$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E1870478616C11F0A254E10BC4F9AE02.roa File: E1870478616C11F0A254E10BC4F9AE02.roa (raw, json) Hash identifier: PUky37fAI8Ys1qLflElYkqRy1kwJKllU0o6ewDp0S2M= Subject key identifier: 7F:80:03:62:1D:91:01:F9:EA:60:A6:37:E9:21:93:ED:94:24:9C:41 Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Certificate serial: 0290 Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E1870478616C11F0A254E10BC4F9AE02.roa Signing time: Sat 09 Aug 2025 02:39:38 +0000 ROA not before: Sat 09 Aug 2025 02:39:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45691 IP address blocks: 2001:df1:bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Validity Not Before: Aug 9 02:39:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6896b4ea-5689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:aa:13:9a:d1:b4:1c:c3:27:7f:ba:39:a6:e8: 23:68:18:f6:0c:0a:d8:ac:60:dc:7c:03:bf:67:b9: 01:85:91:96:a4:20:26:70:6f:cf:25:ff:35:09:ef: 31:fc:90:21:70:3d:c2:a9:86:72:b4:69:5b:9d:eb: b5:a3:73:57:ef:0a:3e:5e:47:ab:1c:34:cb:3e:15: 7c:be:dc:51:67:ef:d6:75:39:05:4e:67:94:01:94: 34:17:e7:e6:91:09:ea:4c:e6:cd:88:c3:25:01:21: c9:44:18:07:17:14:6a:9a:ff:41:63:ea:65:34:d3: 6f:51:bb:34:73:6f:15:15:67:1a:08:22:38:9d:a7: 95:3d:09:9d:23:10:a6:ba:7a:71:a3:81:1a:5c:2f: 7d:55:aa:99:13:6f:27:36:e2:e1:56:c7:54:29:5a: e9:ac:64:3e:8f:53:13:ad:71:19:8e:53:2d:bd:ae: af:92:08:3e:4a:20:6d:db:65:a1:08:bb:c2:a7:8a: e8:ab:ed:61:1b:83:a1:c6:c0:b0:c8:1d:e1:34:9d: 47:49:e2:17:cf:f3:6f:c2:d0:73:0b:80:9e:45:9a: 6f:33:42:5b:45:12:fb:78:23:d3:d8:3f:16:9f:c0: c6:56:a0:04:5a:a7:91:23:a4:62:d5:01:19:9c:c7: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:03:62:1D:91:01:F9:EA:60:A6:37:E9:21:93:ED:94:24:9C:41 X509v3 Authority Key Identifier: keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/E1870478616C11F0A254E10BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:bc0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:6e:b6:62:79:c2:9c:40:72:5e:6d:0d:75:d8:a9:ae:b9:d5: c2:16:b1:a7:b2:3f:a7:66:d6:30:f1:2e:4b:97:6b:2e:e2:f0: 82:cc:b2:a0:e7:b7:a8:38:4e:20:1b:27:41:2d:5b:fd:be:39: b4:87:e3:29:ac:07:a3:22:22:9e:cb:b7:64:b7:1e:7f:de:05: e0:df:51:8c:78:58:4f:5d:c8:66:0b:06:58:3d:30:fd:9c:0f: 27:f3:13:be:42:d0:64:44:d3:04:68:67:f6:16:c6:df:4c:bf: df:c9:35:bd:cb:d9:38:d2:93:7a:aa:8e:af:f8:92:f5:d7:89: 59:5f:e4:bc:aa:71:c4:0d:c4:af:bc:3c:7e:df:8f:3e:f9:4c: 35:99:0f:c5:17:92:fd:38:01:a0:85:00:ae:e5:a6:54:8e:72: 38:2b:f2:81:64:7f:b5:1a:ab:e8:8e:cb:00:69:66:65:af:f0: 9d:4c:43:bb:a7:e9:0d:be:12:33:a3:9d:f3:f3:db:f9:08:5d: 09:38:e6:b0:51:d3:2c:dc:0b:f4:a1:1e:3a:ff:ab:ea:aa:d7: 47:a0:6d:a9:45:0c:73:4e:42:c0:7d:b6:a2:47:c0:8a:fe:7a: e9:7d:65:a2:c5:9f:64:bc:fa:f5:d4:b8:4b:0d:65:c8:8a:29: 0c:f0:3f:55 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF MUI0OTM4REIwHhcNMjUwODA5MDIzOTM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2YjRlYS01Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7aoTmtG0HMMnf7o5pugjaBj2DArYrGDcfAO/Z7kBhZGWpCAmcG/PJf81Ce8x /JAhcD3CqYZytGlbneu1o3NX7wo+XkerHDTLPhV8vtxRZ+/WdTkFTmeUAZQ0F+fm kQnqTObNiMMlASHJRBgHFxRqmv9BY+plNNNvUbs0c28VFWcaCCI4naeVPQmdIxCm unpxo4EaXC99VaqZE28nNuLhVsdUKVrprGQ+j1MTrXEZjlMtva6vkgg+SiBt22Wh CLvCp4roq+1hG4OhxsCwyB3hNJ1HSeIXz/NvwtBzC4CeRZpvM0JbRRL7eCPT2D8W n8DGVqAEWqeRI6Ri1QEZnMcKqQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH+AA2Id kQH56mCmN+khk+2UJJxBMB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQzRUUvMDFFNEU2OTYyM0NCMTFFREE4RTM1ODNFQzRGOUFFMDIvRTE4NzA0Nzg2 MTZDMTFGMEEyNTRFMTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xC8AwDQYJKoZIhvcNAQELBQADggEBABputmJ5wpxA cl5tDXXYqa651cIWsaeyP6dm1jDxLkuXay7i8ILMsqDnt6g4TiAbJ0EtW/2+ObSH 4ymsB6MiIp7Lt2S3Hn/eBeDfUYx4WE9dyGYLBlg9MP2cDyfzE75C0GRE0wRoZ/YW xt9Mv9/JNb3L2TjSk3qqjq/4kvXXiVlf5LyqccQNxK+8PH7fjz75TDWZD8UXkv04 AaCFAK7lplSOcjgr8oFkf7Uaq+iOywBpZmWv8J1MQ7un6Q2+EjOjnfPz2/kIXQk4 5rBR0yzcC/ShHjr/q+qq10egbalFDHNOQsB9tqJHwIr+eul9ZaLFn2S8+vXUuEsN ZciKKQzwP1U= -----END CERTIFICATE-----Generated at Wed Oct 29 18:18:59 2025 by rpki-client