$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/B1F23610923B11F084052A57C4F9AE02.roa File: B1F23610923B11F084052A57C4F9AE02.roa (raw, json) Hash identifier: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc= Subject key identifier: 77:41:55:0B:36:85:3B:D1:74:C2:68:CA:42:D7:31:41:B5:8A:E3:EC Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Certificate serial: 0116 Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/B1F23610923B11F084052A57C4F9AE02.roa Signing time: Mon 15 Sep 2025 13:55:54 +0000 ROA not before: Mon 15 Sep 2025 13:55:54 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2407:7a80:104::/48 maxlen: 48 2407:7a80:105::/48 maxlen: 48 2407:7a80:106::/48 maxlen: 48 2407:7a80:107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Validity Not Before: Sep 15 13:55:54 2025 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=68c81ae9-4b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:0c:a2:20:ad:bb:ed:be:5c:b9:83:11:8e: 9b:33:bb:f2:86:be:cc:2d:31:ea:e5:00:7b:ae:1f: a6:d7:c4:c9:a3:cb:61:d9:77:cc:0e:50:e7:35:6b: 39:cd:b1:5d:f9:3b:4c:c6:ef:2c:c2:50:5d:ee:9d: 9a:54:12:a8:0b:f9:e7:54:20:0c:1e:1d:64:b9:9f: 2d:a5:b2:57:22:15:1a:36:3e:e1:ce:ff:fd:2d:fc: b8:48:8a:e0:3d:a6:17:25:45:a1:4a:cf:c4:30:41: 2b:ea:a6:a6:e0:64:cb:a3:ce:70:e7:b1:2b:aa:18: e8:b4:70:e5:9f:da:82:ef:f1:65:7c:ff:69:b2:ca: 02:db:e7:b9:b5:f4:6b:29:35:37:63:3c:0a:4c:3a: 6b:a3:e2:11:a8:ce:65:86:27:46:a2:f8:d2:8c:16: 15:89:2a:c7:d9:21:a7:e5:4b:46:42:e0:14:57:d3: 28:10:4c:46:38:db:d5:c8:7f:62:a9:30:73:df:d5: 6a:e7:26:f9:0c:f3:c9:e7:00:51:0c:c7:97:2e:a3: 31:2a:5b:c2:62:21:2f:58:d5:68:d8:e7:a8:81:6b: 63:5f:43:2a:ce:31:1a:26:18:ce:85:ad:85:7d:82: 43:7d:e5:21:4e:ac:65:d9:0d:97:b7:dd:a1:27:22: 80:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:41:55:0B:36:85:3B:D1:74:C2:68:CA:42:D7:31:41:B5:8A:E3:EC X509v3 Authority Key Identifier: keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/B1F23610923B11F084052A57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:7a80:104::/46 Signature Algorithm: sha256WithRSAEncryption 00:47:08:45:11:fe:01:56:05:d6:34:96:55:70:74:fe:cf:99: e5:4e:3e:61:2c:31:67:8a:f6:74:95:66:86:67:45:de:d7:61: 93:4c:a0:3e:b1:0d:b6:b3:f1:aa:e0:dc:bf:92:a8:eb:1f:cc: 8a:9c:c2:1b:25:75:6a:1b:8e:c0:96:45:5c:4f:c5:05:51:f2: 70:3a:78:7c:b5:34:f7:91:57:0e:3a:14:92:c6:f2:1f:a3:e8: ac:7d:e0:4f:65:4d:1c:02:3d:4f:2f:c5:ad:87:63:11:92:0c: e3:67:52:88:4d:47:04:04:66:57:61:1c:7f:fb:bd:d3:b1:73: 50:cd:26:b9:1b:a2:c7:b4:cc:e5:4b:f3:d6:69:61:a6:1c:18: de:88:d1:21:10:91:de:e0:ba:e4:2c:fb:3a:ea:92:2c:69:55: 16:fb:a4:26:d0:ef:d8:a9:a8:ff:93:0e:1a:cc:94:bc:ea:d9: d9:fd:d2:68:14:3a:f1:76:8e:66:c6:4c:cf:fe:32:ad:a4:92: b7:87:e0:9f:bd:66:37:11:d2:71:4a:58:8e:d8:2a:c9:5f:75: 5c:d0:b8:97:8b:28:a9:19:b6:07:1f:3f:42:97:08:5f:9f:28: 47:87:92:35:67:e8:c1:2f:67:5c:26:52:74:ab:20:51:54:c3: 83:bd:fc:3c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKDQwQjU1QzFBQzc0MDRDQzA1RjE3NzYzQTk5QkJCMjM4 OUJEMkVBQkUwHhcNMjUwOTE1MTM1NTU0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM4MWFlOS00YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkQMoiCtu+2+XLmDEY6bM7vyhr7MLTHq5QB7rh+m18TJo8th2XfMDlDnNWs5 zbFd+TtMxu8swlBd7p2aVBKoC/nnVCAMHh1kuZ8tpbJXIhUaNj7hzv/9Lfy4SIrg PaYXJUWhSs/EMEEr6qam4GTLo85w57ErqhjotHDln9qC7/FlfP9pssoC2+e5tfRr KTU3YzwKTDpro+IRqM5lhidGovjSjBYViSrH2SGn5UtGQuAUV9MoEExGONvVyH9i qTBz39Vq5yb5DPPJ5wBRDMeXLqMxKlvCYiEvWNVo2OeogWtjX0MqzjEaJhjOha2F fYJDfeUhTqxl2Q2Xt92hJyKAowIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHdBVQs2 hTvRdMJoykLXMUG1iuPsMB8GA1UdIwQYMBaAFEC1XBrHQEzAXxd2Opm7sjib0uq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC81ODQwQTA3QzEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9RTFZjR3NkQVRNQmZGM1k2bWJ1eU9KdlM2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMVmNHc2RBVE1CZkYzWTZtYnV5T0p2UzZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURENjQvNTg0MEEwN0MxMzRCMTFFRjk0NDI0RDNEQzRGOUFFMDIvQjFGMjM2MTA5 MjNCMTFGMDg0MDUyQTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwIkB3qAAQQwDQYJKoZIhvcNAQELBQADggEBAABHCEUR/gFW BdY0llVwdP7PmeVOPmEsMWeK9nSVZoZnRd7XYZNMoD6xDbaz8arg3L+SqOsfzIqc whsldWobjsCWRVxPxQVR8nA6eHy1NPeRVw46FJLG8h+j6Kx94E9lTRwCPU8vxa2H YxGSDONnUohNRwQEZldhHH/7vdOxc1DNJrkbose0zOVL89ZpYaYcGN6I0SEQkd7g uuQs+zrqkixpVRb7pCbQ79ipqP+TDhrMlLzq2dn90mgUOvF2jmbGTM/+Mq2kkreH 4J+9ZjcR0nFKWI7YKslfdVzQuJeLKKkZtgcfP0KXCF+fKEeHkjVn6MEvZ1wmUnSr IFFUw4O9/Dw= -----END CERTIFICATE-----Generated at Fri Sep 19 07:14:16 2025 by rpki-client