$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa File: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (raw, json) Hash identifier: Y+qs2z3P8V9uaGhh4nh1gvjcG2+gtCdiPwz3sWEVZh0= Subject key identifier: 9B:26:07:8A:F3:28:15:80:16:ED:EA:73:87:DA:38:05:FC:FC:3C:5A Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0E9E Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa Signing time: Tue 02 Sep 2025 18:38:04 +0000 ROA not before: Tue 02 Sep 2025 18:38:04 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 51089 IP address blocks: 2405:84c0:fd00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3742 (0xe9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 2 18:38:04 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b7398b-ffc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:fc:b0:73:67:38:7c:d0:ec:de:e6:80:e8: af:cd:6b:8d:05:31:2c:5a:f8:48:bf:e2:88:71:89: 02:78:68:86:cf:f3:78:ef:09:24:c0:c1:83:b0:d5: a9:ba:a2:56:bc:4d:71:d6:62:9d:50:ce:e9:e0:07: b3:d8:3d:ad:68:7a:64:57:21:ba:27:10:81:b4:5e: 98:73:af:fe:21:d9:2f:a0:98:72:3f:6b:e2:96:71: 39:c7:c7:c0:0b:ef:0f:89:56:93:c3:14:5b:61:e5: 18:21:6f:93:7e:89:ce:3d:3c:bb:be:22:7a:45:d3: cb:9d:49:0e:23:38:dd:7d:66:04:35:6f:da:b2:ab: f4:96:79:04:56:86:de:64:ec:ef:f5:da:68:37:b2: 6c:dd:89:e6:8b:83:14:48:a0:52:a6:98:e0:f5:fb: 11:09:fd:a9:de:24:b6:0d:c2:4e:a5:1b:15:a4:ea: 75:bc:70:a6:b0:2f:c7:56:ab:f2:9e:e4:bb:62:25: 15:b7:8c:e7:28:19:d8:33:9c:30:2b:5f:55:44:d8: a7:2c:6e:cd:ba:d1:1e:5a:7d:71:24:6d:cb:35:db: 05:14:b1:77:23:d4:a2:83:3c:43:a4:61:f6:9f:45: 94:94:4a:7f:56:9e:d8:f4:bf:73:cc:a8:b8:1f:94: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:26:07:8A:F3:28:15:80:16:ED:EA:73:87:DA:38:05:FC:FC:3C:5A X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:84c0:fd00::/40 Signature Algorithm: sha256WithRSAEncryption 95:48:bd:73:ca:08:2b:eb:cd:1c:25:d9:ab:43:e8:46:19:c9: dc:5d:48:a5:67:d8:19:25:96:ae:dd:d0:f0:b9:a6:b8:93:3c: 39:02:65:9c:f1:c0:2f:02:f5:90:9a:6a:cf:f7:62:1b:2c:fd: b8:f9:ad:aa:2e:61:46:67:22:0a:aa:c0:54:c6:0b:5b:02:2e: ce:64:76:d8:c5:f6:47:cc:3b:0e:34:71:9f:ad:e9:68:49:80: c8:de:bd:fb:7f:ac:4f:da:ba:58:96:fb:63:d1:dc:fe:2f:36: c7:c6:ae:3e:8f:6e:31:5d:a5:d7:24:0f:e2:45:77:6c:b8:96: ee:5f:c8:ae:84:16:c3:11:d8:ab:d1:57:a7:70:64:9d:04:d4: f7:11:29:12:af:9c:22:92:10:86:1f:47:2b:b9:b7:73:43:34: 03:78:db:1e:b7:74:42:f6:e8:5a:ea:b4:7c:5c:bc:cf:70:00: 88:95:4d:17:87:13:50:87:a3:30:35:40:a7:45:b5:76:64:2d: c5:7e:07:f0:27:c8:24:1f:58:53:9e:88:bd:50:c6:88:18:3f: 2c:e7:52:0f:f6:9c:80:94:fd:b9:77:6e:67:f3:19:89:76:70: 09:eb:55:55:3f:6b:5e:41:0b:be:bf:14:b9:00:f4:37:c0:8d: f6:3a:9a:ec -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUwOTAyMTgzODA0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3Mzk4Yi1mZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQT8sHNnOHzQ7N7mgOivzWuNBTEsWvhIv+KIcYkCeGiGz/N47wkkwMGDsNWp uqJWvE1x1mKdUM7p4Aez2D2taHpkVyG6JxCBtF6Yc6/+IdkvoJhyP2vilnE5x8fA C+8PiVaTwxRbYeUYIW+TfonOPTy7viJ6RdPLnUkOIzjdfWYENW/asqv0lnkEVobe ZOzv9dpoN7Js3Ynmi4MUSKBSppjg9fsRCf2p3iS2DcJOpRsVpOp1vHCmsC/HVqvy nuS7YiUVt4znKBnYM5wwK19VRNinLG7NutEeWn1xJG3LNdsFFLF3I9SigzxDpGH2 n0WUlEp/Vp7Y9L9zzKi4H5TziQIDAQABo4IClzCCApMwHQYDVR0OBBYEFJsmB4rz KBWAFu3qc4faOAX8/DxaMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvRURFM0UxRUUz MDZEMTFFQjlBRUUzRTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBYTA/TANBgkqhkiG9w0BAQsFAAOCAQEAlUi9c8oIK+vN HCXZq0PoRhnJ3F1IpWfYGSWWrt3Q8LmmuJM8OQJlnPHALwL1kJpqz/diGyz9uPmt qi5hRmciCqrAVMYLWwIuzmR22MX2R8w7DjRxn63paEmAyN69+3+sT9q6WJb7Y9Hc /i82x8auPo9uMV2l1yQP4kV3bLiW7l/IroQWwxHYq9FXp3BknQTU9xEpEq+cIpIQ hh9HK7m3c0M0A3jbHrd0QvboWuq0fFy8z3AAiJVNF4cTUIejMDVAp0W1dmQtxX4H 8CfIJB9YU56IvVDGiBg/LOdSD/acgJT9uXduZ/MZiXZwCetVVT9rXkELvr8UuQD0 N8CN9jqa7A== -----END CERTIFICATE-----Generated at Thu Sep 4 10:23:31 2025 by rpki-client