$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03007AB0B23311EFA164C919C4F9AE02.roa File: 03007AB0B23311EFA164C919C4F9AE02.roa (raw, json) Hash identifier: 3HcFWrkpkHVwP7+EXkaJ+iB8zBYM5Ku2HYE+42gPQ4M= Subject key identifier: 24:0F:03:65:2A:5B:23:A9:32:B5:CA:88:A8:9B:86:93:F6:68:77:FD Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DAF Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03007AB0B23311EFA164C919C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:55:48 +0000 ROA not before: Thu 28 Aug 2025 14:55:48 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151872 IP address blocks: 2001:df3:e4c0::/48 maxlen: 48 2001:df3:e8c0::/48 maxlen: 48 2001:df4:19c0::/48 maxlen: 48 2001:df4:1cc0::/48 maxlen: 48 2401:8ce0::/48 maxlen: 48 2401:9760::/48 maxlen: 48 2401:9920::/48 maxlen: 48 2401:9a60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19887 (0x4daf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:48 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06df4-f6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:d7:43:35:34:d8:aa:4b:4c:b4:43:5d:6f: a3:04:46:b6:55:6d:66:05:5e:e7:f9:1a:00:e6:1d: f5:70:a6:fe:ec:45:ef:60:55:f3:5d:9d:40:2d:67: 74:04:72:6d:78:b8:50:20:00:7e:70:0f:c9:d9:99: 3a:65:23:9c:ac:69:87:c6:3b:5b:cd:a9:99:9c:4e: e4:25:72:f6:56:01:c1:7e:7d:6d:cf:69:10:ff:3f: 1a:d9:d3:06:ed:e4:38:87:93:19:c5:f9:80:64:79: e2:0b:9d:3c:5c:f9:3e:17:b5:ca:89:db:06:94:3f: ef:93:8b:88:07:bc:4e:20:f8:92:81:12:65:b0:1a: f4:bd:e9:97:4f:eb:f0:fa:8a:43:d4:d6:42:2d:2c: 8e:25:31:71:da:42:69:8c:43:b7:e8:94:15:e8:35: ed:cc:12:e9:3c:ae:0d:a9:41:be:09:de:9f:6f:20: ab:d0:bd:08:ec:94:8b:0a:bf:92:ea:ce:14:2d:18: 71:34:6d:3a:09:d2:40:18:45:21:f3:c7:d5:83:88: 80:fa:b5:ac:6b:c9:68:16:de:88:6c:7d:8f:c8:06: e6:37:a1:d8:cd:7d:cc:66:80:18:fb:e9:70:2d:15: 2c:29:dd:f8:e0:8b:b8:13:19:91:65:13:7c:eb:8e: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0F:03:65:2A:5B:23:A9:32:B5:CA:88:A8:9B:86:93:F6:68:77:FD X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03007AB0B23311EFA164C919C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:e4c0::/48 2001:df3:e8c0::/48 2001:df4:19c0::/48 2001:df4:1cc0::/48 2401:8ce0::/48 2401:9760::/48 2401:9920::/48 2401:9a60::/48 Signature Algorithm: sha256WithRSAEncryption 1c:c3:cb:57:6f:1c:44:6e:af:bd:b7:a0:2f:a4:bc:88:61:75: 9a:06:1c:f5:03:03:30:0a:e7:f1:ef:21:3c:a4:e9:20:f2:28: dc:87:d4:03:2b:b3:2e:aa:1f:14:bc:53:3b:be:e0:9c:0a:45: 5c:b7:22:7f:6e:72:24:c6:cf:30:53:c2:84:3f:c8:3a:3b:5b: eb:dd:3e:45:d7:3a:7e:e8:2a:16:39:62:15:9a:fc:3d:af:56: b4:8a:7b:2b:27:90:dd:22:6c:84:78:8d:bb:70:90:b9:2f:95: f5:c9:28:cf:5d:ae:9e:e0:e8:72:0f:17:bf:37:ce:8e:d9:7d: 17:8b:96:99:3c:31:e1:17:c9:2a:e1:04:04:43:af:fc:38:a3: 12:55:c6:46:64:e3:35:00:7a:57:3a:7b:1c:ed:52:3b:65:c8: c9:a4:bf:fa:e1:e9:58:21:94:43:36:8c:a5:ec:19:69:e9:58: 35:20:45:52:43:e6:1b:9e:82:4c:5d:60:46:c1:cb:a3:36:17: 5c:12:e9:92:e5:f6:f4:b5:61:59:30:3f:61:0b:75:3d:66:00: 47:3a:a4:3c:14:b8:b7:a7:49:e4:0c:95:d5:d6:71:e1:65:c8: 50:95:e6:52:c8:15:09:a6:7f:67:fa:04:27:d3:4f:5d:cd:e6: 8a:de:d0:92 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgICTa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRmNC1mNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vLXQzU02KpLTLRDXW+jBEa2VW1mBV7n+RoA5h31cKb+7EXvYFXzXZ1ALWd0 BHJteLhQIAB+cA/J2Zk6ZSOcrGmHxjtbzamZnE7kJXL2VgHBfn1tz2kQ/z8a2dMG 7eQ4h5MZxfmAZHniC508XPk+F7XKidsGlD/vk4uIB7xOIPiSgRJlsBr0vemXT+vw +opD1NZCLSyOJTFx2kJpjEO36JQV6DXtzBLpPK4NqUG+Cd6fbyCr0L0I7JSLCr+S 6s4ULRhxNG06CdJAGEUh88fVg4iA+rWsa8loFt6IbH2PyAbmN6HYzX3MZoAY++lw LRUsKd344Iu4ExmRZRN8647RPwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFCQPA2Uq WyOpMrXKiKibhpP2aHf9MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMDMwMDdBQjBC MjMzMTFFRkExNjRDOTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYQYIKwYBBQUHAQcBAf8E UjBQME4EAgACMEgDBwAgAQ3z5MADBwAgAQ3z6MADBwAgAQ30GcADBwAgAQ30HMAD BwAkAYzgAAADBwAkAZdgAAADBwAkAZkgAAADBwAkAZpgAAAwDQYJKoZIhvcNAQEL BQADggEBABzDy1dvHERur723oC+kvIhhdZoGHPUDAzAK5/HvITyk6SDyKNyH1AMr sy6qHxS8Uzu+4JwKRVy3In9uciTGzzBTwoQ/yDo7W+vdPkXXOn7oKhY5YhWa/D2v VrSKeysnkN0ibIR4jbtwkLkvlfXJKM9drp7g6HIPF783zo7ZfReLlpk8MeEXySrh BARDr/w4oxJVxkZk4zUAelc6exztUjtlyMmkv/rh6VghlEM2jKXsGWnpWDUgRVJD 5huegkxdYEbBy6M2F1wS6ZLl9vS1YVkwP2ELdT1mAEc6pDwUuLenSeQMldXWceFl yFCV5lLIFQmmf2f6BCfTT13N5ore0JI= -----END CERTIFICATE-----Generated at Wed Sep 10 04:33:17 2025 by rpki-client