$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/2E73B40089CA11EF9D45F344C4F9AE02.roa File: 2E73B40089CA11EF9D45F344C4F9AE02.roa (raw, json) Hash identifier: yLUp5ssNL8jRCU8pwv3KHHNqOfo0vVixndIFRXexYhU= Subject key identifier: 73:63:21:F9:B5:4C:CE:14:C0:CB:B7:B7:40:21:E5:83:87:51:6C:F2 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 030E Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/2E73B40089CA11EF9D45F344C4F9AE02.roa Signing time: Tue 01 Jul 2025 02:08:25 +0000 ROA not before: Tue 01 Jul 2025 02:08:25 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 9009 IP address blocks: 2404:f980:4::/48 maxlen: 48 2404:f980:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945, serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: Jul 1 02:08:25 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=68634319-24c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:20:a3:b2:9a:1c:01:d8:1b:98:a7:a7:3d: 1d:11:3f:25:fb:7a:90:0b:af:5f:ce:a3:7d:ae:9c: 8c:44:6e:e3:fb:cf:8e:43:48:d0:7c:e5:72:0f:8d: e3:fc:0d:58:f9:e2:01:86:1d:ab:93:cb:99:d0:ba: 96:9a:26:23:46:92:04:79:c5:f5:ff:e0:b7:31:ab: d5:60:6c:f4:40:ab:0a:0d:1b:8c:16:cf:de:86:1f: ac:fb:36:48:6a:9f:0a:03:b3:5a:3c:a4:23:31:d5: 80:e4:f0:48:f8:19:13:29:25:e6:3d:2b:34:ed:7b: 6b:4b:bb:09:cd:e5:38:4a:2f:d3:89:32:b9:ea:bb: e4:17:90:22:2b:de:37:47:8e:70:7b:27:da:60:29: a3:c8:b0:d8:61:c6:30:4e:3b:90:f8:86:3e:33:69: 4a:24:b0:0b:71:9b:d1:da:97:41:aa:49:9f:2a:b4: 37:c7:69:8d:99:86:06:53:59:cf:d9:68:c3:40:ca: 58:d6:1a:2f:5b:12:12:d5:8f:65:22:59:d7:0a:ae: 37:41:64:b7:38:a0:12:7f:d5:ef:1a:cd:34:b3:71: 18:7c:f5:cf:27:f0:a9:8b:e0:c4:10:a1:18:af:1b: 0a:c1:f1:fd:a2:3e:9c:57:67:3e:20:26:f6:79:7c: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:63:21:F9:B5:4C:CE:14:C0:CB:B7:B7:40:21:E5:83:87:51:6C:F2 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/2E73B40089CA11EF9D45F344C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f980:4::/47 Signature Algorithm: sha256WithRSAEncryption 58:41:30:8e:40:03:d1:58:f4:8a:60:08:24:10:49:93:f8:49: da:0e:8f:fe:f2:98:c7:73:78:bc:a5:c6:d2:ca:fb:3a:a6:f1: f6:17:c9:f2:b5:46:73:20:80:a4:0f:3a:4f:e6:b7:ab:bc:da: 9f:53:d7:00:07:50:25:1b:0b:80:a1:37:1d:17:43:e2:d1:42: 42:cd:65:e5:6c:b6:8a:7d:85:5f:da:7f:94:46:21:18:4f:7e: ed:73:ea:ea:51:d8:51:15:73:ba:8e:38:ca:01:47:51:b5:95: 07:32:66:9f:e8:b4:02:88:33:20:df:30:01:1b:7b:a2:64:40: 35:77:42:62:63:15:55:6a:cb:92:78:2a:55:53:2b:ca:97:f4: 61:c1:87:12:b1:28:44:1b:64:cd:6d:2f:cb:7a:34:07:b6:c1: 73:38:97:ea:87:a0:7f:8e:be:de:4f:6e:b2:0f:d8:e8:a0:70: 9d:e5:ea:6e:09:9f:79:ea:a4:e7:80:05:14:00:83:67:67:fe: 1a:b3:68:a0:db:c6:eb:65:15:c1:15:69:72:a5:5b:d3:cf:21: 29:81:a1:1e:9b:88:2e:8b:a0:2a:45:96:a7:19:fb:a0:c4:ff: b7:4f:82:1b:66:37:39:9d:0a:6a:55:12:d5:47:e2:be:a4:17: 3a:57:09:95 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjUwNzAxMDIwODI1WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzNDMxOS0yNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppEgo7KaHAHYG5inpz0dET8l+3qQC69fzqN9rpyMRG7j+8+OQ0jQfOVyD43j /A1Y+eIBhh2rk8uZ0LqWmiYjRpIEecX1/+C3MavVYGz0QKsKDRuMFs/ehh+s+zZI ap8KA7NaPKQjMdWA5PBI+BkTKSXmPSs07XtrS7sJzeU4Si/TiTK56rvkF5AiK943 R45weyfaYCmjyLDYYcYwTjuQ+IY+M2lKJLALcZvR2pdBqkmfKrQ3x2mNmYYGU1nP 2WjDQMpY1hovWxIS1Y9lIlnXCq43QWS3OKASf9XvGs00s3EYfPXPJ/Cpi+DEEKEY rxsKwfH9oj6cV2c+ICb2eXym6wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHNjIfm1 TM4UwMu3t0Ah5YOHUWzyMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk5NDUvQkMwMEM4RjJGMDlFMTFFQ0FFRTczRTE5QzRGOUFFMDIvMkU3M0I0MDA4 OUNBMTFFRjlENDVGMzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkBPmAAAQwDQYJKoZIhvcNAQELBQADggEBAFhBMI5AA9FY 9IpgCCQQSZP4SdoOj/7ymMdzeLylxtLK+zqm8fYXyfK1RnMggKQPOk/mt6u82p9T 1wAHUCUbC4ChNx0XQ+LRQkLNZeVstop9hV/af5RGIRhPfu1z6upR2FEVc7qOOMoB R1G1lQcyZp/otAKIMyDfMAEbe6JkQDV3QmJjFVVqy5J4KlVTK8qX9GHBhxKxKEQb ZM1tL8t6NAe2wXM4l+qHoH+Ovt5PbrIP2OigcJ3l6m4Jn3nqpOeABRQAg2dn/hqz aKDbxutlFcEVaXKlW9PPISmBoR6biC6LoCpFlqcZ+6DE/7dPghtmNzmdCmpVEtVH 4r6kFzpXCZU= -----END CERTIFICATE-----Generated at Sun Jul 20 03:19:55 2025 by rpki-client