$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/728C137EAB0A11EF93E9AA0EC4F9AE02.roa File: 728C137EAB0A11EF93E9AA0EC4F9AE02.roa (raw, json) Hash identifier: L47Hv6jtZfzAd7fUqImc3vXrjiEWDVALw08TuOzizsM= Subject key identifier: 89:6A:4E:D3:3E:4D:DC:61:51:5B:AA:CD:0C:69:D8:B1:E8:ED:54:23 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DD2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/728C137EAB0A11EF93E9AA0EC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:56:19 +0000 ROA not before: Thu 28 Aug 2025 14:56:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153403 IP address blocks: 2001:df4:8b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19922 (0x4dd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e13-4bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:15:86:7a:06:b4:80:9a:8a:05:ec:70:93: c2:48:0c:bf:19:3b:66:04:ee:70:90:8c:a1:3c:2e: 5f:f9:9d:14:a3:20:13:56:78:7b:56:ba:7c:4e:a4: e4:0d:79:aa:fe:19:23:46:2e:3b:84:4f:3e:c9:58: f5:f7:7f:d1:71:90:bc:90:bd:28:ea:24:9c:1a:8c: 41:56:98:d5:82:eb:1d:c9:9d:4c:e0:01:cd:b5:a2: 83:47:2d:37:ef:d4:7f:77:97:78:96:36:76:d8:09: 5d:6e:56:22:20:75:32:a8:93:c9:9b:4d:a9:48:38: f6:79:44:3b:c6:e4:89:c8:4c:0e:1e:df:13:72:dd: f3:0f:a6:4b:40:d4:1a:f5:94:4f:b8:82:64:30:4a: b0:a7:a4:73:8d:10:eb:55:a8:29:47:08:8f:e5:53: d0:c1:00:42:c5:58:61:4e:f1:6a:1a:27:e6:bc:d1: d4:18:f1:6a:75:c2:f2:01:b5:a7:9e:28:32:2f:f6: 4a:24:31:4f:8c:2d:b4:2e:a2:f6:23:68:2c:24:ff: b5:12:26:85:7c:11:d9:e0:db:ad:7e:f6:69:df:94: 42:1f:95:94:28:f3:eb:6a:4c:7a:df:37:67:2a:de: 42:89:21:7d:8a:a0:65:88:94:2f:0f:e7:d6:90:aa: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6A:4E:D3:3E:4D:DC:61:51:5B:AA:CD:0C:69:D8:B1:E8:ED:54:23 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/728C137EAB0A11EF93E9AA0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:8b40::/48 Signature Algorithm: sha256WithRSAEncryption 98:0c:6e:ee:4f:57:99:e3:86:69:87:0c:46:37:30:07:39:bc: 98:03:fe:ad:70:88:4d:4a:ab:96:6e:a3:25:5c:6a:3c:11:1e: db:7b:64:b1:92:c1:73:3d:e9:97:5d:49:f8:fa:20:2b:29:e7: 65:26:78:63:77:15:68:ba:9d:6a:8d:c5:81:3f:7f:26:02:a0: 46:3e:2a:5b:a6:e3:c8:bb:0e:f2:85:87:ea:82:fb:43:d1:f7: bf:e8:62:3e:0c:07:41:6e:a8:21:ac:07:df:c2:d3:98:db:32: 8a:2b:b3:de:17:85:dc:10:a5:31:80:a4:7f:9d:40:a8:64:e7: d1:15:4c:6e:99:ff:9c:51:2e:e8:73:ac:68:41:7b:4b:53:8a: d0:79:ee:86:a6:24:42:31:31:aa:c4:29:e4:98:c2:c7:b2:19: 4d:39:5c:9e:34:54:3e:e7:0d:e7:d0:94:6c:50:bb:0b:fa:b8: 1e:19:31:02:fe:fc:b5:10:a1:23:33:1a:46:8f:47:a5:b3:28: de:67:3b:41:7e:fc:b2:14:08:37:88:1c:88:59:ad:0d:ce:f5: 84:1c:98:17:9d:c6:15:ba:f6:a4:21:22:13:3e:7c:95:a5:ce: c4:f2:e8:5c:de:5a:56:e4:f8:1e:1e:98:2e:23:89:ab:07:bd: ad:49:90:c2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmUxMy00YmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeUVhnoGtICaigXscJPCSAy/GTtmBO5wkIyhPC5f+Z0UoyATVnh7Vrp8TqTk DXmq/hkjRi47hE8+yVj193/RcZC8kL0o6iScGoxBVpjVgusdyZ1M4AHNtaKDRy03 79R/d5d4ljZ22AldblYiIHUyqJPJm02pSDj2eUQ7xuSJyEwOHt8Tct3zD6ZLQNQa 9ZRPuIJkMEqwp6RzjRDrVagpRwiP5VPQwQBCxVhhTvFqGifmvNHUGPFqdcLyAbWn nigyL/ZKJDFPjC20LqL2I2gsJP+1EiaFfBHZ4NutfvZp35RCH5WUKPPrakx63zdn Kt5CiSF9iqBliJQvD+fWkKrMfQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIlqTtM+ TdxhUVuqzQxp2LHo7VQjMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNzI4QzEzN0VB QjBBMTFFRjkzRTlBQTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30i0AwDQYJKoZIhvcNAQELBQADggEBAJgMbu5PV5nj hmmHDEY3MAc5vJgD/q1wiE1Kq5ZuoyVcajwRHtt7ZLGSwXM96ZddSfj6ICsp52Um eGN3FWi6nWqNxYE/fyYCoEY+Klum48i7DvKFh+qC+0PR97/oYj4MB0FuqCGsB9/C 05jbMoors94XhdwQpTGApH+dQKhk59EVTG6Z/5xRLuhzrGhBe0tTitB57oamJEIx MarEKeSYwseyGU05XJ40VD7nDefQlGxQuwv6uB4ZMQL+/LUQoSMzGkaPR6WzKN5n O0F+/LIUCDeIHIhZrQ3O9YQcmBedxhW69qQhIhM+fJWlzsTy6FzeWlbk+B4emC4j iasHva1JkMI= -----END CERTIFICATE-----Generated at Mon Sep 8 00:32:09 2025 by rpki-client