$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa File: D633730A5AD711EF8665FF81C4F9AE02.roa (raw, json) Hash identifier: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0= Subject key identifier: 45:5C:B5:13:F2:9E:55:9F:6E:EE:10:5B:C0:D2:87:2C:A8:2F:D8:70 Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 016D Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa Signing time: Wed 03 Sep 2025 04:52:06 +0000 ROA not before: Wed 03 Sep 2025 04:52:06 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137527 IP address blocks: 2407:b140:ae5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Sep 3 04:52:06 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b7c976-abe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:f5:cf:03:cd:1b:80:a9:a0:b8:ce:21:4c: f7:7e:72:31:f0:2e:8f:4f:2e:54:99:80:f4:7e:a3: 2c:c6:0d:7b:f9:a8:ad:c3:9d:9e:5e:1e:cf:34:35: c9:45:17:6a:75:83:aa:1e:f4:9c:cd:bc:bf:f1:fe: fe:b2:42:b6:32:b4:fc:6e:62:4e:2f:07:74:27:f1: a4:6c:e7:db:ad:6a:03:cd:b5:05:d6:bb:c4:32:74: c7:5c:d2:23:18:f8:86:53:4b:eb:7c:31:47:5c:72: 6e:12:2a:79:c6:38:82:b3:9b:cd:70:b9:e8:3a:ce: 4b:3a:02:fb:e7:c5:92:04:db:3b:fb:c4:85:4e:d9: 9b:38:cd:17:01:16:d9:7e:95:00:fb:a2:73:9f:53: cf:fc:a5:b8:32:a3:66:e5:d4:51:bf:8e:5b:e4:17: 68:5a:7f:3e:58:d2:92:f1:91:83:18:d5:6f:74:d6: c7:76:72:e3:18:e7:1b:ed:05:85:6e:fb:5a:93:8f: 35:5b:fd:12:4c:e6:7f:aa:19:0b:5c:72:ac:64:9a: ff:ee:ea:63:4f:df:26:e8:a3:89:e6:4f:af:53:e1: 2a:5e:69:43:32:e8:e3:3c:2c:d2:bb:0d:00:7a:40: 9f:62:2b:a3:a5:75:2f:89:da:dd:d5:13:fc:f9:04: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:B5:13:F2:9E:55:9F:6E:EE:10:5B:C0:D2:87:2C:A8:2F:D8:70 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:b140:ae5::/64 Signature Algorithm: sha256WithRSAEncryption 42:c8:57:97:a2:34:b1:47:f0:f7:e3:0a:81:2f:16:3d:3c:39: 5d:b2:58:31:81:a4:e6:25:e5:19:a6:57:92:84:fd:ac:ad:53: 5c:c2:19:d8:40:04:36:89:48:d0:26:16:dc:2a:a5:6b:0b:46: d0:54:0b:65:7b:b8:a8:90:2a:b1:80:72:b3:4d:6a:7e:88:ab: 55:7f:69:c6:d5:5a:68:89:fe:a0:1a:b7:49:d2:bf:d6:7e:73: 70:10:32:8e:7f:cc:30:a8:2b:a9:b7:24:c7:1f:88:56:a7:f0: 31:7d:6f:22:ba:23:94:7e:a5:5a:db:ef:00:60:3c:17:15:6e: 8d:7a:05:5b:bb:b3:79:f8:b4:45:47:e9:3b:09:90:9e:ac:bb: 9e:4d:65:f7:49:d9:35:d3:a1:6b:50:ca:18:f6:ee:83:e8:93: eb:44:23:ec:78:cc:86:b7:8b:4c:91:a6:76:f3:62:a6:2f:69: e0:9a:42:d4:98:a1:eb:44:ee:6a:cf:4c:d2:7e:8b:cc:34:49: 0d:03:99:04:e2:c6:14:95:cd:52:f9:9f:7f:1f:df:8d:ac:55: f5:18:42:ff:56:55:23:9e:1f:bd:27:7e:c3:f6:93:4d:53:65: 29:55:80:16:93:5b:64:77:24:e5:93:89:9d:0f:9d:63:99:19: 75:9d:6d:9c -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjUwOTAzMDQ1MjA2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3Yzk3Ni1hYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsb1zwPNG4CpoLjOIUz3fnIx8C6PTy5UmYD0fqMsxg17+aitw52eXh7PNDXJ RRdqdYOqHvSczby/8f7+skK2MrT8bmJOLwd0J/GkbOfbrWoDzbUF1rvEMnTHXNIj GPiGU0vrfDFHXHJuEip5xjiCs5vNcLnoOs5LOgL758WSBNs7+8SFTtmbOM0XARbZ fpUA+6Jzn1PP/KW4MqNm5dRRv45b5BdoWn8+WNKS8ZGDGNVvdNbHdnLjGOcb7QWF bvtak481W/0STOZ/qhkLXHKsZJr/7upjT98m6KOJ5k+vU+EqXmlDMujjPCzSuw0A ekCfYiujpXUvidrd1RP8+QRm2QIDAQABo4ICmjCCApYwHQYDVR0OBBYEFEVctRPy nlWfbu4QW8DShyyoL9hwMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZEOEIvQjJGMjM1QjI2NzIwMTFFRUExNDZDMjJEQzRGOUFFMDIvRDYzMzczMEE1 QUQ3MTFFRjg2NjVGRjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E FTATMBEEAgACMAsDCQAkB7FACuUAADANBgkqhkiG9w0BAQsFAAOCAQEAQshXl6I0 sUfw9+MKgS8WPTw5XbJYMYGk5iXlGaZXkoT9rK1TXMIZ2EAENolI0CYW3CqlawtG 0FQLZXu4qJAqsYBys01qfoirVX9pxtVaaIn+oBq3SdK/1n5zcBAyjn/MMKgrqbck xx+IVqfwMX1vIrojlH6lWtvvAGA8FxVujXoFW7uzefi0RUfpOwmQnqy7nk1l90nZ NdOha1DKGPbug+iT60Qj7HjMhreLTJGmdvNipi9p4JpC1Jih60Tuas9M0n6LzDRJ DQOZBOLGFJXNUvmffx/fjaxV9RhC/1ZVI54fvSd+w/aTTVNlKVWAFpNbZHck5ZOJ nQ+dY5kZdZ1tnA== -----END CERTIFICATE-----Generated at Tue Sep 9 08:50:04 2025 by rpki-client