$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E1870478616C11F0A254E10BC4F9AE02.roa File: E1870478616C11F0A254E10BC4F9AE02.roa (raw, json) Hash identifier: oBxirV5YdcJ1nUF+hzEr2H8141lEcYC5KF9zRC2ntXs= Subject key identifier: DA:FA:52:A1:3E:30:AC:34:49:18:4E:5F:3D:22:4D:F1:AA:A0:46:D3 Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Certificate serial: 0280 Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E1870478616C11F0A254E10BC4F9AE02.roa Signing time: Tue 15 Jul 2025 11:14:32 +0000 ROA not before: Tue 15 Jul 2025 11:14:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45691 IP address blocks: 2001:df1:bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Validity Not Before: Jul 15 11:14:32 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68763817-41ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:ab:5b:b2:e7:c0:3f:5b:d0:72:c4:60:af: 57:24:38:7b:b7:5d:5d:ad:71:63:5d:95:2d:3d:f3: 98:98:a2:2d:80:73:1c:60:49:ae:81:84:14:29:bc: 18:bd:72:42:2c:2d:b0:86:1d:6a:49:79:8c:98:5f: 7e:03:e6:eb:6e:e0:0b:28:a0:2e:17:d7:af:b2:cd: 35:32:5d:28:83:a1:fc:9b:ed:cc:a2:32:46:b2:59: 9b:65:65:0b:12:75:ea:1a:27:4d:7a:ee:5d:2a:25: 88:5f:40:34:96:04:1b:3f:9b:96:33:4a:ee:d2:96: 25:00:9b:11:b9:a3:3f:2e:63:0f:b1:03:06:30:ae: 4d:e4:0a:1b:bc:1d:ce:b3:da:9f:da:04:6d:c0:32: 4e:c2:d8:2f:a8:47:0b:22:2c:27:85:9a:dc:82:d7: 33:93:80:ab:fe:ce:c2:c9:6f:45:76:2f:10:d9:d0: 10:b4:21:96:db:07:bf:44:f3:b0:9e:f0:29:6c:cf: e4:5f:c5:66:5b:2f:ee:6b:3e:a7:a9:60:07:e4:b4: 50:d4:f9:b1:33:6e:b5:0b:29:fb:81:d6:90:7b:88: 81:27:fe:9c:5d:cc:1d:77:fa:2b:c7:f8:8d:f9:de: c8:04:48:9b:b8:d4:47:85:ac:bb:90:01:15:55:cc: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FA:52:A1:3E:30:AC:34:49:18:4E:5F:3D:22:4D:F1:AA:A0:46:D3 X509v3 Authority Key Identifier: keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E1870478616C11F0A254E10BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:bc0::/48 Signature Algorithm: sha256WithRSAEncryption 20:6c:c4:f8:e4:7c:00:ac:98:61:b9:66:9c:d3:eb:00:f0:3e: b9:5d:6b:50:27:51:7b:c0:9d:4d:e2:64:83:4c:03:9b:82:0b: b6:40:3b:7e:b2:22:1e:b0:77:d9:3c:84:08:a4:f4:32:74:b4: 3e:8c:e8:59:27:93:54:37:6f:15:d2:42:aa:f1:ed:8f:30:cb: c0:3b:16:3f:e1:6e:64:4a:2e:1b:d2:83:34:7e:a1:1b:1e:7c: c7:b0:01:3d:c7:cc:10:50:d1:df:bd:f9:4a:97:83:70:63:71: 7d:10:64:d6:f1:40:0a:3d:e6:9a:05:48:f4:58:32:f6:a4:cb: 8e:10:af:42:b5:35:fd:3d:59:da:01:73:f7:96:73:73:28:2b: d1:6c:4d:84:72:4f:07:3d:04:f8:be:29:30:eb:6e:ae:b9:2c: 6a:75:6a:d3:48:e3:38:dd:b5:20:e6:ea:41:79:bc:5e:ec:7f: fc:88:69:51:30:da:7d:b4:aa:dc:97:3b:e1:9e:ee:06:72:e3: e4:82:2d:a9:1d:cd:c5:16:28:a4:a9:c0:a2:e6:42:4d:e7:ec: 85:15:01:1e:22:0a:ba:45:6f:0b:03:f7:ce:db:f5:ca:89:52: 45:5f:96:fa:c9:2b:be:59:0f:b9:26:43:20:95:a7:b8:65:1a: a0:20:43:b8 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF MUI0OTM4REIwHhcNMjUwNzE1MTExNDMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc2MzgxNy00MWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9erW7LnwD9b0HLEYK9XJDh7t11drXFjXZUtPfOYmKItgHMcYEmugYQUKbwY vXJCLC2whh1qSXmMmF9+A+brbuALKKAuF9evss01Ml0og6H8m+3MojJGslmbZWUL EnXqGidNeu5dKiWIX0A0lgQbP5uWM0ru0pYlAJsRuaM/LmMPsQMGMK5N5AobvB3O s9qf2gRtwDJOwtgvqEcLIiwnhZrcgtczk4Cr/s7CyW9Fdi8Q2dAQtCGW2we/RPOw nvApbM/kX8VmWy/uaz6nqWAH5LRQ1PmxM261Cyn7gdaQe4iBJ/6cXcwdd/orx/iN +d7IBEibuNRHhay7kAEVVcz7MwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNr6UqE+ MKw0SRhOXz0iTfGqoEbTMB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQzRUUvMDFFNEU2OTYyM0NCMTFFREE4RTM1ODNFQzRGOUFFMDIvRTE4NzA0Nzg2 MTZDMTFGMEEyNTRFMTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xC8AwDQYJKoZIhvcNAQELBQADggEBACBsxPjkfACs mGG5ZpzT6wDwPrlda1AnUXvAnU3iZINMA5uCC7ZAO36yIh6wd9k8hAik9DJ0tD6M 6Fknk1Q3bxXSQqrx7Y8wy8A7Fj/hbmRKLhvSgzR+oRsefMewAT3HzBBQ0d+9+UqX g3BjcX0QZNbxQAo95poFSPRYMvaky44Qr0K1Nf09WdoBc/eWc3MoK9FsTYRyTwc9 BPi+KTDrbq65LGp1atNI4zjdtSDm6kF5vF7sf/yIaVEw2n20qtyXO+Ge7gZy4+SC LakdzcUWKKSpwKLmQk3n7IUVAR4iCrpFbwsD987b9cqJUkVflvrJK75ZD7kmQyCV p7hlGqAgQ7g= -----END CERTIFICATE-----Generated at Sun Jul 20 14:27:12 2025 by rpki-client