLVFPUy1lTVFHSnRmaGo3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXU0cDJ5X3BGQWYtUU9TLWVNUUdKdGZoajdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDkwQy9CN0M0RTkzNjVEMjkxMUVBQjA1NEZGM0JDNEY5QUUwMi9EQzdEMjFENEJG QzAxMUYxQTZDOUM1MEU1NjExRjk3MC5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBdvAMA0GCSqGSIb3DQEBCwUAA4IBAQA1ZGSI5GiCCEQqvFF2uQVC MHDjbiHOJNouIveJwG6QsFvVECmt0mOCJLDQavIqcH9Siuh1/nt54y5WhPe2rx6Q MDLKXbgeak83pGNnvsz21Lj/zlSsTnbKk1jH8ownpd5LuPf29WDTcQEV/oiutsw7 kYe+WskSvDMRayOHt1ubYu/rzzQZEGsbBi7V+WWznsJCBJpowE/kqGDETksuQcjj itIXcVgaxTGQaQKNkhGtbLW8kcGWDQjTOGvRzRVEOTehPkolSZKYQMx5WlC87reV 1dpEbbB4zEorc2NRnPe/cx+Jo1rkYNmelHJEBhjyHuxRHiru/pvqLmEg+kZdsYth -----END CERTIFICATE-----Generated at Mon Oct 5 13:02:21 2026 by rpki-client