$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/CF7CE212796211F08A60430EC4F9AE02.roa File: CF7CE212796211F08A60430EC4F9AE02.roa (raw, json) Hash identifier: QSCP1VXGjOsAkF+YaOH9ee+5sgn/k8qDj+R2Y6lzkEw= Subject key identifier: 2A:83:FF:97:1A:D0:18:03:0A:6C:E9:09:76:5A:85:0C:21:6D:6E:F1 Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Certificate serial: 0128 Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/CF7CE212796211F08A60430EC4F9AE02.roa Signing time: Thu 14 Aug 2025 23:08:21 +0000 ROA not before: Thu 14 Aug 2025 23:08:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 396982 IP address blocks: 2400:7aa0:2a01::/48 maxlen: 48 2400:7aa0:2a02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Validity Not Before: Aug 14 23:08:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=689e6c64-0ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:76:1d:8d:94:9b:0f:ab:2c:cf:94:0c:e6: 59:96:6b:01:cf:45:43:3b:69:fd:54:9e:a2:eb:49: ba:57:59:88:d1:33:5f:02:15:af:b7:a6:77:ce:4e: ae:b3:b2:c9:55:4e:bc:94:d7:47:71:07:0e:12:6d: cb:dd:87:81:d7:19:27:19:06:de:4a:4d:16:20:bf: 8f:13:1f:a3:4f:c7:de:e3:b7:cb:8f:9d:b2:d3:06: b1:aa:fa:40:52:cd:78:39:f8:1f:dc:7c:05:e7:5d: 1b:bb:9f:7a:db:9d:77:ce:c9:17:1d:1f:7c:b1:75: df:98:2a:7c:f1:c9:b6:b8:57:0d:ce:6b:39:8a:ae: ce:e7:9e:ad:d6:86:6d:8f:e4:d2:ce:2b:27:f6:8d: 0a:3c:a3:6f:49:71:24:b1:87:3d:fa:74:db:8d:d1: 1d:19:79:c7:c6:e4:a3:6a:bc:3e:22:b6:2f:e5:04: d2:cc:75:be:68:f0:19:97:92:af:30:d1:80:5e:0c: 69:bd:06:df:8e:4f:9e:4d:8e:a2:88:2f:45:c5:33: f3:0e:d4:cd:a7:94:4a:41:62:63:4c:41:99:d9:b1: 93:30:da:1e:44:d5:07:5d:43:c1:fc:91:20:e2:a7: bc:b6:ec:75:b4:8e:21:50:2c:6e:65:0b:2b:62:98: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:FF:97:1A:D0:18:03:0A:6C:E9:09:76:5A:85:0C:21:6D:6E:F1 X509v3 Authority Key Identifier: keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/CF7CE212796211F08A60430EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:7aa0:2a01::-2400:7aa0:2a02:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 90:a8:c8:4a:68:e0:c3:c5:9e:f7:33:49:91:ac:01:74:91:63: ba:af:32:ff:54:41:db:8a:70:fb:f2:94:15:32:7a:53:d0:7d: 0d:36:04:8c:3a:50:e5:9b:38:6d:ab:e2:d2:0f:61:3b:3c:0d: 01:9d:01:46:62:a6:82:77:ae:f7:d8:92:66:df:9a:61:1b:d2: b8:a3:37:e7:8a:41:6b:79:f4:77:72:d1:d2:37:08:f7:b7:97: ed:1d:a0:9a:da:ff:17:fc:05:7e:69:4c:cb:ad:e8:9a:3e:7b: 0c:bd:0f:7c:e5:60:c1:27:16:ee:2f:c1:ec:66:c5:1b:79:3a: c3:7d:ec:b5:df:71:0f:c4:90:ba:17:bf:66:35:e1:8a:95:1e: 1f:11:6d:a5:a9:76:5e:3f:5a:77:3a:d4:ee:f7:72:58:55:1e: c7:a6:68:89:5c:89:87:d6:64:c9:8b:b7:48:29:eb:e2:b6:7c: 6c:4a:1d:bb:49:d3:ff:bc:05:f0:1d:89:c1:13:9d:a4:2f:1e: 48:17:2f:11:0d:b3:f4:0f:98:97:9e:d5:e5:61:66:42:e0:d5: 5b:c1:0a:88:d4:a0:c6:e2:2f:78:08:b2:e5:84:07:95:9d:cd: 54:d7:d9:c0:80:cf:91:14:3d:fa:51:32:e1:11:20:6d:0b:77: 44:43:20:74 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKEU1MENCMjUwQkZBRDA4NjNFODVDMjkwMkVBMDIxOUQ1 M0NDMDgxMkUwHhcNMjUwODE0MjMwODIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllNmM2NC0wY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBB2HY2Umw+rLM+UDOZZlmsBz0VDO2n9VJ6i60m6V1mI0TNfAhWvt6Z3zk6u s7LJVU68lNdHcQcOEm3L3YeB1xknGQbeSk0WIL+PEx+jT8fe47fLj52y0waxqvpA Us14Ofgf3HwF510bu5962513zskXHR98sXXfmCp88cm2uFcNzms5iq7O556t1oZt j+TSzisn9o0KPKNvSXEksYc9+nTbjdEdGXnHxuSjarw+IrYv5QTSzHW+aPAZl5Kv MNGAXgxpvQbfjk+eTY6iiC9FxTPzDtTNp5RKQWJjTEGZ2bGTMNoeRNUHXUPB/JEg 4qe8tux1tI4hUCxuZQsrYpgeBwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFCqD/5ca 0BgDCmzpCXZahQwhbW7xMB8GA1UdIwQYMBaAFOUMslC/rQhj6FwpAuoCGdU8wIEu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82QjdGOTkzQ0VC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENHUG9YQ2tDNmdJWjFUekFn UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNkI3Rjk5M0NFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvQ0Y3Q0UyMTI3 OTYyMTFGMDhBNjA0MzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgACMBQwEgMHACQAeqAqAQMHACQAeqAqAjANBgkqhkiG9w0BAQsFAAOC AQEAkKjISmjgw8We9zNJkawBdJFjuq8y/1RB24pw+/KUFTJ6U9B9DTYEjDpQ5Zs4 bavi0g9hOzwNAZ0BRmKmgneu99iSZt+aYRvSuKM354pBa3n0d3LR0jcI97eX7R2g mtr/F/wFfmlMy63omj57DL0PfOVgwScW7i/B7GbFG3k6w33std9xD8SQuhe/ZjXh ipUeHxFtpal2Xj9adzrU7vdyWFUex6ZoiVyJh9ZkyYu3SCnr4rZ8bEodu0nT/7wF 8B2JwROdpC8eSBcvEQ2z9A+Yl57V5WFmQuDVW8EKiNSgxuIveAiy5YQHlZ3NVNfZ wIDPkRQ9+lEy4REgbQt3REMgdA== -----END CERTIFICATE-----Generated at Wed Aug 20 08:47:08 2025 by rpki-client