$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa File: 58A53DF483EB11F083FC5148C4F9AE02.roa (raw, json) Hash identifier: gHzhXWPrMjpB1xHZWRltAYhKlgAf5L30L7o2Q9t3Hyc= Subject key identifier: 5A:11:9E:1B:5C:45:AC:EF:B8:A5:6F:89:29:87:94:1E:26:48:B1:EB Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 01FF Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa Signing time: Thu 28 Aug 2025 08:45:28 +0000 ROA not before: Thu 28 Aug 2025 08:45:28 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 151080 IP address blocks: 2001:df1:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Aug 28 08:45:28 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68b01727-e93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:7b:6d:78:d5:89:12:f8:6e:61:74:87:b4: 5a:4b:a0:1c:b5:c5:cb:b3:75:f8:f1:50:ed:d4:1a: 40:2e:d4:42:4c:4d:3a:a1:37:34:5a:d4:7c:be:c1: a2:c8:fe:da:3d:eb:a4:5e:5b:2b:17:86:da:6a:75: be:48:27:19:8e:9b:57:19:2b:30:d7:0f:09:c2:7d: 61:59:03:6f:b2:82:ea:a5:be:c2:3e:94:47:3d:5e: e6:cf:eb:7d:64:4b:6a:e7:ff:3f:89:53:dd:8d:0f: 00:e6:90:bd:6c:15:11:84:25:54:7f:a6:f2:6d:bf: 7a:67:a2:0b:2a:ef:b5:e3:42:f8:ea:fc:d2:ad:a9: 16:f8:2a:19:4b:e0:96:5a:2f:d2:3b:66:a4:03:0f: 08:e8:ea:26:af:9e:ab:23:f2:1f:b0:87:50:96:a5: ac:0d:4c:d9:7d:a6:40:73:c9:ba:26:22:e2:ff:dc: 9f:27:49:c4:47:79:3f:ab:7b:b4:d1:e7:8d:5f:72: 84:22:ed:dd:18:8e:76:17:d7:89:f0:b2:ac:f4:bd: 0d:71:22:60:fe:9e:6c:73:b9:83:25:0a:f8:a5:e1: 3b:f1:f0:95:dd:6f:57:09:9a:61:a6:ce:8a:a4:bd: 8b:20:aa:62:27:42:8d:a1:e6:55:79:d7:1b:a6:86: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:11:9E:1B:5C:45:AC:EF:B8:A5:6F:89:29:87:94:1E:26:48:B1:EB X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/58A53DF483EB11F083FC5148C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:c340::/48 Signature Algorithm: sha256WithRSAEncryption 75:67:14:d3:f1:97:6c:93:d1:1a:d9:87:4d:a1:ed:98:a3:1a: c3:67:23:43:a3:60:27:61:07:a1:84:d1:a6:ba:9c:5a:b8:bf: 1e:a7:d2:d5:d7:48:48:c2:45:32:7d:a6:9c:70:29:b7:7a:ee: 45:0b:79:7e:03:ac:57:f4:78:be:8b:7c:1f:32:ff:51:6b:b4: cb:d0:02:60:8e:d2:14:54:ec:31:58:80:42:85:af:d5:bf:20: f2:36:96:81:a3:76:5f:de:21:c6:2c:2f:41:ee:72:64:52:00: 4f:26:ef:7c:1a:24:35:b0:ee:1e:82:bd:6f:b7:c0:8c:3c:a7: 1e:08:fc:8a:4c:86:45:47:f6:e3:6e:49:88:48:4f:c1:df:2d: 1c:fb:a2:12:30:ac:87:fd:e9:bc:87:7f:4e:ac:a2:61:13:1a: 0f:36:71:f9:9f:6b:45:33:12:28:85:37:34:eb:da:83:6d:ce: 19:6c:9b:27:ae:d8:f8:98:f7:2f:20:ef:31:ea:40:78:aa:66: d9:df:ac:ad:db:fc:ce:24:58:d4:e3:fd:df:46:8c:78:93:4f: 7b:76:34:44:76:f5:90:1d:c7:e1:4b:0d:27:7c:83:6c:3a:41: 7e:aa:d2:c6:a9:19:31:a3:50:69:e4:39:36:d8:6b:11:bb:d0: 29:3b:49:24 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjUwODI4MDg0NTI4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwMTcyNy1lOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsR7bXjViRL4bmF0h7RaS6ActcXLs3X48VDt1BpALtRCTE06oTc0WtR8vsGi yP7aPeukXlsrF4baanW+SCcZjptXGSsw1w8Jwn1hWQNvsoLqpb7CPpRHPV7mz+t9 ZEtq5/8/iVPdjQ8A5pC9bBURhCVUf6bybb96Z6ILKu+140L46vzSrakW+CoZS+CW Wi/SO2akAw8I6Oomr56rI/IfsIdQlqWsDUzZfaZAc8m6JiLi/9yfJ0nER3k/q3u0 0eeNX3KEIu3dGI52F9eJ8LKs9L0NcSJg/p5sc7mDJQr4peE78fCV3W9XCZphps6K pL2LIKpiJ0KNoeZVedcbpoa/JwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFoRnhtc RazvuKVviSmHlB4mSLHrMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRDMzAvMEYxRjdDRTg5NjQxMTFFREJBOURDQzRGQzRGOUFFMDIvNThBNTNERjQ4 M0VCMTFGMDgzRkM1MTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xw0AwDQYJKoZIhvcNAQELBQADggEBAHVnFNPxl2yT 0RrZh02h7ZijGsNnI0OjYCdhB6GE0aa6nFq4vx6n0tXXSEjCRTJ9ppxwKbd67kUL eX4DrFf0eL6LfB8y/1FrtMvQAmCO0hRU7DFYgEKFr9W/IPI2loGjdl/eIcYsL0Hu cmRSAE8m73waJDWw7h6CvW+3wIw8px4I/IpMhkVH9uNuSYhIT8HfLRz7ohIwrIf9 6byHf06somETGg82cfmfa0UzEiiFNzTr2oNtzhlsmyeu2PiY9y8g7zHqQHiqZtnf rK3b/M4kWNTj/d9GjHiTT3t2NER29ZAdx+FLDSd8g2w6QX6q0sapGTGjUGnkOTbY axG70Ck7SSQ= -----END CERTIFICATE-----Generated at Wed Sep 10 17:22:27 2025 by rpki-client