$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa File: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (raw, json) Hash identifier: DMOnnBq0pchJxrIKNQnVPVkuYus9e6uopvVvEwbY84Y= Subject key identifier: A8:D3:00:68:FF:E3:A5:CB:7F:9B:84:47:A1:B8:56:21:40:D0:76:9A Certificate issuer: /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3 Certificate serial: 02 Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa Signing time: Wed 09 Jul 2025 04:50:52 +0000 ROA not before: Wed 09 Jul 2025 04:50:52 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153995 IP address blocks: 2402:1260::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3 Validity Not Before: Jul 9 04:50:52 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686df52b-9535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:44:29:f9:9c:4c:62:31:8f:d2:5a:ec:57: a1:11:c3:50:47:d6:a6:e5:a2:f5:f1:e6:b6:80:74: c4:ce:ae:36:b8:50:90:45:01:0d:1b:50:1f:e4:90: 7e:8d:05:77:70:4a:cb:91:a8:b9:a0:e9:3a:eb:2e: 34:d2:5d:7d:a3:5b:e0:3c:be:18:a0:b0:dc:95:6b: ae:0e:57:e0:02:44:4d:ab:77:b6:86:1a:1b:42:fe: 86:79:8b:91:35:27:a5:cc:b6:08:be:52:bf:40:80: 58:e1:af:3c:26:7e:2d:d7:12:d8:7f:2f:41:3c:bb: 4b:e7:51:67:48:b4:3f:e7:e1:38:80:9c:a9:4e:0a: ed:2a:d5:a9:8b:00:e3:22:ce:52:be:86:1a:21:3f: 5c:24:1f:a4:21:f4:7c:43:f1:f5:c6:e5:42:b7:e9: 09:d5:11:0f:77:7e:1f:f6:f2:f5:df:58:ea:9a:04: 84:d5:1d:52:f2:4b:e1:60:ea:89:08:de:a7:ad:27: 69:f6:1c:7a:5c:9e:6c:8e:23:25:fa:cd:34:9f:db: b2:08:55:67:e7:07:b1:23:90:34:98:81:d3:3f:25: 69:2b:0a:ca:8e:5a:f9:5b:ab:d8:7c:ca:95:da:f9: 6f:44:ad:a6:41:9e:ba:2b:95:64:8b:35:cf:3c:22: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D3:00:68:FF:E3:A5:CB:7F:9B:84:47:A1:B8:56:21:40:D0:76:9A X509v3 Authority Key Identifier: keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:1260::/32 Signature Algorithm: sha256WithRSAEncryption 62:89:83:b4:fc:4f:1b:d7:22:7d:6d:8e:b6:56:c9:23:96:77: 93:17:d6:c0:88:2a:71:36:c5:15:f9:79:8c:68:a7:b5:6b:e9: fb:a9:3e:ce:8c:7f:eb:93:42:84:01:0c:c0:3f:2a:2a:7e:95: 12:d9:89:e4:36:79:8c:ad:70:f3:d6:79:e3:d6:e1:3c:0e:94: 37:95:e0:3a:0c:aa:ae:f7:a1:51:45:d5:67:a2:c2:55:92:72: 02:64:c7:c4:49:5f:59:71:4b:5c:5b:22:1b:8e:89:50:1a:db: 33:de:cf:38:cf:ab:27:76:48:98:76:a5:b7:2c:24:1b:4e:65: 40:61:53:f2:d3:b0:d3:fd:f6:39:75:dd:a6:98:4d:27:f4:e3: 53:94:17:1b:bf:b7:a3:63:f2:cb:ef:22:8a:30:56:4d:7b:4f: 78:a8:4c:ab:64:e8:16:2f:74:a6:5a:5a:4a:85:e3:4e:d3:46: c0:61:31:0d:e5:96:e8:aa:92:01:71:11:f2:2d:f3:af:41:2b: 3a:30:f3:4d:84:6f:c3:70:53:a0:24:59:55:51:9c:a0:5f:c3: 16:db:b4:17:9f:46:ed:6a:23:35:77:8f:c6:21:d0:03:e1:01: 36:61:e0:a1:49:4e:07:b2:a9:1c:be:d4:0d:bc:f5:1b:da:75: 27:f9:05:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzdBNjExMC8GA1UEBRMoRTU0QzdFMTY1M0QwMTM0MjQyMjJDM0I5MzY4QTIxM0JB NTExNUNFMzAeFw0yNTA3MDkwNDUwNTJaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NmRmNTJiLTk1MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk6kQp+ZxMYjGP0lrsV6ERw1BH1qblovXx5raAdMTOrja4UJBFAQ0bUB/kkH6N BXdwSsuRqLmg6TrrLjTSXX2jW+A8vhigsNyVa64OV+ACRE2rd7aGGhtC/oZ5i5E1 J6XMtgi+Ur9AgFjhrzwmfi3XEth/L0E8u0vnUWdItD/n4TiAnKlOCu0q1amLAOMi zlK+hhohP1wkH6Qh9HxD8fXG5UK36QnVEQ93fh/28vXfWOqaBITVHVLyS+Fg6okI 3qetJ2n2HHpcnmyOIyX6zTSf27IIVWfnB7EjkDSYgdM/JWkrCsqOWvlbq9h8ypXa +W9EraZBnrorlWSLNc88Igs7AgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUqNMAaP/j pct/m4RHobhWIUDQdpowHwYDVR0jBBgwFoAU5Ux+FlPQE0JCIsO5NoohO6URXOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3N0E2L0M5MkMzOUFFNUM3 RTExRjBBNUMzNjAzNkM0RjlBRTAyLzVVeC1GbFBRRTBKQ0lzTzVOb29oTzZVUlhP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVV4LUZsUFFFMEpDSXNPNU5vb2hPNlVSWE9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzdBNi9DOTJDMzlBRTVDN0UxMUYwQTVDMzYwMzZDNEY5QUUwMi80OUZCMjFBMjVD ODAxMUYwQUJDNjk5M0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCEmAwDQYJKoZIhvcNAQELBQADggEBAGKJg7T8TxvXIn1t jrZWySOWd5MX1sCIKnE2xRX5eYxop7Vr6fupPs6Mf+uTQoQBDMA/Kip+lRLZieQ2 eYytcPPWeePW4TwOlDeV4DoMqq73oVFF1WeiwlWScgJkx8RJX1lxS1xbIhuOiVAa 2zPezzjPqyd2SJh2pbcsJBtOZUBhU/LTsNP99jl13aaYTSf041OUFxu/t6Nj8svv IoowVk17T3ioTKtk6BYvdKZaWkqF407TRsBhMQ3lluiqkgFxEfIt869BKzow802E b8NwU6AkWVVRnKBfwxbbtBefRu1qIzV3j8Yh0APhATZh4KFJTgeyqRy+1A289Rva dSf5BTA= -----END CERTIFICATE-----Generated at Sun Jul 20 14:07:45 2025 by rpki-client