$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E2CDF1C0E50211EFB6F78B2DC4F9AE02.roa File: E2CDF1C0E50211EFB6F78B2DC4F9AE02.roa (raw, json) Hash identifier: KoqZGQmmlVsZvZIkfx1CWX3NuhbgnYwEPZ84IiajgoQ= Subject key identifier: E4:45:9D:5C:6A:32:05:E0:A0:27:75:8D:D1:20:6D:20:B0:6F:1A:B1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DBE Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E2CDF1C0E50211EFB6F78B2DC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:56:00 +0000 ROA not before: Thu 28 Aug 2025 14:56:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152955 IP address blocks: 2001:df4:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19902 (0x4dbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06dff-f5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:91:ee:c4:0f:bc:59:f8:33:77:fc:15:93: 29:f6:2a:12:33:6b:4c:13:ec:a5:6e:6a:d3:80:8f: 84:2a:05:db:ab:60:bb:06:84:f8:03:aa:f9:ca:bf: 18:be:24:53:19:32:d2:c9:3c:45:16:37:34:06:f6: 1b:de:04:54:18:c6:5b:b4:c9:74:83:27:7e:91:10: 0e:a8:14:a0:48:48:92:ba:e9:6f:9d:f6:41:dc:db: 69:db:04:8d:ed:84:08:1a:bb:c1:f3:33:5f:1f:88: 44:65:c1:ae:0a:88:48:59:99:14:4c:42:cb:fc:0e: ae:63:fa:23:58:fc:08:b9:c7:10:f8:4b:a1:d1:8f: 56:3a:09:22:51:a6:7b:e3:19:7d:80:ac:fa:c7:94: 2f:f8:e4:ba:1d:07:48:26:cc:c5:37:a6:ae:6a:7c: 42:dc:c2:e8:54:ce:a1:97:3f:93:a8:77:8c:2c:57: 41:22:ec:ae:e2:e0:38:a4:54:37:c0:eb:08:e7:80: 7b:e0:ca:9b:ba:a7:c4:db:eb:2d:ca:30:d2:47:3c: ff:51:f9:94:5e:9e:d3:f1:1b:c4:e6:28:84:71:cc: cd:8b:ba:95:68:bb:2a:da:b4:ef:d1:19:1d:a6:27: 22:53:29:cf:0c:c1:78:8a:02:5c:5a:d0:46:59:a7: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:45:9D:5C:6A:32:05:E0:A0:27:75:8D:D1:20:6D:20:B0:6F:1A:B1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E2CDF1C0E50211EFB6F78B2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:1240::/48 Signature Algorithm: sha256WithRSAEncryption 49:15:67:40:81:44:6a:b9:de:2f:6b:1a:a1:bc:01:81:35:50: f8:74:c9:bc:76:ab:07:23:0c:ad:61:15:46:77:7d:0a:98:aa: 1f:5d:b2:b0:ac:63:cc:9c:ca:d4:b2:26:e6:49:a8:03:0b:22: 83:0c:d8:e5:10:50:d0:cb:5d:4b:21:9c:3b:17:2c:98:61:eb: 04:f6:f7:1c:0a:0c:d3:97:ab:a0:29:8c:7e:6f:cc:a3:79:46: 97:e8:ad:2d:0b:f1:83:51:33:79:87:4a:4c:68:c4:46:d7:f1: 8a:c7:52:c1:bb:c9:88:c4:f6:70:73:35:ea:a6:ca:d3:2c:71: 0d:7e:0e:cd:af:ae:e3:69:de:c6:ec:13:d7:3c:08:4e:2b:3c: 0d:60:6b:11:eb:12:e4:c6:11:37:80:9d:28:25:15:1a:ea:5d: 8a:c4:b9:f6:a3:95:a2:2c:b9:06:c0:5f:e8:2d:22:0d:70:1a: a3:f1:4e:23:43:aa:31:f8:10:f6:96:94:18:61:28:a3:49:69: 8d:06:4d:65:29:0d:bc:6a:2c:a6:f0:e2:77:16:d5:15:ea:95: 97:3f:5f:90:d4:3d:3b:97:c8:c5:a6:89:51:7c:c2:56:5c:6a: 17:bc:d7:68:f4:8b:7a:5c:4e:3d:b5:17:bd:bb:7d:8c:bb:49: 65:73:5c:69 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICTb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRmZi1mNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DyR7sQPvFn4M3f8FZMp9ioSM2tME+ylbmrTgI+EKgXbq2C7BoT4A6r5yr8Y viRTGTLSyTxFFjc0BvYb3gRUGMZbtMl0gyd+kRAOqBSgSEiSuulvnfZB3Ntp2wSN 7YQIGrvB8zNfH4hEZcGuCohIWZkUTELL/A6uY/ojWPwIuccQ+Euh0Y9WOgkiUaZ7 4xl9gKz6x5Qv+OS6HQdIJszFN6auanxC3MLoVM6hlz+TqHeMLFdBIuyu4uA4pFQ3 wOsI54B74MqbuqfE2+styjDSRzz/UfmUXp7T8RvE5iiEcczNi7qVaLsq2rTv0Rkd piciUynPDMF4igJcWtBGWae8/QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFORFnVxq MgXgoCd1jdEgbSCwbxqxMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTJDREYxQzBF NTAyMTFFRkI2Rjc4QjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30EkAwDQYJKoZIhvcNAQELBQADggEBAEkVZ0CBRGq5 3i9rGqG8AYE1UPh0ybx2qwcjDK1hFUZ3fQqYqh9dsrCsY8ycytSyJuZJqAMLIoMM 2OUQUNDLXUshnDsXLJhh6wT29xwKDNOXq6ApjH5vzKN5RpforS0L8YNRM3mHSkxo xEbX8YrHUsG7yYjE9nBzNeqmytMscQ1+Ds2vruNp3sbsE9c8CE4rPA1gaxHrEuTG ETeAnSglFRrqXYrEufajlaIsuQbAX+gtIg1wGqPxTiNDqjH4EPaWlBhhKKNJaY0G TWUpDbxqLKbw4ncW1RXqlZc/X5DUPTuXyMWmiVF8wlZcahe812j0i3pcTj21F727 fYy7SWVzXGk= -----END CERTIFICATE-----Generated at Mon Sep 8 05:35:23 2025 by rpki-client