$ rpki-client -vvf rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/24A28E0C07B911F091752834C4F9AE02.roa File: 24A28E0C07B911F091752834C4F9AE02.roa (raw, json) Hash identifier: DxAfEgav23qNw9acbrJvstjPzIpBZbMgGcy+koP3ZBo= Subject key identifier: 27:62:09:7E:7F:50:E8:05:1C:55:0C:92:F6:FA:AF:BF:20:70:D7:69 Certificate issuer: /CN=A91626EF/serialNumber=347AFEB394C5697E9792214EF8CF56A59CA8E8BD Certificate serial: 0CD5 Authority key identifier: 34:7A:FE:B3:94:C5:69:7E:97:92:21:4E:F8:CF:56:A5:9C:A8:E8:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHr-s5TFaX6XkiFO-M9WpZyo6L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/24A28E0C07B911F091752834C4F9AE02.roa Signing time: Fri 31 Oct 2025 18:37:00 +0000 ROA not before: Fri 31 Oct 2025 18:37:00 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 139602 IP address blocks: 2001:df1:3480::/48 maxlen: 52 2400:a7a0::/32 maxlen: 32 2400:a7a0::/33 maxlen: 33 2400:a7a0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.crl rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHr-s5TFaX6XkiFO-M9WpZyo6L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626EF, serialNumber=347AFEB394C5697E9792214EF8CF56A59CA8E8BD Validity Not Before: Oct 31 18:37:00 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=690501cc-9d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b5:95:ff:2b:85:25:9a:97:f2:2b:b7:96:67: 5a:78:fe:07:c0:50:85:29:7a:0e:90:e5:b5:d4:38: 16:ff:91:ea:26:73:10:87:6f:65:90:0e:a8:f2:2e: 98:9c:5d:f1:d3:b2:6d:10:a2:9f:00:3b:75:d1:98: 08:bd:60:e9:43:4f:55:4b:e6:fa:22:98:8d:c9:15: 88:50:a1:f2:bf:69:bc:99:dc:86:e3:25:f6:41:9c: 89:96:56:7d:70:00:42:f4:d0:33:af:1c:78:3a:7b: cd:bb:f9:d9:6e:68:c8:f7:26:f9:55:04:4c:a2:a4: 22:f5:81:35:be:09:44:bb:66:31:b1:b8:f2:0a:48: f5:97:64:4a:79:7f:06:5c:9d:e6:6f:f2:99:76:a5: 15:b5:89:31:2e:ef:76:51:0c:c0:dc:33:83:62:05: 2a:b4:bc:0f:18:ab:af:99:79:e3:95:f0:0a:28:48: 51:da:32:52:66:c5:a2:a8:6f:2c:70:90:e7:0b:d9: 69:f4:7c:d4:ca:df:64:ba:d8:b0:2b:98:5c:b5:ae: 4e:99:52:76:23:f3:d5:7f:62:47:a4:3e:c0:a5:cc: f2:a0:1a:1c:57:99:08:57:e6:17:59:ad:4e:d3:dc: 61:12:fa:49:fd:07:4f:95:db:6f:1b:21:f4:3b:59: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:62:09:7E:7F:50:E8:05:1C:55:0C:92:F6:FA:AF:BF:20:70:D7:69 X509v3 Authority Key Identifier: keyid:34:7A:FE:B3:94:C5:69:7E:97:92:21:4E:F8:CF:56:A5:9C:A8:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHr-s5TFaX6XkiFO-M9WpZyo6L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/24A28E0C07B911F091752834C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:3480::/48 2400:a7a0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:23:a9:97:bd:54:c3:6a:8f:52:3a:94:ba:8c:84:95:20:19: 80:de:c7:a2:01:e4:ba:6d:68:40:af:16:05:c3:4d:18:d7:ec: 25:ce:68:b1:eb:66:d2:8f:c2:78:57:9a:d9:be:51:fe:a5:f0: 4c:08:ee:e5:84:df:5e:5c:f0:8f:3c:81:20:11:d1:7e:72:3c: 93:18:9c:e4:1f:46:03:87:1b:de:67:c0:ac:f5:7b:40:2a:c7: 3f:c6:19:80:9f:70:88:7a:05:ae:38:9a:aa:dc:41:d7:b7:6d: e2:b8:fa:97:65:89:9c:ec:48:5f:bc:2c:b4:66:28:55:f2:0e: 84:6a:ab:d1:9f:40:b1:d8:77:01:b8:16:e8:06:0f:fe:23:26: 10:f0:34:d4:cc:ee:b2:ff:74:f5:66:13:77:0b:cc:f8:26:dd: 8d:74:09:26:5f:ef:46:a3:10:47:6d:f8:97:97:29:95:65:a6: ea:e7:7c:57:c1:8d:e5:1e:bf:ab:cb:2f:60:f1:c5:83:bb:4a: 50:58:5e:fd:51:2b:30:83:96:64:a2:1e:47:66:2f:71:90:ff: 57:8b:18:65:77:17:7b:d7:22:7c:dc:36:3e:c0:6f:2f:53:1f: a8:d4:d3:2d:b4:76:a6:88:2e:36:45:87:2d:45:4f:01:23:e7: 24:aa:1a:bc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RUYxMTAvBgNVBAUTKDM0N0FGRUIzOTRDNTY5N0U5NzkyMjE0RUY4Q0Y1NkE1 OUNBOEU4QkQwHhcNMjUxMDMxMTgzNzAwWhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1MDFjYy05ZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57WV/yuFJZqX8iu3lmdaeP4HwFCFKXoOkOW11DgW/5HqJnMQh29lkA6o8i6Y nF3x07JtEKKfADt10ZgIvWDpQ09VS+b6IpiNyRWIUKHyv2m8mdyG4yX2QZyJllZ9 cABC9NAzrxx4OnvNu/nZbmjI9yb5VQRMoqQi9YE1vglEu2YxsbjyCkj1l2RKeX8G XJ3mb/KZdqUVtYkxLu92UQzA3DODYgUqtLwPGKuvmXnjlfAKKEhR2jJSZsWiqG8s cJDnC9lp9HzUyt9kutiwK5hcta5OmVJ2I/PVf2JHpD7ApczyoBocV5kIV+YXWa1O 09xhEvpJ/QdPldtvGyH0O1lsgQIDAQABo4ICnzCCApswHQYDVR0OBBYEFCdiCX5/ UOgFHFUMkvb6r78gcNdpMB8GA1UdIwQYMBaAFDR6/rOUxWl+l5IhTvjPVqWcqOi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZFRi85RDg2NzUxMEZG RDQxMUU5OTJEMDY1MThDNEY5QUUwMi9OSHItczVURmFYNlhraUZPLU05V3BaeW82 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Ici1zNVRGYVg2WGtpRk8tTTlXcFp5bzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjI2RUYvOUQ4Njc1MTBGRkQ0MTFFOTkyRDA2NTE4QzRGOUFFMDIvMjRBMjhFMEMw N0I5MTFGMDkxNzUyODM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E GjAYMBYEAgACMBADBwAgAQ3xNIADBQAkAKegMA0GCSqGSIb3DQEBCwUAA4IBAQBb I6mXvVTDao9SOpS6jISVIBmA3seiAeS6bWhArxYFw00Y1+wlzmix62bSj8J4V5rZ vlH+pfBMCO7lhN9eXPCPPIEgEdF+cjyTGJzkH0YDhxveZ8Cs9XtAKsc/xhmAn3CI egWuOJqq3EHXt23iuPqXZYmc7EhfvCy0ZihV8g6EaqvRn0Cx2HcBuBboBg/+IyYQ 8DTUzO6y/3T1ZhN3C8z4Jt2NdAkmX+9GoxBHbfiXlymVZabq53xXwY3lHr+ryy9g 8cWDu0pQWF79USswg5Zkoh5HZi9xkP9Xixhldxd71yJ83DY+wG8vUx+o1NMttHam iC42RYctRU8BI+ckqhq8 -----END CERTIFICATE-----Generated at Wed Nov 5 15:25:50 2025 by rpki-client