$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/D2B93B4C638211F087594469C4F9AE02.roa File: D2B93B4C638211F087594469C4F9AE02.roa (raw, json) Hash identifier: Pu8GeUQM5zPY/klLoi38DXyDw9LChnXWL5CaLmbea3k= Subject key identifier: 0A:35:67:31:36:8C:1B:D6:F4:DF:0F:0A:03:6F:FC:1E:83:62:D4:11 Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Certificate serial: 02 Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/D2B93B4C638211F087594469C4F9AE02.roa Signing time: Fri 18 Jul 2025 02:56:38 +0000 ROA not before: Fri 18 Jul 2025 02:56:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135045 IP address blocks: 2402:1960::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921 Validity Not Before: Jul 18 02:56:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6879b7e6-9d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:ad:be:05:46:de:bc:b5:99:0b:fc:e6:1f: 20:8a:db:cb:10:a7:37:25:30:17:ef:de:5c:b8:84: 8b:7d:4f:59:07:7f:e5:27:00:3f:c1:f6:cd:0a:55: dd:48:6b:97:82:12:e0:9b:62:f8:79:9d:f8:44:21: fe:3d:9e:9c:7b:bf:50:a2:13:d7:fd:4f:8c:67:1e: fc:46:cb:01:0f:52:6c:57:32:eb:ae:6c:07:94:18: 39:1e:0f:4e:2d:82:65:bb:15:69:61:bd:26:5e:bb: fa:e6:59:ea:21:d5:25:27:07:b7:c5:fe:61:b5:80: 38:30:23:e7:b6:8e:69:d3:6c:31:ad:e3:e2:f8:25: b1:b9:36:6d:69:27:1c:2b:54:7e:02:f4:fe:45:e3: 6a:9e:9b:1d:02:61:90:13:c8:b9:cf:69:ca:a1:11: 7d:e7:2a:4d:4d:0f:93:44:27:70:11:93:71:57:78: c2:91:99:ce:d7:c1:80:18:c0:9b:b9:25:00:13:65: 3b:57:fd:da:d3:0d:0c:57:61:05:b1:0e:2d:9c:92: f6:4b:0d:f3:93:e2:c3:f2:c6:9c:ad:dd:7c:44:01: 25:eb:cd:05:12:98:53:ff:7d:d2:76:31:0c:ba:31: 59:65:3c:d9:5b:8d:32:bd:10:c2:49:1a:d7:b7:b8: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:35:67:31:36:8C:1B:D6:F4:DF:0F:0A:03:6F:FC:1E:83:62:D4:11 X509v3 Authority Key Identifier: keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/D2B93B4C638211F087594469C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:1960::/32 Signature Algorithm: sha256WithRSAEncryption 08:69:48:02:4d:98:d1:3f:4f:a3:13:d8:6d:f3:34:c8:21:f9: 7c:2e:a4:b1:0c:ab:e2:65:fc:33:56:f9:ee:1b:b7:be:62:5f: a8:e0:5f:9e:df:1e:b3:f4:f9:93:17:53:6a:01:b4:20:d1:7e: 3c:9e:53:19:00:91:a4:a1:55:a5:e4:7b:b9:0f:45:00:fc:99: 32:db:52:99:7c:43:4d:24:1c:72:50:26:92:38:3f:9e:1a:e0: 8c:26:8d:76:2c:c5:e6:56:19:bf:80:9f:8a:a2:0d:98:e8:8e: 7d:b3:de:a7:95:f2:1e:3e:03:34:1a:68:bc:bf:66:f8:f1:a3: 21:49:f8:81:cd:70:2e:05:93:28:56:b7:dd:bf:a1:fa:2a:6d: 3c:f6:49:4d:94:cd:95:e6:c7:3a:86:e4:54:24:de:cf:cd:35: 82:c2:53:c4:01:23:77:0b:95:88:df:b8:a5:34:bc:3a:1d:c2: 70:43:cb:85:fd:41:11:56:84:8e:e0:a7:65:1b:86:43:ae:76: 8b:af:51:65:be:6e:8c:55:ec:b0:1b:43:be:62:37:dd:b6:9d: c5:22:b3:f6:fa:c2:20:0a:2a:b4:ad:15:c6:2c:55:23:29:a1: 72:f8:37:1a:ea:b0:04:75:b3:f3:2d:74:26:8f:53:ac:88:cb: 75:b4:0e:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy QkNFODkyMTAeFw0yNTA3MTgwMjU2MzhaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NzliN2U2LTlkMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9LK2+BUbevLWZC/zmHyCK28sQpzclMBfv3ly4hIt9T1kHf+UnAD/B9s0KVd1I a5eCEuCbYvh5nfhEIf49npx7v1CiE9f9T4xnHvxGywEPUmxXMuuubAeUGDkeD04t gmW7FWlhvSZeu/rmWeoh1SUnB7fF/mG1gDgwI+e2jmnTbDGt4+L4JbG5Nm1pJxwr VH4C9P5F42qemx0CYZATyLnPacqhEX3nKk1ND5NEJ3ARk3FXeMKRmc7XwYAYwJu5 JQATZTtX/drTDQxXYQWxDi2ckvZLDfOT4sPyxpyt3XxEASXrzQUSmFP/fdJ2MQy6 MVllPNlbjTK9EMJJGte3uMf1AgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUCjVnMTaM G9b03w8KA2/8HoNi1BEwHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0VGMi82QUZCRTQ0QzYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9EMkI5M0I0QzYz ODIxMUYwODc1OTQ0NjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCGWAwDQYJKoZIhvcNAQELBQADggEBAAhpSAJNmNE/T6MT 2G3zNMgh+XwupLEMq+Jl/DNW+e4bt75iX6jgX57fHrP0+ZMXU2oBtCDRfjyeUxkA kaShVaXke7kPRQD8mTLbUpl8Q00kHHJQJpI4P54a4IwmjXYsxeZWGb+An4qiDZjo jn2z3qeV8h4+AzQaaLy/ZvjxoyFJ+IHNcC4FkyhWt92/ofoqbTz2SU2UzZXmxzqG 5FQk3s/NNYLCU8QBI3cLlYjfuKU0vDodwnBDy4X9QRFWhI7gp2UbhkOudouvUWW+ boxV7LAbQ75iN922ncUis/b6wiAKKrStFcYsVSMpoXL4NxrqsAR1s/MtdCaPU6yI y3W0DtM= -----END CERTIFICATE-----Generated at Wed Jul 23 23:58:19 2025 by rpki-client