$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/06FA5A64774011F0BE2D3736C4F9AE02.roa File: 06FA5A64774011F0BE2D3736C4F9AE02.roa (raw, json) Hash identifier: kpBK3OXshYOskuLSoO3uUhN6W4dairHEsqEKAKksIS4= Subject key identifier: 7A:F8:16:72:FE:C8:23:75:37:84:15:88:69:51:77:27:96:5F:07:C0 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 03CF Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/06FA5A64774011F0BE2D3736C4F9AE02.roa Signing time: Tue 12 Aug 2025 05:48:53 +0000 ROA not before: Tue 12 Aug 2025 05:48:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 64.25.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Aug 12 05:48:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=689ad5c4-b8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:2c:34:39:fb:b8:8e:34:b4:9e:ac:e0:1f: 47:98:37:11:38:94:62:3a:1d:ce:83:2d:1d:cd:98: 0b:b3:2e:e1:70:9c:11:06:d9:b1:d5:e0:fd:97:91: fb:1b:06:3a:3d:1e:52:35:2a:18:55:68:24:07:bd: fb:98:30:f5:5a:f9:4b:a6:5a:39:8d:1c:e5:5c:60: 1c:e0:48:76:52:47:54:e3:7c:f5:b4:6f:dc:95:e8: 54:da:e0:94:32:bd:ce:43:04:d3:65:c8:a4:d0:c4: cc:6b:b5:fe:1c:d8:be:a1:a0:92:3e:2d:5a:7f:af: bb:85:f3:7a:a5:bb:ea:18:25:6d:36:c2:17:ab:5a: 3d:66:91:82:79:5e:95:2a:80:dc:39:31:d1:7d:79: 87:10:d2:0c:ff:78:b8:c3:b8:6c:74:63:0d:6f:d8: ed:20:6f:d7:d0:94:ba:58:9e:3b:48:e8:f8:01:b6: e5:16:23:e0:53:8a:8b:0c:a7:9b:8b:e0:4f:d5:07: 53:bf:48:3b:72:15:05:e2:4d:6a:56:10:03:96:13: 50:21:83:ca:3b:85:47:77:7e:59:02:f5:eb:9b:66: 49:56:f5:71:62:56:55:b3:68:7e:b2:00:2f:83:66: 05:39:85:e8:51:54:f0:81:92:5e:72:c6:b5:54:0f: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F8:16:72:FE:C8:23:75:37:84:15:88:69:51:77:27:96:5F:07:C0 X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/06FA5A64774011F0BE2D3736C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.25.42.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:39:53:bc:13:0e:5b:4d:2f:c9:2e:19:2c:80:8b:8a:4e:fb: e7:c2:bb:0b:5d:a0:71:97:2f:29:03:22:03:6e:9e:94:e7:cd: b8:d7:9e:bb:d5:d5:87:9b:89:ed:fe:76:9b:e8:6f:88:1c:1c: f2:4c:42:6c:c2:42:4f:c3:ec:e1:85:5b:9a:22:7a:1e:85:63: 3d:eb:b0:a7:97:e0:e6:cb:b2:cf:ef:8e:bd:cb:4b:a7:e9:5a: c1:9f:84:f0:80:1e:82:3e:27:69:02:b6:dc:e7:01:8c:3b:0e: 97:79:48:70:55:f1:01:cb:26:63:c3:4f:1e:91:7d:e8:54:6d: aa:79:71:63:63:7b:0d:5e:fe:30:64:cc:3e:68:21:87:ed:7a: f9:33:59:26:98:ad:71:d7:02:7c:51:b9:c7:df:29:5a:73:eb: a8:51:02:e7:b2:26:18:06:f6:60:03:07:24:54:d6:77:5c:92: 9d:b9:c8:45:04:54:1d:53:cf:d8:26:e4:e6:a9:97:9c:8b:9a: dc:33:8a:0a:d9:70:6f:8a:79:08:34:67:2e:8a:18:b7:9e:5c: 8e:08:eb:2c:56:e0:13:2d:2d:07:32:92:b6:0e:4f:f0:fa:08: db:b6:86:03:04:2e:ba:c4:88:83:ff:34:c7:1d:8d:61:67:9f: f6:b2:fb:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjUwODEyMDU0ODUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODlhZDVjNC1iOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRssNDn7uI40tJ6s4B9HmDcROJRiOh3Ogy0dzZgLsy7hcJwRBtmx1eD9l5H7 GwY6PR5SNSoYVWgkB737mDD1WvlLplo5jRzlXGAc4Eh2UkdU43z1tG/clehU2uCU Mr3OQwTTZcik0MTMa7X+HNi+oaCSPi1af6+7hfN6pbvqGCVtNsIXq1o9ZpGCeV6V KoDcOTHRfXmHENIM/3i4w7hsdGMNb9jtIG/X0JS6WJ47SOj4AbblFiPgU4qLDKeb i+BP1QdTv0g7chUF4k1qVhADlhNQIYPKO4VHd35ZAvXrm2ZJVvVxYlZVs2h+sgAv g2YFOYXoUVTwgZJecsa1VA//2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHr4FnL+ yCN1N4QViGlRdyeWXwfAMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQyQzUvMUY0MDRFMzBBNEU5MTFFQ0FGM0ZCMTUyQzRGOUFFMDIvMDZGQTVBNjQ3 NzQwMTFGMEJFMkQzNzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFAGSowDQYJKoZIhvcNAQELBQADggEBAI45U7wTDltNL8ku GSyAi4pO++fCuwtdoHGXLykDIgNunpTnzbjXnrvV1Yebie3+dpvob4gcHPJMQmzC Qk/D7OGFW5oieh6FYz3rsKeX4ObLss/vjr3LS6fpWsGfhPCAHoI+J2kCttznAYw7 Dpd5SHBV8QHLJmPDTx6RfehUbap5cWNjew1e/jBkzD5oIYftevkzWSaYrXHXAnxR ucffKVpz66hRAueyJhgG9mADByRU1ndckp25yEUEVB1Tz9gm5Oapl5yLmtwzigrZ cG+KeQg0Zy6KGLeeXI4I6yxW4BMtLQcykrYOT/D6CNu2hgMELrrEiIP/NMcdjWFn n/ay+zk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:48:28 2025 by rpki-client