$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/39D4D290CB8311E88E74AD83C4F9AE02.roa File: 39D4D290CB8311E88E74AD83C4F9AE02.roa (raw, json) Hash identifier: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E= Subject key identifier: B6:23:D5:8F:11:95:54:01:99:DB:36:63:B9:4E:E2:1B:63:DF:3D:21 Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Certificate serial: 149B Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/39D4D290CB8311E88E74AD83C4F9AE02.roa Signing time: Tue 08 Jul 2025 17:25:33 +0000 ROA not before: Tue 08 Jul 2025 17:25:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 23779 IP address blocks: 2402:af40::/32 maxlen: 38 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5275 (0x149b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Validity Not Before: Jul 8 17:25:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686d548c-da72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:06:1a:71:97:fe:54:77:06:cc:ba:34:90: c6:72:3f:f7:3e:fa:2c:e1:79:40:ed:30:b3:b3:84: 7d:c7:f1:ea:96:b7:9d:59:41:d1:2d:3f:a7:f7:d4: 91:da:9c:af:c4:7d:db:eb:63:d9:17:1c:7f:c2:1d: 12:c5:e2:c9:0e:ae:ca:01:66:61:b2:0a:8c:8d:68: 6d:c3:5b:09:f7:2a:fd:27:64:48:b9:de:34:d3:db: 0e:ce:f1:6c:ae:ae:1d:5f:ce:57:8c:36:c9:51:a8: a1:da:af:8e:66:6f:41:b2:7c:e6:1e:27:10:82:e3: 1f:15:9a:d2:c0:f6:b4:4d:12:6b:95:87:a6:1f:33: 66:9a:3f:82:e0:a5:55:70:c2:13:90:cd:28:6c:71: ac:ad:bb:14:49:38:ea:ab:9e:de:b9:7f:bf:86:7f: 44:3c:ec:cd:06:7a:44:02:70:4b:88:df:4b:4e:f0: 6c:20:09:34:ee:86:22:93:76:e7:37:95:9f:e0:a8: 02:79:03:de:8c:08:17:19:1a:fc:79:c0:79:bf:08: 96:d4:85:8c:91:68:5f:e7:c3:8d:bd:0a:03:6b:ab: 15:05:58:66:34:1f:3d:80:f6:f0:d6:b0:e8:82:30: f1:ba:d3:90:ea:38:0a:72:d6:e4:02:51:53:9c:b7: f1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:23:D5:8F:11:95:54:01:99:DB:36:63:B9:4E:E2:1B:63:DF:3D:21 X509v3 Authority Key Identifier: keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/39D4D290CB8311E88E74AD83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:af40::/32 Signature Algorithm: sha256WithRSAEncryption 55:1b:16:75:91:75:b3:a1:19:4b:98:a6:5b:89:42:d2:57:d4: 98:11:04:07:09:98:7f:53:d2:a0:35:40:96:0c:3e:bb:eb:0a: bb:bc:b0:b8:e3:de:78:6e:73:b5:16:a2:c5:28:89:36:84:ce: 3e:1f:ad:f9:b3:ca:51:11:d9:ef:a4:e6:8e:10:73:81:11:de: b9:91:63:44:2c:22:3f:51:52:ef:bd:be:45:ae:e1:dd:5b:2e: b0:10:12:60:2b:14:15:f7:4c:56:ea:ac:1b:bd:95:44:c7:ea: c6:92:d5:62:81:e4:b1:a4:de:cd:d6:8e:27:cb:4d:24:89:81: 1e:b5:09:0f:b0:2f:91:31:f1:56:41:d1:59:dc:e7:66:b8:23: 9a:30:e4:df:01:d9:67:56:c8:b7:2b:dd:1e:73:72:0b:5b:d6: ec:cb:75:14:12:bb:d5:de:72:fc:ba:6a:d7:ca:61:90:e4:be: 5f:c5:87:44:29:01:0a:b4:11:1f:1c:72:c9:55:4b:8a:1c:bf: af:0b:b5:35:6b:2b:5e:ef:59:a3:1b:ff:30:b5:ca:7e:a8:94: c7:d0:77:ed:15:ee:60:4d:11:4a:1d:91:2d:86:45:12:b4:47: 27:7e:cf:c4:bd:ba:f9:f9:c5:00:30:0c:14:9e:1a:42:bd:95: cd:eb:7f:a8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICFJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE OUU0MTlCNEYwHhcNMjUwNzA4MTcyNTMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkNTQ4Yy1kYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssAGGnGX/lR3Bsy6NJDGcj/3Pvos4XlA7TCzs4R9x/HqlredWUHRLT+n99SR 2pyvxH3b62PZFxx/wh0SxeLJDq7KAWZhsgqMjWhtw1sJ9yr9J2RIud4009sOzvFs rq4dX85XjDbJUaih2q+OZm9BsnzmHicQguMfFZrSwPa0TRJrlYemHzNmmj+C4KVV cMITkM0obHGsrbsUSTjqq57euX+/hn9EPOzNBnpEAnBLiN9LTvBsIAk07oYik3bn N5Wf4KgCeQPejAgXGRr8ecB5vwiW1IWMkWhf58ONvQoDa6sVBVhmNB89gPbw1rDo gjDxutOQ6jgKctbkAlFTnLfxIQIDAQABo4ICljCCApIwHQYDVR0OBBYEFLYj1Y8R lVQBmds2Y7lO4htj3z0hMB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ2QjEvRjkwRDk0NzY2Nzk3MTFFOEE3ODkxQzQ4QzRGOUFFMDIvMzlENEQyOTBD QjgzMTFFODhFNzRBRDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAq9AMA0GCSqGSIb3DQEBCwUAA4IBAQBVGxZ1kXWzoRlL mKZbiULSV9SYEQQHCZh/U9KgNUCWDD676wq7vLC44954bnO1FqLFKIk2hM4+H635 s8pREdnvpOaOEHOBEd65kWNELCI/UVLvvb5FruHdWy6wEBJgKxQV90xW6qwbvZVE x+rGktVigeSxpN7N1o4ny00kiYEetQkPsC+RMfFWQdFZ3OdmuCOaMOTfAdlnVsi3 K90ec3ILW9bsy3UUErvV3nL8umrXymGQ5L5fxYdEKQEKtBEfHHLJVUuKHL+vC7U1 ayte71mjG/8wtcp+qJTH0HftFe5gTRFKHZEthkUStEcnfs/Evbr5+cUAMAwUnhpC vZXN63+o -----END CERTIFICATE-----Generated at Sun Jul 20 06:57:55 2025 by rpki-client