$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/5069A4E034B311F0B93A6228C4F9AE02.roa File: 5069A4E034B311F0B93A6228C4F9AE02.roa (raw, json) Hash identifier: LjkQk5pWU/mOE2Q5+ogi7WUAZwgNRPqYtt1+W47MskQ= Subject key identifier: C4:82:96:A7:A1:EA:DD:3B:B7:86:9B:74:97:A9:03:08:89:8A:D9:80 Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Certificate serial: 9D Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/5069A4E034B311F0B93A6228C4F9AE02.roa Signing time: Mon 19 May 2025 13:15:20 +0000 ROA not before: Mon 19 May 2025 13:15:20 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153174 IP address blocks: 2001:df4:1440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Validity Not Before: May 19 13:15:20 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=682b2ee8-4f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:ea:c2:d0:0a:40:60:80:35:a9:8a:61:6b: 8f:7b:64:d8:87:8f:e6:fa:b9:b2:fd:47:26:84:9d: d7:33:a6:c8:18:4d:08:2b:ba:01:7a:e9:bc:96:e3: a5:86:5e:7e:2e:47:58:94:33:22:75:63:6f:6b:14: 34:68:bf:9c:56:2d:c7:20:e6:94:12:52:de:b7:f0: aa:27:4f:ee:7a:50:b4:0b:74:00:44:38:c9:33:97: ef:4f:fc:14:76:08:cc:5c:05:c9:b6:20:0e:5b:86: 47:e9:04:f4:1e:9f:08:96:af:25:9c:47:3d:06:bf: 20:c0:26:58:c0:3b:f3:5e:4d:82:62:8d:c6:c7:fc: ac:2a:9f:da:4a:b2:94:b0:3e:8c:88:a3:5e:5b:e0: 28:71:88:84:d9:79:7f:f9:66:e9:1a:a3:6d:f8:16: 37:36:a8:a2:5b:e2:f2:e0:3d:a9:07:81:8a:e7:35: 48:b2:6b:2e:03:18:02:e5:24:5b:d6:cd:40:52:88: c1:71:3f:f1:1f:81:41:95:a8:ac:44:d2:48:b2:d4: 73:9a:0e:f5:3d:ac:9c:7a:23:90:3f:79:90:5a:3c: c3:97:3e:44:b8:70:ab:f5:8b:bd:8d:5f:0b:f0:72: aa:2b:ec:bf:b2:64:f7:75:dd:ec:10:19:18:27:b2: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:82:96:A7:A1:EA:DD:3B:B7:86:9B:74:97:A9:03:08:89:8A:D9:80 X509v3 Authority Key Identifier: keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/5069A4E034B311F0B93A6228C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:1440::/48 Signature Algorithm: sha256WithRSAEncryption c3:4f:05:5b:e1:15:f2:ab:89:d8:46:03:80:ec:26:de:64:a2: 41:b7:63:b6:1c:92:86:e1:56:ed:cf:fc:00:fb:2d:eb:dd:0a: f8:dc:df:45:1b:a5:01:c0:9f:fa:30:4b:9f:9b:ba:88:82:55: db:13:c1:4a:c3:58:b6:5d:9a:fc:e1:93:aa:70:c3:7d:a8:17: 49:30:5c:45:f1:8a:5c:cd:cc:4b:ff:89:9a:32:b0:00:c1:db: 19:f6:47:d3:e2:0e:d9:4c:4d:e6:57:3f:05:d0:d4:26:e1:ba: 1d:05:9e:c7:48:61:c2:7a:23:9b:79:9d:77:14:67:d4:d0:87: 22:8c:ee:58:59:ad:f5:df:c8:13:87:7a:5f:9c:d7:45:34:ab: 17:75:f2:2c:24:fa:68:c9:4d:af:cc:b6:23:32:87:8a:74:74: 59:75:88:60:0f:a1:74:33:7a:54:70:5c:47:77:28:fb:1c:1d: 2a:28:49:d8:e7:7d:f0:ff:76:34:45:69:f4:8f:bc:4e:da:34: 62:d5:59:df:39:a5:66:75:20:65:6a:e7:cd:93:42:30:6c:3a: 61:6f:c5:76:fe:37:6c:ae:32:c0:a5:db:dc:8f:1e:20:86:ac: 75:79:f8:b8:9c:52:ad:59:2f:77:f5:0d:89:e1:c1:41:a4:36: 4b:68:4e:0e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKDY2RjZCODQ0QTlGODA5QUUzMDdCMUI5Q0VFNEJGRDQ3 QzNDNzc3MUIwHhcNMjUwNTE5MTMxNTIwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJiMmVlOC00ZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLfqwtAKQGCANamKYWuPe2TYh4/m+rmy/UcmhJ3XM6bIGE0IK7oBeum8luOl hl5+LkdYlDMidWNvaxQ0aL+cVi3HIOaUElLet/CqJ0/uelC0C3QARDjJM5fvT/wU dgjMXAXJtiAOW4ZH6QT0Hp8Ilq8lnEc9Br8gwCZYwDvzXk2CYo3Gx/ysKp/aSrKU sD6MiKNeW+AocYiE2Xl/+WbpGqNt+BY3NqiiW+Ly4D2pB4GK5zVIsmsuAxgC5SRb 1s1AUojBcT/xH4FBlaisRNJIstRzmg71PayceiOQP3mQWjzDlz5EuHCr9Yu9jV8L 8HKqK+y/smT3dd3sEBkYJ7KQJQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMSClqeh 6t07t4abdJepAwiJitmAMB8GA1UdIwQYMBaAFGb2uESp+AmuMHsbnO5L/UfDx3cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81OERCODdGMjQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENhNHdleHVjN2t2OVI4UEhk eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2YTRSS240Q2E0d2V4dWM3a3Y5UjhQSGR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM5MUYvNThEQjg3RjI0NTcwMTFFRjlDOEI4RTcxQzRGOUFFMDIvNTA2OUE0RTAz NEIzMTFGMEI5M0E2MjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30FEAwDQYJKoZIhvcNAQELBQADggEBAMNPBVvhFfKr idhGA4DsJt5kokG3Y7YckobhVu3P/AD7LevdCvjc30UbpQHAn/owS5+buoiCVdsT wUrDWLZdmvzhk6pww32oF0kwXEXxilzNzEv/iZoysADB2xn2R9PiDtlMTeZXPwXQ 1Cbhuh0FnsdIYcJ6I5t5nXcUZ9TQhyKM7lhZrfXfyBOHel+c10U0qxd18iwk+mjJ Ta/MtiMyh4p0dFl1iGAPoXQzelRwXEd3KPscHSooSdjnffD/djRFafSPvE7aNGLV Wd85pWZ1IGVq582TQjBsOmFvxXb+N2yuMsCl29yPHiCGrHV5+LicUq1ZL3f1DYnh wUGkNktoTg4= -----END CERTIFICATE-----Generated at Mon Jun 2 07:16:54 2025 by rpki-client