$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8628801A92A111EFBB885B27C4F9AE02.roa File: 8628801A92A111EFBB885B27C4F9AE02.roa (raw, json) Hash identifier: HO3DBDthm4nkkC+P4KZT1DidkVqrmWl6RmmZuM/cfnk= Subject key identifier: 46:0A:3C:41:01:9F:0E:B4:CF:91:DF:60:24:2D:E3:B4:EA:F7:C2:1A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DD0 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8628801A92A111EFBB885B27C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:56:17 +0000 ROA not before: Thu 28 Aug 2025 14:56:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153017 IP address blocks: 2001:df4:71c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19920 (0x4dd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e11-c170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:ac:c5:25:1e:86:d4:48:b9:b3:eb:34:6f: 8f:b0:4c:94:30:43:00:80:21:ee:b0:05:fa:3c:c1: 7a:da:d1:73:50:e3:92:ad:4b:44:96:58:4b:3c:df: a1:43:c8:59:96:2e:a9:dc:1a:cf:31:66:65:79:c3: 51:e5:63:d4:55:44:f2:cd:12:6e:4c:48:8a:6a:2b: 6f:f1:af:03:80:f2:a8:b9:8e:9d:83:a1:ef:36:c1: f0:87:b9:dc:c2:5d:32:0b:c0:6d:4f:2a:b4:b0:08: f7:62:6d:c3:f5:e8:4d:cc:af:6f:a0:94:b2:18:3b: 7f:1f:d4:f4:50:ad:d8:b1:35:87:0f:a6:5f:aa:00: 30:60:23:e7:e4:69:e5:0f:91:9e:d2:f5:7b:96:de: 44:da:98:65:b6:c1:fb:af:e8:6a:4b:f6:79:67:49: cc:fc:de:70:30:ea:ee:fb:cb:b3:4e:25:93:83:f3: 23:e7:28:1f:34:38:2b:e5:30:a9:13:30:4f:56:dc: 72:62:8a:70:c2:55:2c:d2:47:0d:46:a5:77:3f:c3: 05:25:c8:d1:15:50:9f:f1:a9:24:28:e8:f9:84:03: 04:46:5e:f9:66:a8:7b:78:4d:c0:73:6d:c1:3b:15: 98:d0:a4:cd:ec:bd:1c:09:91:df:95:2b:c9:c4:b8: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:3C:41:01:9F:0E:B4:CF:91:DF:60:24:2D:E3:B4:EA:F7:C2:1A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8628801A92A111EFBB885B27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:71c0::/48 Signature Algorithm: sha256WithRSAEncryption 6c:3c:b2:6d:d8:d8:02:ee:9e:c9:d7:7a:f2:bd:70:f0:8b:4d: 95:41:bf:a9:0c:15:e2:70:2e:24:67:26:41:0e:a3:f2:fd:07: 32:01:ce:43:0f:ce:7e:28:0e:6c:93:e2:09:74:16:0a:7b:81: 55:85:3c:13:8b:42:60:ef:4c:70:2e:ee:5c:c6:9d:b9:b0:29: ae:17:86:78:6e:3f:1b:dd:63:ca:d1:fe:72:dd:f6:c4:ef:55: 49:98:b1:16:3a:08:b4:3d:b6:d8:55:69:e0:7d:97:df:1e:0a: b5:43:c7:7d:18:ea:e0:bc:64:6c:87:12:78:27:1c:06:0d:bc: 53:1e:42:e7:67:e4:33:09:c2:75:4c:24:35:ce:17:b2:52:a9: df:54:73:12:b3:66:0f:5a:e0:80:bf:78:b2:f3:27:85:59:b9: e0:1a:39:7c:d9:72:91:10:a2:8e:ec:5c:30:92:85:bc:4e:25: a4:99:34:88:d2:e7:a1:a2:5a:ec:df:c4:1e:09:6b:c3:7b:1c: c0:ff:a7:f7:07:a0:c2:41:32:df:b4:bb:99:c5:81:64:08:20: 1b:2d:d3:db:3a:11:b3:34:f4:07:d5:39:c1:8b:e1:41:6c:6f: 7c:26:39:36:4e:01:e9:0f:34:2b:9f:18:c9:ae:99:83:1e:50: 0a:62:e8:59 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmUxMS1jMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3ysxSUehtRIubPrNG+PsEyUMEMAgCHusAX6PMF62tFzUOOSrUtEllhLPN+h Q8hZli6p3BrPMWZlecNR5WPUVUTyzRJuTEiKaitv8a8DgPKouY6dg6HvNsHwh7nc wl0yC8BtTyq0sAj3Ym3D9ehNzK9voJSyGDt/H9T0UK3YsTWHD6ZfqgAwYCPn5Gnl D5Ge0vV7lt5E2phltsH7r+hqS/Z5Z0nM/N5wMOru+8uzTiWTg/Mj5ygfNDgr5TCp EzBPVtxyYopwwlUs0kcNRqV3P8MFJcjRFVCf8akkKOj5hAMERl75Zqh7eE3Ac23B OxWY0KTN7L0cCZHflSvJxLj8+wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEYKPEEB nw60z5HfYCQt47Tq98IaMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODYyODgwMUE5 MkExMTFFRkJCODg1QjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30ccAwDQYJKoZIhvcNAQELBQADggEBAGw8sm3Y2ALu nsnXevK9cPCLTZVBv6kMFeJwLiRnJkEOo/L9BzIBzkMPzn4oDmyT4gl0Fgp7gVWF PBOLQmDvTHAu7lzGnbmwKa4XhnhuPxvdY8rR/nLd9sTvVUmYsRY6CLQ9tthVaeB9 l98eCrVDx30Y6uC8ZGyHEngnHAYNvFMeQudn5DMJwnVMJDXOF7JSqd9UcxKzZg9a 4IC/eLLzJ4VZueAaOXzZcpEQoo7sXDCShbxOJaSZNIjS56GiWuzfxB4Ja8N7HMD/ p/cHoMJBMt+0u5nFgWQIIBst09s6EbM09AfVOcGL4UFsb3wmOTZOAekPNCufGMmu mYMeUApi6Fk= -----END CERTIFICATE-----Generated at Mon Sep 8 05:41:45 2025 by rpki-client