$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/974ADC40B6FD11F0BEBA196FC4F9AE02.roa File: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (raw, json) Hash identifier: dFlHoiKovBe7XL6W2rjfYVHX4DwruLCG9HZsmrV1dcw= Subject key identifier: 52:B7:51:A6:4A:F8:9F:F7:74:A1:99:41:9D:3A:4E:5A:59:7F:59:30 Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: C6 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/974ADC40B6FD11F0BEBA196FC4F9AE02.roa Signing time: Sat 01 Nov 2025 08:34:33 +0000 ROA not before: Sat 01 Nov 2025 08:34:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153786 IP address blocks: 2401:e920:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Nov 1 08:34:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6905c619-14ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:19:7d:5f:3b:21:d3:e2:d3:e4:d0:05:a1: 9e:df:f3:3f:9f:2c:f3:a8:65:08:7e:c9:3a:40:cf: f3:89:d2:84:84:66:92:90:38:a8:71:60:1c:a1:21: 15:83:16:a1:74:b7:6c:39:03:f2:bb:c7:d6:75:61: f4:1d:a6:68:6d:3f:26:61:03:83:61:a6:dc:83:74: 53:3e:67:35:48:0b:1a:5f:8a:56:9b:9b:4b:ec:bf: fe:a5:5a:1a:f5:07:2d:94:41:3b:59:76:4c:b9:96: cc:bb:56:f0:00:e7:82:e7:85:ec:d6:7a:8f:0d:5f: f5:02:14:52:bf:9c:8c:9a:d0:30:bd:1c:49:7c:a0: 06:6f:b9:4a:f0:bb:9f:29:b8:34:2d:aa:b2:4d:96: ff:77:18:93:d1:71:c9:76:01:4c:01:49:d9:d0:2c: 1f:b8:a1:f0:4d:39:03:b9:52:62:8a:32:5c:d4:bb: f5:f3:78:59:ec:28:35:48:82:9e:32:d9:e6:9b:ca: 54:73:cf:b7:0e:bc:08:1f:b9:ce:08:fe:b0:5f:45: e9:c3:67:b4:d7:83:04:dc:72:9e:b5:b7:b5:5f:f9: 65:da:49:10:b3:96:35:36:97:ad:48:b7:3c:38:ed: 7e:d6:01:cb:c6:91:49:71:b9:22:8b:79:80:d8:ee: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B7:51:A6:4A:F8:9F:F7:74:A1:99:41:9D:3A:4E:5A:59:7F:59:30 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/974ADC40B6FD11F0BEBA196FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:e920:8800::/48 Signature Algorithm: sha256WithRSAEncryption 8c:d5:29:2b:0c:15:7d:c2:1a:e4:88:a4:28:d9:ff:61:1c:c2: 80:bd:b2:96:9d:90:9d:a1:59:f5:18:61:74:d6:99:3b:4a:be: ae:11:65:1b:42:3c:a2:5e:ce:31:f0:cd:e7:e8:db:b9:8f:b4: a9:3b:6e:a5:92:86:9a:da:36:f3:bb:b1:76:ea:a1:1a:70:60: 0b:17:b2:dd:b6:7d:4a:34:39:b7:04:cd:f3:ed:37:3f:e7:18: 05:12:e8:61:4a:fc:f0:b6:e8:59:3a:dd:1e:b1:8a:d0:7b:98: a3:77:b8:2f:11:7f:96:07:af:6a:60:94:b5:eb:26:34:21:00: 09:16:35:53:18:0f:fd:a2:b6:28:4f:22:44:90:b6:55:42:98: 93:e8:59:70:60:11:05:71:1e:36:40:9e:db:32:e4:0d:aa:78: ea:b6:3b:e7:e2:37:fc:a7:fc:e4:a8:21:24:9b:be:ab:7f:6f: ef:56:a0:41:15:90:e1:52:29:99:02:56:85:e1:b3:95:0e:de: 11:8c:25:54:2d:5e:10:3e:8b:7f:22:78:df:53:19:d0:44:80: c3:88:d2:dd:fe:d3:c8:a0:d2:c8:8e:79:b1:6f:bf:8a:f9:b2: 0e:72:3d:6c:67:20:69:80:be:b6:2b:a8:05:d5:23:83:92:5f: 7a:eb:4a:7a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjUxMTAxMDgzNDMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1YzYxOS0xNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveIZfV87IdPi0+TQBaGe3/M/nyzzqGUIfsk6QM/zidKEhGaSkDiocWAcoSEV gxahdLdsOQPyu8fWdWH0HaZobT8mYQODYabcg3RTPmc1SAsaX4pWm5tL7L/+pVoa 9QctlEE7WXZMuZbMu1bwAOeC54Xs1nqPDV/1AhRSv5yMmtAwvRxJfKAGb7lK8Luf Kbg0LaqyTZb/dxiT0XHJdgFMAUnZ0CwfuKHwTTkDuVJiijJc1Lv183hZ7Cg1SIKe Mtnmm8pUc8+3DrwIH7nOCP6wX0Xpw2e014ME3HKetbe1X/ll2kkQs5Y1NpetSLc8 OO1+1gHLxpFJcbkii3mA2O75HwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFK3UaZK +J/3dKGZQZ06TlpZf1kwMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg1RTkvQzkyODA0M0FEMTc2MTFFRjk1QzVERTVBQzRGOUFFMDIvOTc0QURDNDBC NkZEMTFGMEJFQkExOTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAekgiAAwDQYJKoZIhvcNAQELBQADggEBAIzVKSsMFX3C GuSIpCjZ/2EcwoC9spadkJ2hWfUYYXTWmTtKvq4RZRtCPKJezjHwzefo27mPtKk7 bqWShpraNvO7sXbqoRpwYAsXst22fUo0ObcEzfPtNz/nGAUS6GFK/PC26Fk63R6x itB7mKN3uC8Rf5YHr2pglLXrJjQhAAkWNVMYD/2itihPIkSQtlVCmJPoWXBgEQVx HjZAntsy5A2qeOq2O+fiN/yn/OSoISSbvqt/b+9WoEEVkOFSKZkCVoXhs5UO3hGM JVQtXhA+i38ieN9TGdBEgMOI0t3+08ig0siOebFvv4r5sg5yPWxnIGmAvrYrqAXV I4OSX3rrSno= -----END CERTIFICATE-----Generated at Tue Nov 4 20:35:53 2025 by rpki-client