$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/3503A838EA9911EDA6A36E18C4F9AE02.roa File: 3503A838EA9911EDA6A36E18C4F9AE02.roa (raw, json) Hash identifier: hoEdWJgd+iSbkEJxwwEB2OfxtCPHdbL8GJWAjTC4NaI= Subject key identifier: 7B:4C:C5:A4:B1:D4:C2:6E:26:93:B5:74:22:76:FC:33:BE:C1:33:A2 Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 3094 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/3503A838EA9911EDA6A36E18C4F9AE02.roa Signing time: Wed 30 Apr 2025 15:52:46 +0000 ROA not before: Wed 30 Apr 2025 15:52:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139309 IP address blocks: 2405:2000:901::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12436 (0x3094) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Apr 30 15:52:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812474d-48eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:92:d5:80:3e:e6:72:64:ba:84:5b:f9:90: f9:31:94:43:06:64:d4:f8:c7:47:ea:f8:e0:ac:44: 39:01:0d:c1:ee:7f:9f:69:90:ac:46:51:c0:73:18: 6b:68:4a:99:51:aa:28:10:d0:7a:95:42:ae:d0:2e: 97:88:1a:03:e2:e3:6f:94:eb:3d:49:a8:e8:f6:af: 00:da:4e:d2:a2:95:f7:19:38:6e:eb:07:60:92:11: c6:7e:56:e7:0c:53:f8:2c:57:d8:81:75:d6:0c:05: ab:ed:46:a0:57:c9:47:8a:b2:bd:c4:1f:6b:1c:c1: 4f:0e:15:f2:ad:df:d0:1c:0e:31:14:cf:59:96:34: 36:cc:f3:a6:cd:80:b2:2c:20:05:a3:e4:3b:b4:a7: 03:27:2f:87:70:b4:45:a6:9c:d0:aa:7c:0d:ac:20: f3:93:a9:b0:e6:fb:51:c6:64:ee:5f:1f:f6:69:6b: 5c:a3:e9:2e:0a:c8:e7:03:f0:d5:99:dd:17:c2:1e: 4b:22:76:5f:09:2d:24:4c:3e:a1:e0:ce:55:1e:0e: 97:41:25:f5:f8:41:ee:13:0c:29:c7:27:ef:c1:bd: 4c:a5:7f:29:77:c3:ad:a7:d4:88:b3:6c:05:58:e6: 3e:0f:63:a4:ba:5b:58:9e:56:06:a6:2f:26:12:56: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4C:C5:A4:B1:D4:C2:6E:26:93:B5:74:22:76:FC:33:BE:C1:33:A2 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/3503A838EA9911EDA6A36E18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:2000:901::/48 Signature Algorithm: sha256WithRSAEncryption 94:13:54:51:fe:f4:19:73:a9:ec:42:0d:77:74:a5:45:f8:dd: 4e:73:df:eb:0e:75:05:d5:ab:1f:01:83:92:fc:4b:4d:39:79: c9:78:c1:19:6e:5b:83:91:ad:90:b2:c9:04:33:cb:70:76:66: 48:dc:21:82:0e:f2:58:56:ba:06:34:3c:10:9e:eb:b0:f4:af: af:4a:c6:f2:02:bd:f9:92:a8:fc:98:7f:45:04:63:87:60:57: 88:6a:61:ea:33:c7:3f:c7:19:cc:d8:4d:c8:98:55:86:7f:17: db:42:c8:7b:fb:04:b5:4d:23:b1:5d:7c:7b:20:9c:75:8c:d4: 5b:5f:1c:0f:a1:b1:18:d8:55:61:d8:17:29:e6:4d:d6:51:3a: ca:44:16:53:2e:ed:96:85:84:96:f4:b4:44:fe:1a:ff:d3:16: d0:85:2c:ec:40:b9:3f:36:5d:ab:74:ff:b3:95:cc:c9:9e:83: 25:3f:0d:04:64:f0:a9:15:17:89:2a:c2:3b:22:e8:c3:1b:6e: a6:1a:e6:89:4e:0d:30:c6:a2:a5:38:42:2e:c0:72:e6:43:91: 7e:05:61:56:19:f7:1e:b3:fa:34:bf:4b:e5:15:2b:89:d5:84: 3a:5d:1a:5f:c6:3a:bf:07:56:de:7d:35:1e:a7:5c:13:51:78: b2:b1:b3:a2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICMJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUwNDMwMTU1MjQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNDc0ZC00OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fqS1YA+5nJkuoRb+ZD5MZRDBmTU+MdH6vjgrEQ5AQ3B7n+faZCsRlHAcxhr aEqZUaooENB6lUKu0C6XiBoD4uNvlOs9Sajo9q8A2k7SopX3GThu6wdgkhHGflbn DFP4LFfYgXXWDAWr7UagV8lHirK9xB9rHMFPDhXyrd/QHA4xFM9ZljQ2zPOmzYCy LCAFo+Q7tKcDJy+HcLRFppzQqnwNrCDzk6mw5vtRxmTuXx/2aWtco+kuCsjnA/DV md0Xwh5LInZfCS0kTD6h4M5VHg6XQSX1+EHuEwwpxyfvwb1MpX8pd8Otp9SIs2wF WOY+D2OkultYnlYGpi8mEla6HwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHtMxaSx 1MJuJpO1dCJ2/DO+wTOiMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU1QzgvOUNEM0U4RjZGRjU4MTFFMkJCNEIyRTNGNTkxMUVBMzIvMzUwM0E4MzhF QTk5MTFFREE2QTM2RTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBSAACQEwDQYJKoZIhvcNAQELBQADggEBAJQTVFH+9Blz qexCDXd0pUX43U5z3+sOdQXVqx8Bg5L8S005ecl4wRluW4ORrZCyyQQzy3B2Zkjc IYIO8lhWugY0PBCe67D0r69KxvICvfmSqPyYf0UEY4dgV4hqYeozxz/HGczYTciY VYZ/F9tCyHv7BLVNI7FdfHsgnHWM1FtfHA+hsRjYVWHYFynmTdZROspEFlMu7ZaF hJb0tET+Gv/TFtCFLOxAuT82Xat0/7OVzMmegyU/DQRk8KkVF4kqwjsi6MMbbqYa 5olODTDGoqU4Qi7AcuZDkX4FYVYZ9x6z+jS/S+UVK4nVhDpdGl/GOr8HVt59NR6n XBNReLKxs6I= -----END CERTIFICATE-----Generated at Fri Oct 24 12:57:53 2025 by rpki-client