$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa File: 961A19E4BC4411EF95825C2FC4F9AE02.roa (raw, json) Hash identifier: wktAdo8M9c7xGYUs/kTUMN/0ZqW5G3M1Q8fLS6YzAL0= Subject key identifier: 32:DD:C0:FF:00:E4:39:3B:C7:08:94:1A:40:26:23:57:91:27:37:8E Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DDA Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:56:26 +0000 ROA not before: Thu 28 Aug 2025 14:56:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153435 IP address blocks: 2001:df4:b1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19930 (0x4dda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e19-83f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:4a:a1:35:e9:48:0d:f6:98:81:41:6f:c7: 6e:e9:bd:14:b5:4a:54:54:b5:34:69:24:22:14:7b: 14:f4:ab:84:ce:3a:d1:62:ab:b3:9a:06:25:87:12: 59:83:ac:18:d2:08:96:98:5b:7f:53:84:14:1c:90: 9d:5a:b3:b8:37:64:9a:90:b2:55:4d:a9:b3:22:4b: 53:d6:bf:1c:2d:1c:38:af:09:fe:7b:69:33:c2:34: 11:74:c4:f9:69:5c:57:de:56:26:fa:e9:f5:6a:f0: 59:89:91:04:45:e6:c8:01:4d:59:35:56:dd:90:58: a4:6f:b0:18:05:d4:61:5f:f1:a2:98:c3:00:2e:c2: eb:0a:3f:70:f1:df:be:27:b7:55:a9:0b:5b:b0:6f: 5e:43:71:52:6f:86:16:ba:03:37:a8:f5:92:7a:00: ee:b1:48:9a:f9:2c:85:37:98:27:7d:ab:f1:8f:21: 5c:e9:7a:b5:08:72:a9:8a:4c:d9:7b:08:2a:10:f0: 78:d7:08:31:47:bc:e3:83:41:9a:59:75:b9:78:81: bb:c6:8e:ba:a9:2a:93:53:a7:39:28:ad:55:09:4c: 6a:48:b6:e9:bd:7e:6a:7d:e5:27:ac:1a:96:1f:0a: 99:59:7c:4d:5f:db:6b:7d:6d:a7:4d:c2:06:59:70: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DD:C0:FF:00:E4:39:3B:C7:08:94:1A:40:26:23:57:91:27:37:8E X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:b1c0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:1a:7d:58:90:48:44:31:c8:35:93:c9:0a:4b:33:c2:cb:73: c9:a3:00:02:70:e9:c7:0f:89:fe:96:06:90:11:13:c6:ee:09: e4:3c:c8:d4:e6:04:dc:5a:53:92:40:24:e3:8c:cb:4b:46:55: c5:70:c6:31:7a:16:80:9a:99:72:db:98:a7:4f:4e:39:c9:a4: c0:72:65:6a:5d:40:31:bb:44:df:f7:04:ab:41:85:16:5a:b0: ab:3d:31:90:ec:43:bd:5d:77:c1:72:43:ea:2b:f0:7e:8d:a3: cf:f2:84:7e:c6:fc:76:9b:b7:8e:8c:91:da:b0:9e:e5:46:e8: 34:84:ff:44:88:ec:5f:b5:1b:ee:e1:7b:ab:be:5d:61:48:2d: 2f:b4:43:52:45:20:5b:fb:f7:2a:cc:ad:24:4a:bf:34:fe:12: bb:c1:35:7b:71:de:fb:91:35:98:95:58:aa:a0:4d:9e:7d:d8: 2d:f9:97:30:79:05:7e:57:de:3e:80:a2:b5:31:6c:e3:23:32: b8:da:f8:c8:bf:49:2d:13:f7:f5:91:d0:e8:23:82:7b:e0:a8: a3:5a:67:cc:c7:e2:a7:92:25:31:65:1d:c0:42:be:de:14:32: e3:43:71:f1:f7:ea:ce:0d:d8:29:7c:12:04:30:00:b9:09:e2: df:10:fd:32 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmUxOS04M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmS9KoTXpSA32mIFBb8du6b0UtUpUVLU0aSQiFHsU9KuEzjrRYquzmgYlhxJZ g6wY0giWmFt/U4QUHJCdWrO4N2SakLJVTamzIktT1r8cLRw4rwn+e2kzwjQRdMT5 aVxX3lYm+un1avBZiZEERebIAU1ZNVbdkFikb7AYBdRhX/GimMMALsLrCj9w8d++ J7dVqQtbsG9eQ3FSb4YWugM3qPWSegDusUia+SyFN5gnfavxjyFc6Xq1CHKpikzZ ewgqEPB41wgxR7zjg0GaWXW5eIG7xo66qSqTU6c5KK1VCUxqSLbpvX5qfeUnrBqW HwqZWXxNX9trfW2nTcIGWXA0rwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDLdwP8A 5Dk7xwiUGkAmI1eRJzeOMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOTYxQTE5RTRC QzQ0MTFFRjk1ODI1QzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30scAwDQYJKoZIhvcNAQELBQADggEBAH8afViQSEQx yDWTyQpLM8LLc8mjAAJw6ccPif6WBpARE8buCeQ8yNTmBNxaU5JAJOOMy0tGVcVw xjF6FoCamXLbmKdPTjnJpMByZWpdQDG7RN/3BKtBhRZasKs9MZDsQ71dd8FyQ+or 8H6No8/yhH7G/Habt46MkdqwnuVG6DSE/0SI7F+1G+7he6u+XWFILS+0Q1JFIFv7 9yrMrSRKvzT+ErvBNXtx3vuRNZiVWKqgTZ592C35lzB5BX5X3j6AorUxbOMjMrja +Mi/SS0T9/WR0OgjgnvgqKNaZ8zH4qeSJTFlHcBCvt4UMuNDcfH36s4N2Cl8EgQw ALkJ4t8Q/TI= -----END CERTIFICATE-----Generated at Mon Sep 8 05:36:03 2025 by rpki-client