$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/CC3A648A63DC11F091FF8475C4F9AE02.roa File: CC3A648A63DC11F091FF8475C4F9AE02.roa (raw, json) Hash identifier: N8pXBxU77s5OeTisROwOwBMr1yrLhMb3EuCrxnXHEDw= Subject key identifier: A6:23:10:7F:27:96:AD:72:F8:D1:70:E7:11:E7:A3:D7:11:F5:45:DE Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0C62 Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/CC3A648A63DC11F091FF8475C4F9AE02.roa Signing time: Fri 18 Jul 2025 13:40:42 +0000 ROA not before: Fri 18 Jul 2025 13:40:42 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 64966 IP address blocks: 2400:9940:121d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: Jul 18 13:40:42 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=687a4eda-715a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:16:25:1c:6f:b8:cd:84:77:5a:d7:ae:22:f5: 2e:7a:c2:3f:08:c4:42:1e:29:45:67:87:17:d1:88: ee:ef:53:95:ca:35:21:45:bc:01:7f:61:ae:7c:14: 52:33:a5:6a:cd:71:b9:ba:c8:02:1a:ba:4a:71:aa: b9:b5:08:49:ba:89:f0:91:6b:92:51:a2:e7:34:b9: bd:d7:02:9c:e6:0d:e9:9f:81:02:ed:60:e1:a6:1c: 77:3b:c9:88:f8:4b:08:a7:a2:3a:dd:64:39:1b:bf: 03:83:68:bc:fd:f5:8d:8e:aa:1f:cd:e3:7a:c0:de: d6:73:39:71:65:f0:91:b5:74:9a:30:85:36:47:89: 0a:5e:45:7a:db:e7:f4:ef:ea:54:a7:30:f7:ca:bc: 20:a5:8c:63:5a:fb:6a:5c:67:59:e2:64:06:5e:dd: d8:a0:e4:82:ca:e4:2b:83:d2:83:ed:aa:e9:a2:c2: 8d:8d:6c:79:29:f9:04:51:70:a4:b4:24:2b:5c:d0: 9c:fb:b2:43:c9:d3:24:bd:48:3a:fc:f1:99:a7:f9: 9a:2c:6f:49:6c:fd:9a:7d:0c:42:20:6e:ea:0c:6e: 92:20:79:7c:a5:b3:5e:61:16:56:bc:0c:1d:53:89: b0:df:3f:bb:66:09:3e:83:36:a4:00:73:2e:ce:47: c4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:23:10:7F:27:96:AD:72:F8:D1:70:E7:11:E7:A3:D7:11:F5:45:DE X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/CC3A648A63DC11F091FF8475C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:9940:121d::/48 Signature Algorithm: sha256WithRSAEncryption 73:98:7e:38:3f:c6:cf:43:ee:28:d6:78:f9:97:e6:b7:ea:c1: 9c:1c:e6:99:48:8e:61:ff:2c:05:db:42:fc:56:c9:85:ab:28: f4:c0:2c:bd:d4:5f:1a:8b:7b:16:57:0b:25:30:61:20:f1:fb: 8b:10:3f:f7:61:6e:79:57:6b:dd:f1:85:84:6e:fe:58:eb:8e: 51:e5:5e:49:22:9f:9a:77:d2:e5:6b:24:27:df:e4:1a:9a:12: 4e:09:1f:47:48:c8:91:dc:b3:14:f3:5f:48:67:da:33:41:57: 55:ee:53:6e:db:92:f3:2b:06:28:fe:10:7e:a3:44:10:0e:24: 6c:2c:36:c3:88:79:df:92:3f:42:22:af:22:6e:34:f9:e2:0a: 1d:95:de:fb:bf:8d:c3:32:2a:d9:1e:c9:50:09:b5:c6:1f:2a: 68:90:d2:40:4c:e6:31:77:d4:45:cf:52:82:ce:f9:ef:15:bf: df:99:29:43:cb:1f:11:0f:48:7e:ed:ef:c1:82:20:18:cd:11: 1c:d9:7b:8c:3c:90:6a:54:b9:50:2b:10:73:15:36:bd:e5:40: c0:ff:4a:5c:07:8e:3f:ec:ba:ff:a6:77:e9:53:48:e4:e2:90: 9d:45:af:48:4a:67:44:9c:9a:1a:d8:f2:d7:a1:c5:40:1d:8e: 95:78:59:8b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjUwNzE4MTM0MDQyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdhNGVkYS03MTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BYlHG+4zYR3WteuIvUuesI/CMRCHilFZ4cX0Yju71OVyjUhRbwBf2GufBRS M6VqzXG5usgCGrpKcaq5tQhJuonwkWuSUaLnNLm91wKc5g3pn4EC7WDhphx3O8mI +EsIp6I63WQ5G78Dg2i8/fWNjqofzeN6wN7WczlxZfCRtXSaMIU2R4kKXkV62+f0 7+pUpzD3yrwgpYxjWvtqXGdZ4mQGXt3YoOSCyuQrg9KD7arposKNjWx5KfkEUXCk tCQrXNCc+7JDydMkvUg6/PGZp/maLG9JbP2afQxCIG7qDG6SIHl8pbNeYRZWvAwd U4mw3z+7Zgk+gzakAHMuzkfE+wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKYjEH8n lq1y+NFw5xHno9cR9UXeMB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ0NjMvQTRENDQwMEMxMzlGMTFFQUE2NTgyODYwQzRGOUFFMDIvQ0MzQTY0OEE2 M0RDMTFGMDkxRkY4NDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAJlAEh0wDQYJKoZIhvcNAQELBQADggEBAHOYfjg/xs9D 7ijWePmX5rfqwZwc5plIjmH/LAXbQvxWyYWrKPTALL3UXxqLexZXCyUwYSDx+4sQ P/dhbnlXa93xhYRu/ljrjlHlXkkin5p30uVrJCff5BqaEk4JH0dIyJHcsxTzX0hn 2jNBV1XuU27bkvMrBij+EH6jRBAOJGwsNsOIed+SP0IiryJuNPniCh2V3vu/jcMy KtkeyVAJtcYfKmiQ0kBM5jF31EXPUoLO+e8Vv9+ZKUPLHxEPSH7t78GCIBjNERzZ e4w8kGpUuVArEHMVNr3lQMD/SlwHjj/suv+md+lTSOTikJ1Fr0hKZ0ScmhrY8teh xUAdjpV4WYs= -----END CERTIFICATE-----Generated at Sun Jul 20 18:55:53 2025 by rpki-client