$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/624C3E865DB011F0875D570FC4F9AE02.roa File: 624C3E865DB011F0875D570FC4F9AE02.roa (raw, json) Hash identifier: zOKtwgFHpwRqlyTO9H77mqE2ho8WfMEhM/eJGA5uflI= Subject key identifier: DB:18:FA:F8:3C:8B:76:8B:E6:6A:D3:21:A9:35:E9:A9:DD:0F:15:72 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 0190 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/624C3E865DB011F0875D570FC4F9AE02.roa Signing time: Mon 03 Nov 2025 03:48:28 +0000 ROA not before: Mon 03 Nov 2025 03:48:28 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151964 IP address blocks: 2001:df3:940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Nov 3 03:48:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6908260c-5611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d8:06:da:02:e1:84:d2:75:62:44:30:f0:9a: a0:98:5e:60:df:bd:57:3e:63:bc:72:16:51:a5:02: a7:81:06:31:26:37:2e:dd:78:65:23:a7:69:ae:6c: 77:d9:c1:d3:fc:ea:17:2f:c2:94:cd:98:f3:cd:b1: c3:94:29:4d:a4:6e:a1:3f:23:1f:da:90:c5:df:f9: 53:39:80:ea:c2:3c:a0:d5:58:2b:94:b1:20:70:f8: c5:21:9c:06:d4:38:4e:3e:4f:a2:92:dd:d4:1e:b0: 4f:e2:9d:1a:96:67:57:64:1e:c5:fa:14:77:5a:39: 42:78:a0:4c:2b:a6:70:b7:ca:fb:a7:26:03:6b:a5: a4:62:64:80:68:07:dc:d7:84:8d:f2:ea:9d:d8:19: cf:55:ef:8c:d6:76:26:11:62:25:92:85:a4:50:f3: 40:1e:eb:00:26:ce:ae:8f:d0:b1:17:de:93:39:e5: c1:0a:6e:72:14:b2:c3:62:f5:47:a9:d6:8f:6a:16: a4:28:ee:ce:cb:14:1b:b3:0a:a4:39:1a:a4:02:08: 87:f5:97:1a:8c:87:6a:41:6d:c1:8e:e5:59:0c:f9: 7c:c6:f8:1f:61:ff:92:74:b5:9b:cc:06:a0:c3:49: 60:b3:00:55:3f:5c:41:f0:af:60:d5:97:ee:da:fa: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:18:FA:F8:3C:8B:76:8B:E6:6A:D3:21:A9:35:E9:A9:DD:0F:15:72 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/624C3E865DB011F0875D570FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:940::/48 Signature Algorithm: sha256WithRSAEncryption 2c:11:74:4b:f4:ba:ca:cc:16:1e:ec:e0:59:00:c7:65:45:f5: 86:b4:ef:da:7d:b2:5a:19:db:68:d0:5e:e8:bb:68:75:87:56: 4d:57:c2:1c:2a:06:01:0c:d3:98:49:c3:ff:05:d1:e1:d2:e4: ea:0d:a7:76:e9:73:7f:e7:01:0d:0b:f6:a3:8c:8e:c8:50:1c: f8:39:2e:e9:d6:ba:75:1b:73:00:17:10:a9:b7:71:85:1b:b1: b5:95:06:4b:e7:18:18:7c:93:85:02:35:51:f3:4a:b9:56:6a: c0:c1:ea:1e:97:02:8f:88:f0:37:68:87:3b:cc:d7:bd:e4:e2: 07:c9:1a:87:2a:e1:e4:f0:07:b7:d1:3a:83:bf:5f:24:8b:c9: 00:a0:8c:ff:be:ce:cf:1c:ac:b4:37:b5:4f:70:59:f6:0a:47: 76:94:86:98:b6:cc:f2:f1:a8:84:ee:c4:ef:3d:e8:0f:cd:65: c7:2e:a3:33:12:e9:42:14:d7:3d:a2:e6:d2:03:1f:23:32:eb: 0e:ef:d2:81:be:09:5c:e8:d4:31:6c:be:04:ed:fe:14:46:fc: f3:44:e1:e1:fa:b9:44:b2:94:cb:cc:c1:e8:f0:2b:93:f9:fe: da:11:7f:73:5f:42:85:d9:b7:9c:e2:0f:9e:f1:af:43:e4:15: 4c:c1:ba:4b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjUxMTAzMDM0ODI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MjYwYy01NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA99gG2gLhhNJ1YkQw8JqgmF5g371XPmO8chZRpQKngQYxJjcu3XhlI6dprmx3 2cHT/OoXL8KUzZjzzbHDlClNpG6hPyMf2pDF3/lTOYDqwjyg1VgrlLEgcPjFIZwG 1DhOPk+ikt3UHrBP4p0almdXZB7F+hR3WjlCeKBMK6Zwt8r7pyYDa6WkYmSAaAfc 14SN8uqd2BnPVe+M1nYmEWIlkoWkUPNAHusAJs6uj9CxF96TOeXBCm5yFLLDYvVH qdaPahakKO7OyxQbswqkORqkAgiH9ZcajIdqQW3BjuVZDPl8xvgfYf+SdLWbzAag w0lgswBVP1xB8K9g1Zfu2vp3BQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNsY+vg8 i3aL5mrTIak16andDxVyMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk3QTIvQjNERkM4ODQ2RDYyMTFFRUIzMDdDRTE5QzRGOUFFMDIvNjI0QzNFODY1 REIwMTFGMDg3NUQ1NzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zCUAwDQYJKoZIhvcNAQELBQADggEBACwRdEv0usrM Fh7s4FkAx2VF9Ya079p9sloZ22jQXui7aHWHVk1XwhwqBgEM05hJw/8F0eHS5OoN p3bpc3/nAQ0L9qOMjshQHPg5LunWunUbcwAXEKm3cYUbsbWVBkvnGBh8k4UCNVHz SrlWasDB6h6XAo+I8DdohzvM173k4gfJGocq4eTwB7fROoO/XySLyQCgjP++zs8c rLQ3tU9wWfYKR3aUhpi2zPLxqITuxO896A/NZccuozMS6UIU1z2i5tIDHyMy6w7v 0oG+CVzo1DFsvgTt/hRG/PNE4eH6uUSylMvMwejwK5P5/toRf3NfQoXZt5ziD57x r0PkFUzBuks= -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:52 2025 by rpki-client